Privacy Policy

Belthatcraft (hereinafter referred to as “Belthatcraft,” “we,” or “our”) respects the privacy of individuals who visit our website or purchase products via www.belthatcraft.com.

This Privacy Policy outlines how Belthatcraft collects, uses, stores, and otherwise processes personal data when you visit our website, contact us, place an order, or otherwise interact with our services.

Belthatcraft acts as the data controller for personal data processed for the purposes described in this Privacy Policy, except where applicable law dictates that another party determines the purposes and means of processing.

1. Data Controller

The data controller responsible for the processing activities described in this Privacy Policy is:

Brand: Belthatcraft
Email: leather@belthatcraft.com
Website: www.belthatcraft.com

The company information above corresponds to the legal registration details of the entity operating the Belthatcraft business.

2. Personal Data We May Collect

Depending on how you interact with our website, we may process the following categories of personal data:

Name and contact details;
Email address;
Phone number (if provided);
Billing and shipping addresses;
Order details and transaction information;
Correspondence and information provided when contacting us;
Website and account-related information;
IP address and related browser or device information;
Information regarding website preferences and cookie choices;
Other information reasonably necessary to process orders, respond to inquiries, or fulfill applicable legal obligations.

We strive to process only the personal data that is relevant and reasonably necessary for the specific purposes described in this Privacy Policy.

3. How We Use Personal Data

Belthatcraft may process personal data for the following purposes:

Order Processing

We use relevant personal data to process orders, confirm purchases, manage customer accounts (if applicable), communicate regarding orders, and maintain appropriate transaction records.

Customer Communication

We use contact information to respond to inquiries, provide order-related information, and communicate with customers regarding their purchases or inquiries.

Website Operation

We may process certain information to operate, maintain, and improve website functionality and to understand general website usage.

Legal and Accounting Requirements

We may retain and process relevant records to comply with applicable tax, accounting, regulatory, or other legal obligations. Protecting Our Legal Rights

We may retain personal data where it is reasonably necessary to establish, exercise, or defend legal claims, or to maintain appropriate business records.

4. Legal Basis for Processing

Depending on the circumstances, Belthatcraft processes personal data under one or more of the following legal bases pursuant to the GDPR (General Data Protection Regulation):

Performance of a contract: Processing is necessary to process and fulfill orders, or to take steps at your request prior to entering into a contract;
Legal obligation: Processing is necessary to comply with applicable legal, tax, accounting, or regulatory obligations;
Legitimate interests: Processing is necessary for legitimate business purposes, provided such interests are not overridden by the rights and interests of the individual;
Consent: Where required by applicable law and where consent has been obtained.

Where processing is based on consent, such consent may be withdrawn at any time. Withdrawing consent does not affect the lawfulness of processing activities carried out prior to the withdrawal.

5. Payment Processing via Stripe

Payments made through our website are processed by the payment service provider Stripe.

When you make a payment, relevant information required to process the payment may be transmitted to Stripe. Depending on the payment method and transaction details, this information may include your name, email address, billing information, transaction amount, order details, and payment-related information.

Belthatcraft does not require customers to provide full payment card details directly to Belthatcraft for storage.

Stripe processes personal data related to payment processing and may, where applicable, process certain information as a data controller—including for purposes such as payment services, regulatory compliance, fraud monitoring, and the operation of Stripe services. Stripe may also act as a data processor on behalf of business customers for specific processing activities.

Stripe’s privacy and data processing arrangements for the European region apply to the processing activities carried out by Stripe.

For more information, customers may consult Stripe’s applicable privacy-related documentation.

6. Disclosure of Personal Data

Belthatcraft may disclose relevant personal data where reasonably necessary to achieve the purposes described in this Privacy Policy.

Recipients may include:

Payment service providers (including Stripe);
Website, hosting, and related service providers;
Accounting and professional service providers, as required;
Service providers assisting with website operations or order management;
Public authorities, regulatory bodies, or other entities where disclosure is required by law;
Professional advisors where reasonably necessary to establish, exercise, or defend legal claims.

We will not disclose personal data for purposes unrelated to those described in this Privacy Policy unless permitted or required by applicable law.

7. International Data Transfers

Some service providers involved in website operations, payment processing, or other business functions may process personal data outside the European Economic Area (EEA).

When personal data is transferred outside the EEA, Belthatcraft will, where necessary, conduct such transfers in accordance with applicable legal mechanisms under the GDPR, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

Stripe maintains its own frameworks for international data transfers and publishes information regarding its applicable data transfer arrangements.

8. Data Retention

Belthatcraft retains personal data only for as long as is reasonably necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Consequently, different categories of information may be subject to different retention periods.

Customer and Order Records

Information required to manage orders and maintain transaction records may be retained for the duration necessary to fulfill contractual, accounting, tax, and legal obligations.

Accounting and Tax Records

In accordance with Dutch tax and accounting regulations, relevant accounting records, invoices, and transaction records are generally retained for 7 years.

The Dutch Tax and Customs Administration stipulates that businesses generally have a 7-year record-keeping obligation, which includes relevant underlying accounting records and invoices.

If a specific statutory obligation requires a longer retention period, that longer period applies.

For example, certain records related to the EU VAT “One Stop Shop” / “Union Scheme” may be subject to a 10-year retention requirement. Customer Service Communication Records

Records of correspondence and inquiries may be retained for a reasonable period necessary to handle relevant inquiries, maintain appropriate business records, or establish, exercise, or defend legal claims. Website and Technical Records

Certain records related to the website may be retained for an appropriate duration based on their purpose (including maintaining website functionality, monitoring routine usage, and handling operational or legal matters).

When the relevant information is no longer required and there is no legal basis for its continued retention, it will be deleted or otherwise disposed of in accordance with applicable requirements.

9. Cookies

Our website may use cookies and similar technologies to enable website functionality, save preferences, conduct data analysis, and carry out other authorized website operations.

Where applicable law requires consent for specific cookies or similar technologies, such technologies will only be used in compliance with the relevant consent requirements.

You can manage your cookie preferences using the cookie control functions provided on the website.

10. Data Security

Belthatcraft implements organizational and technical measures appropriate to the nature of the personal data and the relevant processing activities.

These measures are designed to protect personal data against unauthorized access, unlawful processing, accidental loss, damage, or destruction.

As no processing environment can completely eliminate all potential risks, we evaluate and review the measures we have implemented based on the nature and specific circumstances of the processing activities.

11. Your GDPR Rights

Subject to the conditions and limitations set forth in applicable law, individuals may have the following rights regarding their personal data:

The right to confirm whether personal data is being processed;
The right to request access to personal data;
The right to request the correction of inaccurate or incomplete personal data;
The right to request the deletion of personal data, subject to the conditions of applicable law;
The right to request the restriction of personal data processing, where applicable;
The right to object to specific processing activities;
The right to data portability, subject to applicable requirements;
The right to withdraw consent, where processing is based on consent.

These rights are subject to the requirements, exceptions, and limitations set forth in the GDPR and applicable Dutch law.

12. How to Exercise Your Rights

Requests regarding personal data should be sent to:

Email: leather@belthatcraft.com

To help us properly handle your request, we may require sufficient information to identify the individual concerned and understand the nature of the request.

Belthatcraft will process valid requests within the applicable statutory timeframes.

13. Complaints

If you believe that our processing of your personal data does not comply with applicable data protection laws, you may contact Belthatcraft using the contact details above.

You also have the right to lodge a complaint with the competent data protection supervisory authority under the GDPR.

For entities established in the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Children’s Data

Our website is aimed at general consumers and is not specifically directed at children.

We do not knowingly solicit or collect personal data from children where such collection would be unlawful under applicable law.

15. Changes to This Privacy Policy

Belthatcraft may update this Privacy Policy from time to time to reflect changes in applicable law, our processing activities, or website operations.

The updated version will be posted on this page, indicating its effective date or date of update.