Privacy Policy

Last updated: 16.05.2026

This Privacy Policy explains how Odject Studio collects, uses, and protects your personal data when you visit www.odjectstudio.com or place an order with us. We are committed to handling your information transparently and in compliance with the EU General Data Protection Regulation (GDPR) and the Dutch implementing legislation (AVG).

1. Who we are

This website is operated by Odject Studio, trading as Odject Studio, a sole proprietorship registered in the Netherlands.

  • Registered address: Nassaukade 165-1, 1053LL Amsterdam, Netherlands

  • KVK (Chamber of Commerce) number: 81566395

  • VAT (BTW) number: NL003577482B42

  • Contact:info@odjectstudio.com

For the purposes of GDPR, Odject Studio is the data controller for the personal data described in this policy.

2. What personal data we collect

We collect the following categories of personal data:

When you place an order

  • Full name

  • Email address

  • Shipping and billing address

  • Phone number (if provided)

  • Order details (products, quantities, prices)

  • Payment information — note: payment details (card numbers, bank details) are processed directly by our payment providers and are not stored by us

When you create an account

  • Email address

  • Password (stored in encrypted form by Squarespace)

  • Order history

When you subscribe to our newsletter

  • Email address

  • First name (if provided)

When you contact us

  • Name, email address, and the contents of your message

When you browse the website

  • IP address

  • Browser type, device type, and operating system

  • Pages visited, time spent, and referring website

  • Cookie identifiers (see Section 8)

3. Why we collect this data and our legal basis

Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

We process your data to fulfill our contract with you when you place an order. This includes processing payment, preparing and shipping your order, handling returns, managing your account, and sending you the related service emails such as order confirmations and shipping notifications. Without this data, we cannot deliver the product you have purchased.

We process your data on the basis of your consent when you sign up for our newsletter or marketing emails. You give this consent actively when you subscribe, and you can withdraw it at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.

We process certain data on the basis of our legitimate interests in running and improving Odject Studio. This includes analysing how visitors use our website so we can improve it, responding to your inquiries when you contact us, and protecting our website against fraud and abuse. We carefully balance these interests against your privacy rights, and you can object to this processing at any time.

We process your data to comply with our legal obligations, in particular Dutch tax and accounting law, which requires us to retain invoice and order records for seven years.

You may withdraw consent for marketing emails at any time using the unsubscribe link in any email, or by contacting us at info@odjectstudio.com. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it.

4. How long we keep your data

We retain your personal data only as long as necessary for the purposes described above, or as required by law.

  • Order and invoice data: 7 years, in accordance with Dutch tax law obligations for business administration

  • Account data: for as long as your account is active; deleted within 30 days of account closure on request

  • Newsletter subscription data: until you unsubscribe

  • Contact form / customer service correspondence: up to 2 years after the inquiry is resolved

  • Website analytics data: typically anonymised after 14 months

When a retention period expires, we securely delete or anonymise your data.

5. Who we share your data with

We do not sell your personal data. We share it only with the following categories of third parties, all of whom act as data processors on our behalf and are contractually bound to protect your information:

Website and e-commerce platform

  • Squarespace, Inc. (United States) — hosts our website, processes orders, and stores customer accounts. Squarespace is GDPR-compliant and uses approved data transfer mechanisms (Standard Contractual Clauses) for data transfers to the United States.

Payment processing

  • PayPal & SQUARESPACE PAYMENTS — processes your payment securely. We do not receive or store your card details.

Shipping and delivery

  • PostNL and any international courier we use to ship your order. They receive your name, shipping address, and contact details for delivery purposes.

Email and marketing

  • [MAILERLITE / SQUARESPACE EMAIL CAMPAIGNS / etc.] — sends transactional and marketing emails on our behalf.

Analytics

  • [GOOGLE ANALYTICS / SQUARESPACE ANALYTICS] — provides aggregated, anonymised statistics about website usage.

Accounting

  • Our accountant and tax adviser, who may receive order and invoice data for the purpose of preparing our business administration.

We may also disclose your data when required by law, regulation, or legal process.

6. International data transfers

Some of our service providers (notably Squarespace and certain analytics tools) are based in the United States. When your data is transferred outside the European Economic Area (EEA), we rely on legally approved safeguards — primarily the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework — to ensure your data receives an equivalent level of protection.

7. Your rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you

  • Right to rectification — you can ask us to correct inaccurate or incomplete data

  • Right to erasure — you can ask us to delete your personal data, subject to our legal retention obligations

  • Right to restrict processing — you can ask us to limit how we use your data in certain circumstances

  • Right to data portability — you can request your data in a structured, machine-readable format

  • Right to object — you can object to processing based on our legitimate interests, and to direct marketing at any time

  • Right to withdraw consent — where we rely on your consent, you can withdraw it at any time

To exercise any of these rights, contact us at info@odjectstudio.com. We will respond within one month of receiving your request.

If you believe we have not handled your data appropriately, you also have the right to file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

8. Cookies

Our website uses cookies — small text files placed on your device — to make the site work and to understand how visitors use it.

Strictly necessary cookies are required for the website and shopping cart to function. These do not require your consent.

Analytics cookies help us understand how visitors interact with our site, so we can improve it. These are only placed if you accept them via our cookie banner.

Marketing cookies may be used to show you relevant advertising on other websites or to measure the effectiveness of our marketing. These are only placed if you accept them.

You can manage your cookie preferences at any time by clearing your browser's cookies or adjusting your browser settings to refuse cookies. Please note that disabling certain cookies may affect how the website functions.

9. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, and alteration. These include encrypted connections (HTTPS), secure password storage, restricted access to personal data, and regular review of our data practices.

No method of transmission over the internet is entirely secure, so we cannot guarantee absolute security. If a data breach occurs that poses a risk to your rights, we will notify you and the Dutch data protection authority within the legally required timeframe.

10. Children

Our website and products are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently done so, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review it periodically.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

Odject Studio
Nassaukade 165-1
1053LL Amsterdam
Netherlands

info@odjectstudio.com