Privacy policy

Last updated: 23 October 2026

1. Who is responsible

The controller for your personal data in our online shops dorpi.nl and dorpi.store is: Dorpi, sole proprietorship of Steven Houtenbos, Philitelaan 67-98, 5617 AM Eindhoven, the Netherlands, Chamber of Commerce (KvK) 95212671, VAT ID NL005137746B65, email shop@dorpi.nl, phone +31 6 37468022. Please send questions about privacy to shop@dorpi.nl.

2. Orders

When you order, we process your name, address, email address, phone number (if you provide it), your order and the payment status. We need this to make and ship your order and to communicate with you (Article 6(1)(b) GDPR). We keep invoices and order data for 7 years because Dutch tax law requires it (Article 6(1)(c) GDPR).

Our shop runs on Shopify (Shopify International Ltd., Ireland). Payments are processed by Shopify Payments, PayPal, Klarna or Mollie, depending on the payment method you choose; they receive the data needed for the payment. For shipping, MyParcel and PostNL receive your name and address, and your email address for tracking notifications.

Shopify also uses data about visits and orders in our shop for Shopify Network Intelligence: Shopify combines it with data from other Shopify stores to improve products, advertising and personalisation for our shop. Other stores cannot see your data. We do this based on our legitimate interest in better advertising and a better shop (Article 6(1)(f) GDPR). You can object at any time by emailing shop@dorpi.nl. More information is in Shopify's privacy policy.

3. The map builder

When you search for a place or choose an area in the map builder, we send your search and the chosen area to our own server api.dorpi.nl (at Hetzner Online GmbH, Germany), which creates the 3D preview. Our server passes searches on to the search service LocationIQ without your IP address. Your browser loads the background map directly from CARTO, which sees your IP address. We do this to make the map builder work (Article 6(1)(b) and (f) GDPR). Our server keeps IP addresses in log files for 14 days, for security and troubleshooting.

4. Contact, reviews and newsletter

If you email us or use the contact form, we use your details to reply. We keep this correspondence for up to 2 years after the last message.

We collect reviews with Judge.me and Trustpilot. If you post a review, your name (as you enter it) and your review are public. We only send a review invitation by email if you have consented to this (Article 6(1)(a) GDPR).

We only send a newsletter or a back-in-stock message if you sign up for it (Article 6(1)(a) GDPR). We use Shopify and FlowSend for this. You can unsubscribe at any time via the link in every email.

5. Cookies, analytics and advertising

We always use cookies and similar technologies that the shop needs (such as your cart and the checkout). For everything else we first ask for your consent through the cookie banner (Article 6(1)(a) GDPR and the ePrivacy rules):

Google Analytics 4 (Google Ireland Ltd.): statistics on how the shop is used. We keep this data for at most 14 months.
Google Ads (Google Ireland Ltd.): measuring which ads lead to an order.
Microsoft Clarity (Microsoft Ireland Operations Ltd.): heatmaps and recordings of how visitors use the pages, to improve the shop. Information you type into forms is masked.

You can withdraw or change your consent at any time in the shop's privacy settings. This applies from that moment on.

6. Transfers outside the EU

Some services (Shopify, Google, Microsoft, PayPal, CARTO, LocationIQ) may process data in the United States or Canada. This is based on the EU-US Data Privacy Framework, an adequacy decision or standard contractual clauses of the European Commission.

7. Your rights

You have the right to access, correct, erase, restrict and port your data, and you can object to processing based on our legitimate interest. Email shop@dorpi.nl to do so. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own country.

We do not make decisions about you based solely on automated processing.