LEGAL · COMPANY INFORMATION

Legal Information

The registered details of the company operating this webshop, plus the standard legal disclaimers around content accuracy, external links, and intellectual property — all required under Dutch and EU law. For our purchase terms, see terms of service; for data handling, see our privacy policy.

Last updated: 10 June 2026 · Version 1.0

01

Overview & scope

This privacy policy describes how Uviqs processes personal data collected through our webshop, customer service channels, and the order and production process. Uviqs supplies custom UV-printed stainless steel bottles to business customers across Europe.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and applicable Dutch implementation laws.

This policy covers data we collect through the Uviqs webshop, sample requests, design uploads, customer service exchanges, and our communications with you. It does not cover third-party websites linked from our pages.

02

Data controller

For the purposes of the GDPR, the data controller of personal data collected through this webshop is:

Legal entity
Uviqs
Registered office
Tolweg 10
3741 LM Baarn
Netherlands
Chamber of Commerce (KvK)
31046968
VAT number
NL805110896B01
Privacy contact
Contact form →

For all questions about your personal data, please use our contact form. We typically respond within one business day.

03

What personal data we collect

We collect the following categories of personal data, depending on how you interact with us:

Identification & contact data

  • Name, job title, business name
  • Email address, phone number
  • Billing and shipping addresses

Account & order data

  • Account credentials (where you create a B2B account)
  • Order history, products, quantities, order notes
  • Sample requests and approval status
  • Invoice and payment records

Design & artwork data

  • Artwork files you upload for printing (logos, designs, brand assets)
  • Production notes and approved sample files

Payment data

  • Payment method, transaction reference, and billing details
  • Note: full card numbers and bank credentials are processed directly by our payment providers — Uviqs does not store them

Communication data

  • Emails, contact form submissions, chat messages, phone notes
  • Marketing preferences and subscription status

Technical data

  • IP address, browser type, device and operating system
  • Pages visited, referral source, session duration
  • Cookie identifiers (see Section 9)

B2B contextUviqs sells primarily to business customers. Most contact details we hold are professional rather than personal, but they remain protected as personal data under the GDPR.

04

Why we collect it (purposes & legal basis)

Under the GDPR, we may only process personal data when there is a valid legal basis. For Uviqs, the bases used are:

Performance of a contract (Art. 6(1)(b))
To process and fulfil your orders, produce printed bottles, handle samples, manage shipping, respond to support requests, and process returns.
Legal obligation (Art. 6(1)(c))
To meet tax, accounting, and other legal requirements — for example, keeping invoices and order records for the statutory retention period (typically 7 years under Dutch tax law).
Legitimate interest (Art. 6(1)(f))
To run and improve our business operations: security, fraud prevention, analytics on our webshop, internal reporting, and limited direct marketing to existing business customers.
Consent (Art. 6(1)(a))
For non-essential cookies, marketing communications to new contacts, and any optional data we ask you to share. You can withdraw consent at any time.
05

How we collect personal data

We collect data through the following channels:

  • Forms on our webshop — checkout, account registration, sample request, contact form
  • Direct communication — emails, phone calls, chat conversations with our team
  • Cookies and similar technologies — when you browse our webshop (see Section 9)
  • File uploads — design files and artwork you provide for printing
  • Third parties — payment processors confirm transactions; shipping carriers confirm delivery; analytics providers report aggregated traffic data

We do not buy or rent personal data from third-party data brokers.

06

How long we keep personal data

We keep personal data only as long as needed for the purpose it was collected for, plus any statutory retention period. Approximate retention windows:

Order, invoice & accounting data
7 years from the end of the fiscal year (Dutch tax law requirement).
Customer account data
As long as the account is active, plus up to 2 years after the last activity. After this we delete or anonymise the data.
Sample request & non-converting enquiry data
Up to 2 years from the last interaction, unless a contract is concluded (in which case order retention applies).
Marketing preferences
Until you withdraw consent. We keep an unsubscribe record to honour your withdrawal.
Artwork files
For the duration of the customer relationship plus 3 years, to enable reprints. You can request earlier deletion.
Cookie data
Per cookie type — see our cookie policy for individual lifetimes.
07

Who we share personal data with

We share personal data only with parties that need it to deliver your order or to comply with legal obligations. We do not sell personal data, ever.

Service providers (processors)

  • Shopify — webshop platform, hosting, checkout, B2B accounts
  • Payment providers — credit card, iDEAL, SEPA, invoice payment processors
  • Shipping carriers — courier and freight partners that deliver your order
  • Email and CRM tools — for order notifications and customer service
  • Accounting and ERP software — for invoicing and order administration
  • Analytics providers — for aggregated webshop usage data (consent-based)

Each processor operates under a written data processing agreement that requires them to handle data only on our instructions and to apply appropriate security measures.

Public authorities

We share data with tax, customs, or other public authorities where required by law.

What we don't doWe don't sell personal data, we don't share it with advertising networks for cross-site retargeting without consent, and we don't disclose data to other parties for their own marketing purposes.

08

International data transfers

Some of our service providers (notably Shopify and certain analytics or email tools) are based outside the European Economic Area (EEA) — for example in Canada, the United Kingdom, or the United States.

When we transfer personal data outside the EEA, we use the safeguards required by the GDPR:

  • Adequacy decisions — for transfers to countries the European Commission has formally recognised as providing adequate protection (e.g., the UK, Canada for commercial organisations)
  • Standard Contractual Clauses (SCCs) — EU-approved contract terms used with all other non-EEA processors
  • Supplementary measures — encryption, access controls, and contractual safeguards where additional protection is needed

You may request a copy of these safeguards by contacting us via the contact form.

09

Cookies & tracking technologies

We use cookies and similar technologies to operate the webshop, remember your preferences, and (with your consent) measure performance and improve our service.

Cookie categories

  • Strictly necessary — required for checkout, security, and basic functionality (no consent required)
  • Functional — remember preferences such as language and saved bottle designs
  • Analytics — aggregated traffic and behaviour data, used to improve the site (consent required)
  • Marketing — limited targeted messaging or retargeting (consent required)

You can manage cookie preferences at any time through the cookie banner on our webshop, or via your browser settings. Withdrawing consent does not affect data collected before withdrawal.

For the full list of cookies, lifetimes, and providers, see our cookie policy.

10

Your rights under the GDPR

You have the following rights regarding personal data we hold about you:

Right of access (Art. 15)
Request a copy of the personal data we hold about you.
Right to rectification (Art. 16)
Correct inaccurate or incomplete data.
Right to erasure (Art. 17)
Request deletion of your data, subject to legal retention requirements.
Right to restrict processing (Art. 18)
Ask us to pause processing in specific circumstances.
Right to data portability (Art. 20)
Receive your data in a structured, machine-readable format and transmit it to another controller.
Right to object (Art. 21)
Object to processing based on legitimate interest or for direct marketing.
Right to withdraw consent
Withdraw any consent you have previously given — for marketing or non-essential cookies, for example.

To exercise any of these rights, contact us using our contact form. We respond within one month of receiving a verified request, as required by the GDPR. For complex requests, this period can be extended by up to two further months — we'll let you know if that's the case.

There is no fee for exercising these rights in normal circumstances. We may charge a reasonable fee for manifestly unfounded or excessive requests, as permitted under Art. 12(5) GDPR.

11

Security measures

We apply appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:

  • Encryption of data in transit (HTTPS/TLS) and at rest where supported by our providers
  • Role-based access controls — only staff who need access for their job have it
  • Strong authentication, including multi-factor authentication for admin systems
  • Regular software updates and security reviews
  • Written processing agreements with all third-party processors
  • Staff training on data protection and confidentiality

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Dutch Data Protection Authority within 72 hours and inform you directly where required by Art. 34 GDPR.

12

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, new processors, or changes in the law. The version and last-updated date at the top of this page will always reflect the current version.

For material changes — particularly those that affect how we process your data or your rights — we will notify you by email or through a prominent notice on the webshop before the changes take effect.

13

Contact & complaints

For any question about this privacy policy or about how we process your personal data, please use our contact form. We respond within one business day during normal business hours.

Right to lodge a complaint

If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is:

Autoriteit Persoonsgegevens (Dutch Data Protection Authority)Website: autoriteitpersoonsgegevens.nl
You can file a complaint online via the authority's website.

We would encourage you to contact us first so we can try to resolve any concern directly.

Legal or commercial question?

We typically respond to legal, commercial, and general enquiries within one business day. Use the contact form to reach us.

Get in touch →