cutepinups.com  —  this version applies from 28 August 2026 and replaces all earlier versions.

1. About this policy

We care about your privacy. We only collect and use personal data that we genuinely need to run our webshop and serve you well, and we never sell your data or hand it to third parties for their own marketing purposes.

This policy explains what personal data we collect, why, who we share it with (and why), how long we keep it, and what rights you have. If anything here is unclear, our privacy contact is happy to help — see the contact details at the end.

2. Who we are

Kalpa VOF trading as Cute Pinups

Frederik van Eedenhove 4, 3438 PW Nieuwegein, The Netherlands

Phone: +31 6 28401925

Email: agendakalpa@gmail.com

3. Cutepinups.com and kalpa.nl are sister websites

Cutepinups.com is a separate website, but it’s operated by the same company, Kalpa VOF, from the same office, and orders here are handled the same way as orders placed on kalpa.nl. Because of this, customer data may be shared between our sister websites, cutepinups.com and kalpa.nl, where that helps us serve you — for example, if you’re a customer of both. Both sites remain subject to the safeguards described in this policy.

4. The parties who help us process your data

To run our webshop, we work with a small number of trusted service providers. Each of them only processes your data to do their specific job for us, under a data processing agreement, and none of them may use your data for their own purposes.

WooCommerce — our webshop platform

Our online shop runs on WooCommerce, hosted with a professional hosting provider based in the Netherlands under a data processing agreement. That provider only processes data to keep our website running and does not use it for its own purposes, and applies appropriate technical and organisational security measures, including encryption.

Pay.nl — payments

We use Pay.nl to process payments. Pay.nl handles your name, address, and payment details (such as your bank account or card number) to complete your transaction securely. Pay.nl does not retain your data for longer than legally required, and applies appropriate technical and organisational security measures.

PostNL, FedEx, and other carriers — delivery

To get your order to you, we share your name, address, and place of residence with the carrier handling your delivery — usually PostNL or FedEx, and occasionally another carrier where that’s the better fit for your order. Carriers only use this data to deliver your package, including where they engage a local subcontractor for the final leg of delivery.

As an extra privacy measure, we ship all calendars and similar products in plain, neutral packaging, so the contents of your order aren’t visible or identifiable to anyone else who happens to see the parcel.

Mailchimp — email newsletter

We may offer a newsletter in the future. If we do, and you sign up for it, we’ll use Mailchimp to send it. Mailchimp stores your name and email address securely and never uses them for its own purposes. Every newsletter would include an unsubscribe link, and Mailchimp uses tracking technology to show us aggregate statistics such as open and click rates.

Gmail — business correspondence

We use Gmail for our day-to-day business email. Google applies appropriate technical and organisational security measures to protect this correspondence, and we treat all email traffic with you as confidential.

5. Why we process your data

• To process and deliver your order, including payment and shipping.
• To handle customer service questions, returns, or warranty claims.
• To send you our newsletter, but only if you’ve actively signed up for it — we don’t use your data for marketing you haven’t asked for.
• To meet our legal and tax obligations, for example keeping financial records for the statutory retention period.

Data collected automatically through our website (such as your IP address, browser, and operating system) is used only to keep the site running smoothly and to understand, in aggregate, how visitors use it — this data doesn’t identify you personally.

6. Cookies

Our website uses Google Analytics cookies to understand, in aggregate, how visitors use our site. We only place these once you’ve given consent via our cookie banner; you’re always free to decline. We haven’t allowed Google to use this data for any of its other services. If we ever add cookies from other third parties, we’ll list them here.

7. International data transfers

Our webshop and hosting provider are based in the Netherlands, so no international transfer applies there. Some of our other service providers — including Google (Gmail and Analytics) and, if we introduce a newsletter, Mailchimp — are based in, or process data in, the United States. Where that’s the case, the transfer is protected either by the European Commission’s EU-U.S. Data Privacy Framework or by standard contractual clauses, both of which are recognised, current legal mechanisms under EU data protection law for sending personal data outside the EU/EEA.

8. How long we keep your data

We keep your customer and order data for as long as you’re an active customer. If you tell us you no longer wish to use our services, we treat this as a request to be forgotten and anonymise your profile, aside from what we’re legally required to retain.

For bookkeeping, we don’t store individual customer invoices in our accounting records — sales per sales channel are combined into a single monthly summary entry. This means your personal details aren’t kept as part of our financial administration beyond what naturally exists in the webshop, payment, and shipping records described above, which we retain for the Dutch statutory period of 7 years.

9. Your rights

Under Dutch and EU data protection law, you can ask us at any time to:

• see the personal data we hold about you (access);
• correct data that’s inaccurate or incomplete (rectification);
• limit how we use your data (restriction);
• receive your data in a portable, machine-readable format (portability); or
• object to how we’re using your data (objection).

To use any of these rights, contact our privacy contact using the details below. We’ll respond within 30 days. To protect you against fraud, we normally only send data or confirmations to the email address we already have on file for you; if you’d like it sent elsewhere, we’ll first ask you to verify your identity.

If we uphold an objection, we stop processing your data immediately while we look into it, and permanently once we’ve confirmed it’s justified. We don’t use your data for automated decision-making or profiling.

You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at any time if you believe we’re handling your data incorrectly.

10. Sharing with authorities

In specific cases, we may be legally required to share your data as part of a tax or criminal investigation. If this happens, we’ll only do so to the extent the law requires, and we’ll push back wherever the law gives us room to do so.

11. Changes to this policy

We may update this policy from time to time; the most recent version is always available on this page. If a change affects how we handle data we’ve already collected about you, we’ll let you know by email.

12. Contact

Kalpa VOF trading as Cute Pinups

Frederik van Eedenhove 4, 3438 PW Nieuwegein, The Netherlands

Phone: +31 6 28401925

Email: agendakalpa@gmail.com