Privacy policy

Last updated: 10 September 2026

De Biersalon respects your privacy and processes personal data carefully and in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

This privacy policy explains which personal data we process, why we do so, with whom data may be shared, how long we retain it and what rights you have.

1. who is responsible for your personal data?

The data controller is:

Mr Roel van der Donk, trading as De Biersalon
Kreijerstraat 6
6101 CL Echt
The Netherlands

Dutch Chamber of Commerce registration number (KvK): 82508534
VAT identification number: NL003694828B64
Email: info@debiersalon.nl
Telephone: +31 6 30153189
Website: debiersalon.nl/en

2. which personal data do we process?

Depending on how you use our shop, webshop and services, we may process the following personal data:

your name and contact details, such as your address, email address and telephone number;
billing and delivery addresses;
information about orders, purchases, payments, returns and cancellations;
information about reserved pre-order products;
customer account details, such as the associated email address and account settings;
payment method, payment status and transaction details;
communications by email, contact forms, telephone, social media and WhatsApp;
information you provide when reporting a complaint, damage or loss, potentially including photographs;
newsletter subscriptions and communication preferences;
data needed to send a review invitation;
IP address, browser, device and usage data;
cookie preferences and information about your use of our website;
data needed for security, fraud prevention and compliance with legal obligations.

We do not receive or retain a copy of your identification document for routine age verification. Age verification takes place in our shop or upon delivery by the carrier.

De Biersalon does not store full payment card details itself. These are processed by your chosen payment provider, such as Shopify Payments or PayPal.

3. why do we process personal data?

processing orders and fulfilling contracts

We process personal data to:

process orders and payments;
pick, pack and dispatch products or prepare them for collection;
send tracking information;
contact you about stock discrepancies, delays or problems;
process return, withdrawal and cancellation requests;
issue refunds;
provide customer service;
investigate complaints, damage and lost shipments;
manage customer accounts.

The legal basis is the performance of the contract or taking steps at your request before entering into a contract.

pre-orders and whatsapp

We process your name, telephone number, WhatsApp communications and reservation details to:

add you to our WhatsApp broadcast list;
send pre-order messages;
record and confirm reservations;
inform you when products become available;
arrange payment, collection, combined orders and shipping;
send reminders about outstanding reservations.

Participation in our WhatsApp broadcast list is based on your consent. You can unsubscribe at any time via WhatsApp. Processing specific reservations is also necessary to fulfil the arrangements made.

newsletters and marketing

If you have subscribed, we may send you emails through Shopify Messaging about new products, promotions, events and other developments at De Biersalon.

We send marketing messages based on consent or, where legally permitted, to existing customers about similar products of our own. Every marketing email includes an unsubscribe option.

review invitations

After an order, we may share limited contact and order details with Trustpilot so that Trustpilot can send an invitation on our behalf to review your experience.

Where required, this is based on your consent. In other cases, we rely on our legitimate interest in evaluating and improving our services. You are never obliged to leave a review.

When you post a review on Trustpilot, Trustpilot also processes this data in accordance with its own privacy policy.

website analytics cookies and advertising

With your consent, we may use cookies and similar technologies for:

website analytics;
measuring conversions;
improving and personalising the webshop;
displaying advertising and measuring its effectiveness;
linking activities to Google & YouTube.

Necessary cookies may be used without consent for the operation and security of the webshop. For analytics, personalisation and advertising cookies, we ask for your consent in advance through our cookie banner.

You can change or withdraw your consent at any time through the cookie preferences on our website.

security and fraud prevention

We process data to protect our webshop, payments, customer accounts and business operations against fraud, misuse, unauthorised access and other unsafe or unlawful activities.

We rely on our legitimate interest in protecting our customers and our business and, where applicable, on legal obligations.

legal obligations

We process and retain certain data to comply with legal obligations, including tax recordkeeping, consumer law obligations and requests from competent authorities.

4. with whom do we share personal data?

We do not sell your personal data.

We may share data with parties needed to provide our services, including:

Shopify, for hosting and operating the webshop, customer accounts, orders and other Shopify features;
Shopify Payments and PayPal, for processing and securing payments;
MyParcel, for creating and managing shipments;
PostNL, DPD and DHL, for shipping, tracking and age verification;
Shopify Messaging, for newsletters and customer communications;
Shopify Forms, for data submitted through forms;
Trustpilot, for review invitations;
Google & YouTube, for analytics, conversion measurement and advertising where consent has been given;
Meta and WhatsApp, when you communicate with us through Instagram or WhatsApp or join our WhatsApp broadcast list;
LitCommerce and connected sales channels, insofar as these are used to offer products and process orders;
service providers supporting our webshop, automations, product information, subscriptions, customer service or business operations;
our accountant, administrative service providers and professional advisers;
public authorities and other parties where we are legally required to disclose data.

These parties only receive the data they need for their tasks. Where required, we enter into data processing agreements or other appropriate arrangements to protect personal data.

Some parties, such as payment providers, carriers, Trustpilot, Google and Meta, may act as independent data controllers for certain processing activities. In those cases, their own privacy policies also apply.

5. shopify

Our webshop is provided through Shopify. Shopify processes personal data to enable the webshop, orders, customer accounts, payments, security and supporting features.

Shopify may process information about your use of our webshop and your interactions with other Shopify webshops. For certain enhanced Shopify services, Shopify may act as an independent controller for this processing.

Further information is available in Shopify’s Consumer Privacy Policy. Through Shopify’s privacy portal, you can find more information about Shopify’s processing and the privacy choices available to you.

6. international data transfers

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred to a country without an adequate level of protection, appropriate safeguards are used, such as an adequacy decision, the European Commission’s standard contractual clauses or other legally permitted mechanisms.

7. how long do we retain personal data?

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless a legal obligation or legitimate interest requires longer retention.

We apply the following principles, among others:

Tax and administrative records are generally retained for seven years.
Order and payment data is retained for as long as necessary for fulfilment, administration, warranty matters, complaints and potential disputes.
Customer account data is retained while the account exists and afterwards only for as long as necessary or legally required.
Newsletter data is retained until you unsubscribe or otherwise withdraw your consent.
Cookie preference data is retained in accordance with the settings and applicable retention periods of the relevant cookies.
WhatsApp conversations and pre-order data are retained for as long as necessary for reservations, customer service, subsequent arrangements and maintaining the customer relationship.
Data that is no longer needed is deleted periodically, unless longer retention is necessary because of a legal obligation, an outstanding reservation, a complaint or a dispute.

8. data relating to minors and age verification

Alcoholic products are sold exclusively to people aged 18 or over.

The carrier may ask for valid identification upon delivery. Our staff may verify your age in the shop. De Biersalon does not receive or retain a copy of your identification document during these checks.

Our webshop and services are not intended to knowingly collect personal data from children. Do you believe that a minor has provided personal data to us without consent? Please contact us so that we can investigate and delete the data where necessary.

9. security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised alteration and disclosure.

No digital processing or transmission can be made entirely risk-free. Please do not send unnecessary sensitive information through unsecured channels.

10. automated decision making

De Biersalon does not make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.

Shopify and payment provider systems may automatically check orders and payments for potential fraud or security risks. Where this results in a significant restriction or refusal, the situation may be reviewed manually where appropriate.

11. your privacy rights

Depending on the circumstances, you have the right to:

request access to your personal data;
have inaccurate data corrected;
have personal data deleted;
restrict processing;
object to processing based on a legitimate interest;
receive your data in a portable format;
withdraw your consent at any time;
unsubscribe from marketing communications;
lodge a complaint with a supervisory authority.

You can submit a request to info@debiersalon.nl. We may ask for additional information to verify your identity. We do not routinely request a full copy of an identification document. If additional identification is necessary, we will not request more information than reasonably required.

We respond within the legally applicable period, generally within one month.

12. complaints

Do you have a question or complaint about the processing of your personal data? Please contact us first at info@debiersalon.nl.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens:

Autoriteit Persoonsgegevens – report a concern or lodge a complaint

If you live in another country within the European Economic Area, you can also contact the data protection supervisory authority in your country of residence.

13. external websites and social media

Our website may contain links, integrations or content from external websites and social media, such as Instagram, WhatsApp, Google, YouTube and Trustpilot.

When you use these services, these parties may independently process personal data under their own privacy policies. De Biersalon is not responsible for how external parties process personal data outside our own services.

14. changes

We may update this privacy policy when our services, systems or legal obligations change. The current version is published on our website. The date of the latest update appears at the top.