Your data.
Only where needed.

1. Who we are

This webshop is operated by IMPÓSABLE By Foto de Vakman, established at Marktstraat 10 5401 GH, Uden The Netherlands, registered with the Dutch Chamber of Commerce under number 16031236, VAT number NL807549083B01. For privacy questions you can reach us at support@imposable.nl.

2. What data we collect

We only collect the data needed to run this shop:

• Order data: name, email address, phone number, delivery and billing address.
• Payment data: which payment method you used and the status of the payment. We never see or store full card or account numbers; those are handled by our payment provider PAY.
• Contact data: the name, email address and message you send through the contact form.
• Technical data: your IP address is stored in hashed form only, for fraud prevention; your language choice and cart live in a functional session/cookie.

3. Why we use it

We use your data to process and ship your order, to keep you informed about it, to handle returns and warranty, to answer your questions and to meet legal obligations such as tax record-keeping. We do not sell your data and we do not use it for advertising without your consent.

4. Payment provider

Payments are processed by PAY. (Pay.nl). Your payment details are exchanged directly between you and PAY. over an encrypted connection. We only receive the payment status and a reference — never your full account or card details.

5. How long we keep your data

Order and invoice data is kept for 7 years, as required by Dutch tax law. Contact form messages are kept for up to 2 years so we can help you with follow-up questions. Technical log files are automatically deleted after 30 days at the latest. Data that is no longer needed is deleted.

6. Sharing with third parties

We only share your data with parties that are needed to fulfil your order: the carrier (name and delivery address) and the payment provider (payment status and the customer data required for the payment). We have processing agreements with these parties where required. We never share your data with other parties for commercial purposes.

7. Your rights

Under the GDPR you have the right to access, correct or delete your personal data, to limit its processing, to data portability and to object to processing. Send your request to support@imposable.nl and we'll respond within one month. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security

This website uses an encrypted connection (HTTPS) and we take appropriate technical and organisational measures to protect your data against loss and unauthorised access, including encrypted storage of sensitive settings and hashed IP addresses.

9. Changes

We may update this privacy policy. The current version is always available on this page, with the date of the latest change at the top.