{"id":51207,"date":"2018-05-21T08:37:27","date_gmt":"2018-05-21T06:37:27","guid":{"rendered":"https:\/\/www.likes-kopen.nl\/privacy-policy\/"},"modified":"2026-10-08T14:20:53","modified_gmt":"2026-10-08T12:20:53","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.likes-kopen.nl\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p><em>Last updated: 8 October 2026<\/em><\/p>\n<p>This privacy policy explains which personal data we process when you visit likes-kopen.nl or order from us, why we do so, on what legal basis, who we share data with, how long we keep it and what rights you have. It applies to our website in all languages.<\/p>\n<p><strong>Contents<\/strong><\/p>\n<ol>\n<li><a href=\"#controller\">Who is responsible?<\/a><\/li>\n<li><a href=\"#data\">What data we process and why<\/a><\/li>\n<li><a href=\"#cookies\">Cookies and similar technologies<\/a><\/li>\n<li><a href=\"#recipients\">Who receives your data<\/a><\/li>\n<li><a href=\"#transfers\">Transfers outside the European Economic Area<\/a><\/li>\n<li><a href=\"#rights\">Your rights<\/a><\/li>\n<li><a href=\"#complaint\">Making a complaint<\/a><\/li>\n<li><a href=\"#decisions\">Automated decisions<\/a><\/li>\n<li><a href=\"#changes\">Changes<\/a><\/li>\n<\/ol>\n<h2 id=\"controller\">1. Who is responsible?<\/h2>\n<p>The controller responsible for processing your personal data is:<\/p>\n<ul>\n<li>Huge Upward LTD, 20\u201322 Wenlock Road, London N1 7GU, United Kingdom<\/li>\n<li>registered with Companies House under number 12360848<\/li>\n<li>e-mail: <a href=\"mailto:support@likes-kopen.nl\">support@likes-kopen.nl<\/a><\/li>\n<\/ul>\n<p>Huge Upward LTD runs the online shop likes-kopen.nl. If you have a question about privacy or want to exercise your rights, e-mail us at support@likes-kopen.nl (contact person for privacy matters: Marek). As we offer our services to people in the European Union, the General Data Protection Regulation (GDPR) applies to us; as we are established in the United Kingdom, UK data protection law (the UK GDPR) also applies.<\/p>\n<h2 id=\"data\">2. What data we process and why<\/h2>\n<p>For each activity below, we explain which data we process, for what purpose, on which legal basis under Article 6(1) GDPR (point a: consent; point b: performance of a contract; point c: legal obligation; point f: legitimate interests) and how long we keep it.<\/p>\n<h3 id=\"orders\">Orders and delivery<\/h3>\n<p><strong>What data:<\/strong> your e-mail address, first name and surname, country, address, postcode and town or city (these details are required), your phone number (optional), what you order (service, quantity, price and any discount code), the username or the link to the profile, post or video you are ordering for, the statements you tick when you order (for example that you are ordering as a private individual or that the profile is public), any note you add to your order, the IP address and browser details you order with, and the status of your payment.<\/p>\n<p><strong>Why:<\/strong> to accept, carry out and invoice your order; to send you e-mails about your order (confirmation, invoice, status and any refund); to handle questions and complaints; to meet our accounting and tax obligations; and to prevent fraud and misuse and defend ourselves in a dispute.<\/p>\n<p><strong>Legal basis:<\/strong> performance of the contract (point b); the statutory record-keeping and tax obligations that apply to us in the European Union (point c); the record-keeping and tax obligations in the United Kingdom, where we are established (our legitimate interest in complying with them, point f); preventing fraud and defending ourselves in a dispute (legitimate interests, point f).<\/p>\n<p>Without the required data we cannot carry out your order. You are not legally obliged to provide it. If you order for someone else&#8217;s profile, we also process that person&#8217;s public username or link. Only do this if that person agrees.<\/p>\n<p>For delivery, we pass only the username or link, the service and the quantity to our technical suppliers. We do not pass on your name, e-mail address or payment details.<\/p>\n<p><strong>How long:<\/strong> we keep order and invoice data for as long as tax and accounting rules require, up to 10 years after the end of the year of the order. After that we delete or anonymise it.<\/p>\n<h3 id=\"payment\">Payment<\/h3>\n<h4>Mollie<\/h4>\n<p>All payments in our web shop except cryptocurrency payments are handled by Mollie B.V. (Amsterdam, the Netherlands), a payment service provider licensed by the Dutch central bank (De Nederlandsche Bank). This includes card payments. Depending on the payment method you choose, the provider of that method (for example your bank or Klarna) also processes your payment details. Mollie and these providers process the payment details as independent controllers under their own privacy notices. Mollie processes your name, address details and payment details, such as your bank account number or your card details. You enter your card details directly with Mollie; we never receive them. Mollie passes on to us the details needed to match the payment to your order, such as the payment method, the result of the payment, a transaction reference and, depending on the method, possibly the name of the account holder or cardholder, the IBAN or the last digits of your card. We pass your data to Mollie to perform the contract (Article 6(1)(b) GDPR). Mollie has taken appropriate technical and organisational measures to protect your personal data and does not keep your data longer than the statutory periods allow.<\/p>\n<h4 id=\"klarna\">Klarna<\/h4>\n<p>If you pay with Klarna, Klarna Bank AB (publ) (Stockholm, Sweden) receives your contact details and the details of your order. Klarna processes this data as an independent controller; we pass it on to perform the contract (Article 6(1)(b) GDPR). Klarna may check your identity and creditworthiness and decides, possibly automatically, whether you can use this payment method. Klarna explains your rights in this regard in its own privacy notice.<\/p>\n<h4 id=\"coinbase\">Coinbase<\/h4>\n<p>If you pay with cryptocurrency, that payment runs through Coinbase Commerce, a service of Coinbase, Inc. (United States), which processes the payment details as an independent controller. The transfer to the United States is necessary to carry out the payment you chose (Article 49(1)(b) GDPR). Coinbase processes your wallet details and the transaction data needed to confirm the payment. Coinbase has taken appropriate technical and organisational measures to protect your data and does not keep it longer than the law allows.<\/p>\n<h3 id=\"saved-accounts\">Remembering accounts for your next order<\/h3>\n<p>If you enter a username when you order, we look up the public profile (name, profile picture and number of followers or views). This lets you see that we have found the right profile and that it is public. For this we use a technical service provider that retrieves public profile data. We never ask for your password.<\/p>\n<p>Once the profile has been found, you will see the box \u201cRemember this account for a next order\u201d. This box is ticked by default; you can untick it before you order. If it stays ticked, we store the following after your payment: the platform, the username, the display name, the link to the profile picture, the number of followers or views at the time of your orders (so you can see your growth) and how often you have ordered for this account. If you have a customer account, we link this data to your customer account; you can remove the saved account under My account \u203a My accounts. If you order without a customer account, we link it to a code that we calculate from your e-mail address with a secret key (not your e-mail address itself), and your browser also stores the username itself (smm_sa_accounts_v1 in your browser&#8217;s storage), so that next time you can choose it with one tap. If you untick the box, we store nothing for this account and remove it if we stored it before. We never show saved accounts to other customers.<\/p>\n<p><strong>Legal basis:<\/strong> looking up the profile is necessary to perform the contract (point b); storing it is based on our legitimate interest in letting you order faster (point f). <strong>How long:<\/strong> without a customer account, up to 24 months after your last order; with a customer account, until you remove the saved account under My accounts or have your customer account deleted.<\/p>\n<h3 id=\"customer-account\">Customer account and Star Points<\/h3>\n<p>You can create a customer account at checkout or via My account. We then store your e-mail address, name and address details, your password (only in hashed form, not the password itself), your orders and your Star Points. The date-of-birth field at registration and in My account is optional; we do not currently use it.<\/p>\n<p>With Star Points you collect points, for example for orders, when you register, when you complete your profile, when you log in each day and when someone places an order through your personal referral link. To do this, we keep track of the points you earn and use, and we send you an e-mail when your points balance changes. If someone comes to our website through your referral link and that visitor allows \u201cMarketing\u201d in the cookie banner, we set the cookie wp-ywpar_referral_token (1 week) on that visitor&#8217;s device, so that we can award the points to you.<\/p>\n<p>On the <a href=\"https:\/\/www.likes-kopen.nl\/en\/hall-of-fame\/\">Hall of Fame<\/a> and <a href=\"https:\/\/www.likes-kopen.nl\/en\/vip-club\/\">VIP Club<\/a> pages, we show the ten customers with the most Star Points over different periods. We show the display name of their customer account (usually the first name and the first letter of the surname), their level and their number of points. The source code of these pages also contains the internal number of their customer account. Would you rather not appear there? E-mail us and we will take you off the list.<\/p>\n<p><strong>Legal basis:<\/strong> performance of the contract for your customer account and the points programme (point b); our legitimate interest in rewarding loyal customers and making them visible (point f). <strong>How long:<\/strong> for as long as you have your customer account. You can have your customer account deleted at any time; we then keep your order data for as long as stated under <a href=\"#orders\">Orders and delivery<\/a>.<\/p>\n<h3 id=\"customer-service\">Customer service<\/h3>\n<p>If you contact us via the chat, by e-mail or by phone, we process your name, your e-mail address or phone number, your question, our answer and, if it is about an order, the details of that order. We use Richpanel for the chat and for handling e-mails. Richpanel is linked to our online shop and receives the details of orders (name, e-mail address, phone number, address and services ordered), even if you do not contact us, so that we can answer your question straight away. Our customer service is handled by freelancers in the Philippines who work on our behalf. In Richpanel and in our online shop, they see the data they need to answer your question and handle your order. You can read how the chat button on our website works under <a href=\"#cookies\">Cookies and similar technologies<\/a>.<\/p>\n<p><strong>Legal basis:<\/strong> performance of the contract if your question is about an order (point b); otherwise our legitimate interest in answering questions (point f). <strong>How long:<\/strong> up to 24 months after your last contact with us.<\/p>\n<h3 id=\"emails\">E-mails about our services<\/h3>\n<p>After an order, we send you a series of e-mails with information and offers about our services (up to 28 e-mails over about four weeks). After an order for Dutch Instagram followers, you also receive a series of 6 e-mails over about four weeks. We also send customers a newsletter regularly, sometimes several times a week. For this we use your name, your e-mail address, your language and which services you bought and when.<\/p>\n<p><strong>Legal basis:<\/strong> our legitimate interest in bringing our services to our customers&#8217; attention (point f). We send these e-mails under the exception for existing customers in Article 11.7(4) of the Dutch Telecommunications Act (Telecommunicatiewet): only to customers and only about similar services of our own. You can unsubscribe at any time, free of charge, via the link at the bottom of every e-mail or by e-mailing us. After that, you will still receive e-mails about your orders (confirmation, invoice and status).<\/p>\n<p>In these e-mails, and in the reminders about an unfinished order, we track whether you open them and which links you click, to see whether they are useful (legitimate interests, point f). We do not track this in the e-mails about your order.<\/p>\n<p>Up to and including 8 October 2026, you could also sign up for e-mail updates and news via Klaviyo by ticking the box for this at checkout. We then passed your e-mail address, your country and, if you had entered it, your phone number to Klaviyo (consent, point a). Through a Klaviyo sign-up form on our website, you could also sign up directly with Klaviyo. That box and those forms no longer exist. We had your sign-up details deleted from Klaviyo on 8 October 2026 (see <a href=\"#klaviyo\">Klaviyo<\/a>). We send our newsletter and the other e-mails described above with FunnelKit, not through Klaviyo.<\/p>\n<p><strong>How long:<\/strong> until you unsubscribe or object, and no later than 3 years after your last order. After you unsubscribe, we keep only your e-mail address, on a list of addresses we no longer e-mail, so that we can respect your choice.<\/p>\n<h3 id=\"reminders\">Reminders about an unfinished order<\/h3>\n<p>If you enter your e-mail address at checkout, FunnelKit (software on our own server) immediately saves your e-mail address, the other details you have already entered (such as your name and phone number) and the contents of your shopping cart, even if you have not yet clicked the order button. If you do not complete the order, we use this data to send you reminders: starting half an hour later, up to 15 e-mails over about nine days. The reminders stop when you complete the order or unsubscribe via the link in the e-mail.<\/p>\n<p><strong>Legal basis:<\/strong> our legitimate interest in helping you complete your order (point f). <strong>How long:<\/strong> up to 30 days after the last reminder.<\/p>\n<h3>Reviews<\/h3>\n<p>Three days after we have carried out your order, we send you an e-mail asking you to write a review, even if you ordered without a customer account. If you write a review, we publish it on the product page with the name you enter, the date and your star rating. A profile picture from Gravatar is shown next to each review: if you have set up a picture at Gravatar for the e-mail address you write the review with, that picture appears; otherwise a default image is shown. For this, a hash of your e-mail address is included in the page&#8217;s source code (see <a href=\"#cookies\">Cookies and similar technologies<\/a>).<\/p>\n<p><strong>Legal basis:<\/strong> for the invitation, our legitimate interest in collecting reviews (point f); for publication, your consent, which you give by submitting the review (point a). You can always ask us to delete your review. <strong>How long:<\/strong> the invitation data (name, e-mail address, date sent and date of your response) up to 12 months after the invitation; your review for as long as it is published.<\/p>\n<h3 id=\"origin\">Where orders come from<\/h3>\n<p>If you allow \u201cStatistics\u201d in the cookie banner, WooCommerce stores the following in cookies on your device: how you arrived at our website (for example via a search engine, an advert, an e-mail or another website, with any campaign details), the first page you visited, the number of visits and your type of device and browser. This tells us through which channels visitors order from us. These are the sbjs_\u2026 cookies, which expire when you close your browser (sbjs_session after 30 minutes). In that case our own software also records how you arrived (analytics_pro_tracking in your browser&#8217;s session storage, until you close the tab). If you complete an order, we store this data with the order. With every order we also store a simple source category (such as \u201cDirect\u201d or \u201cGoogle Organic\u201d), which our software derives from what your browser sends when you place the order (the referring page and any campaign details in the link); for this, it stores nothing on your device. We do not share this data with anyone.<\/p>\n<p><strong>Legal basis:<\/strong> for the cookies, the storage in your browser and storing this data with your order, your consent (point a; Article 11.7a(1) of the Dutch Telecommunications Act), which you can withdraw at any time via <a href=\"#cookie-settings\" class=\"ebc-open\" rel=\"nofollow\">Cookie settings<\/a>; for the source category, our legitimate interest in knowing which channels lead to orders (point f). <strong>How long:<\/strong> the cookies as stated above; where data is stored with an order, for as long as the order data.<\/p>\n<h3>Security and technical data<\/h3>\n<p>On every visit, our hosting provider, Rocket.net, and our security and performance network, Cloudflare, process technical data: your IP address, the time, the page requested, the page you came from and your browser. This is necessary to display the website, keep it secure and track down faults. We log failed login attempts with the IP address, the username used and the time, to block attacks. We keep a log of the e-mails our website sends, with the recipient, the subject, the time and whether sending succeeded, but not the content. We log requests for pages that do not exist with the address, the page you came from and your browser, but not the IP address. We record your choice in the cookie banner as proof: a random code, your choice, the time, the version of the banner text and the page on which you made your choice (without the rest of the web address), without your IP address.<\/p>\n<p><strong>Legal basis:<\/strong> our legitimate interest in a secure, properly working website (point f); for recording your cookie choice, our legal obligation to be able to demonstrate that you gave consent (point c, in conjunction with Article 7(1) GDPR) and, if you allow nothing, our legitimate interest in being able to show that we respect your choice (point f). <strong>How long:<\/strong> server log files for a few months at most, failed login attempts up to 12 months, the e-mail log one month, the record of your cookie choice 12 months.<\/p>\n<h2 id=\"cookies\">3. Cookies and similar technologies<\/h2>\n<p>Cookies are small files that a website stores on your device. Some services also use your browser&#8217;s storage, or scripts that send data to their own servers. Below we explain what happens on our website.<\/p>\n<h3>Your choice in the cookie banner<\/h3>\n<p>On your first visit, a banner at the bottom of the screen asks whether you allow cookies and similar technologies for <strong>Statistics<\/strong> (Google Analytics and where orders come from), <strong>Marketing<\/strong> (Google&#8217;s advertising features if you also allow \u201cStatistics\u201d, the referral cookies, recognising clicks from our e-mails and remembering the products you have viewed) and <strong>Chat<\/strong> (Richpanel&#8217;s <a href=\"#rp-customer-widget-home\" class=\"lk-chat-link\">live chat<\/a>, which then loads straight away). You choose \u201cAccept all\u201d or \u201cReject all\u201d, or use \u201cLet me choose\u201d to set what you allow for each category. If you close the banner with the \u00d7 without making a choice, this counts as a refusal: we then use only the cookies needed for the website to work (see below) and do not ask you again for 6 months. As long as you have not allowed anything, we load nothing from Google Analytics; in that case we load Richpanel only if you open the chat yourself. We store your choice for 6 months in the cookie eb_consent; through the wp_consent_\u2026 cookies, our website passes that choice on to the plugins that run our online shop. You can change your choice and withdraw your consent at any time via <a href=\"#cookie-settings\" class=\"ebc-open\" rel=\"nofollow\">Cookie settings<\/a>, a link that is also at the bottom of every page. If you withdraw your consent, we delete those services&#8217; cookies and the data they keep in your browser&#8217;s storage, and reload the page. At your request, we will have data that these services have already received deleted (see <a href=\"#rights\">Your rights<\/a>).<\/p>\n<h3>Cookies and storage for website functions<\/h3>\n<ul>\n<li>Shopping cart and session (WooCommerce): woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_\u2026 (up to 2 days), to remember your shopping cart.<\/li>\n<li>Logging in (WordPress): wordpress_logged_in_\u2026 and wordpress_sec_\u2026 (until you log out, or 14 days if you choose to stay logged in).<\/li>\n<li>Language (WPML): wp-wpml_current_language, to remember your choice of language.<\/li>\n<li>Cookie choice: eb_consent and wp_consent_\u2026 (6 months, see above).<\/li>\n<li>Security (Cloudflare): __cf_bm (30 minutes), to recognise traffic from bots.<\/li>\n<li>Saved accounts: smm_sa_accounts_v1 in your browser&#8217;s storage (see <a href=\"#saved-accounts\">Remembering accounts for your next order<\/a>).<\/li>\n<li>E-mail preferences: _fk_contact_uid (1 year), if you change your preferences on the e-mail preferences page (without \u201cMarketing\u201d, only in that case).<\/li>\n<\/ul>\n<p>We use these cookies and this data only for the website functions listed (performance of the contract, point b, or our legitimate interest, point f). Because they are needed for the functions you use, we do not ask for your consent to them (Article 11.7a(3) of the Dutch Telecommunications Act), so they also work if you allow nothing in the cookie banner. The cookies that record where orders come from (sbjs_\u2026, only with \u201cStatistics\u201d) are described above under <a href=\"#origin\">Where orders come from<\/a>.<\/p>\n<h3>Google Analytics<\/h3>\n<p>Only if you allow \u201cStatistics\u201d do we use Google Analytics 4 from Google to see how visitors use our website: which pages they view, what they click on, how long a visit lasts, which device and browser they use, roughly where they are and which website they came from. Google Analytics sets the cookies _ga and _ga_\u2026 (up to 2 years) and sends this data to Google. Google receives your IP address in the process. According to Google, Google Analytics does not store the IP addresses of visitors from the EU, but uses them only to work out their approximate location. If you also allow \u201cMarketing\u201d, Google Analytics uses Google&#8217;s advertising features as well. This allows Google to recognise visitors who are logged in to Google, and Google can use the data to build audiences for advertising. Google itself is responsible for that use. If you allow only \u201cStatistics\u201d, we use Google Consent Mode to tell Google that the data must not be used for advertising. We do not use Google Analytics for visitors who are logged in to our website.<\/p>\n<p><strong>Legal basis:<\/strong> your consent (point a; Article 11.7a(1) of the Dutch Telecommunications Act), which you can withdraw at any time via <a href=\"#cookie-settings\" class=\"ebc-open\" rel=\"nofollow\">Cookie settings<\/a>. <strong>How long:<\/strong> up to 14 months in Google Analytics.<\/p>\n<h3 id=\"klaviyo\">Klaviyo (up to and including 8 October 2026)<\/h3>\n<p>Up to and including 8 October 2026, we used Klaviyo (Klaviyo, Inc., United States), an e-mail marketing service that worked on our behalf. We switched Klaviyo off on our website on that day: our website no longer loads any Klaviyo script and no longer sends any data to Klaviyo. Until the new cookie banner on 8 October 2026, our website loaded the Klaviyo script on every visit; after that, only if you had allowed \u201cMarketing\u201d. From our website, Klaviyo received: your IP address and browser data (the script set the cookie __kla_id); if Klaviyo knew who you were, for example because you were logged in to your customer account or came via an e-mail we had sent through Klaviyo, which pages and products you viewed and what you added to your shopping cart; your e-mail address if you were logged in; the e-mail address you entered on the checkout page, with the contents of your shopping cart; and, if you signed up for e-mail updates and news, your sign-up details. Through a connection with our online shop, Klaviyo could also fetch order and customer data; Klaviyo last used that connection in November 2025. We removed that connection on 8 October 2026: since then, Klaviyo has had no access to our online shop. On your next visit, our website removes the cookie __kla_id (up to 2 years) that Klaviyo may have set in your browser, together with Klaviyo&#8217;s data in your browser&#8217;s storage. If you do not come back to our website, the cookie expires by itself, at most 2 years after it was set; Klaviyo&#8217;s data in your browser&#8217;s storage then stays until you clear it in your browser.<\/p>\n<p><strong>Legal basis:<\/strong> for sign-ups for e-mail updates and news, your consent (point a); for the other data, until the new cookie banner, our legitimate interest in tailoring our e-mails to your interests (point f), and after that, for what the Klaviyo script collected, your consent to \u201cMarketing\u201d (point a). <strong>How long:<\/strong> on 8 October 2026 we had the data in our Klaviyo account deleted. As our processor, Klaviyo must also delete copies of it, for example in backups (Article 28 GDPR).<\/p>\n<h3>Marketing cookies of our online shop<\/h3>\n<p>With \u201cMarketing\u201d, you allow these cookies from our own online shop: wp-ywpar_referral_token (1 week, if you arrive through a customer&#8217;s referral link; see <a href=\"#customer-account\">Customer account and Star Points<\/a>), cr_referral_session (30 days, if you arrive via a link in an e-mail asking you for a review, so that we can see that an order came from such an e-mail), _fk_contact_uid (10 years; FunnelKit uses it to recognise you as a contact when you click a link in one of our e-mails or open a reminder about your shopping cart) and xlwcty_recently_viewed_product (until you close your browser), which remembers which products you view so that we can show suitable products after your order.<\/p>\n<p><strong>Legal basis:<\/strong> your consent (point a; Article 11.7a(1) of the Dutch Telecommunications Act), which you can withdraw at any time via <a href=\"#cookie-settings\" class=\"ebc-open\" rel=\"nofollow\">Cookie settings<\/a>. <strong>How long:<\/strong> as stated above for each cookie.<\/p>\n<h3>Richpanel (chat)<\/h3>\n<p>The <a href=\"#rp-customer-widget-home\" class=\"lk-chat-link\">live chat<\/a> on our website comes from Richpanel (Richpanel, Inc., United States), which works on our behalf. If you allow \u201cChat\u201d in the cookie banner, we load the chat straight away on every page. Otherwise we load the chat only when you open it yourself, with the chat button or a link to the <a href=\"#rp-customer-widget-home\" class=\"lk-chat-link\">live chat<\/a>. From that moment, Richpanel sets the cookies rpdid and rptkn (up to 400 days), rpsid (6 hours) and rp_fk (until you close your browser), stores data in your browser&#8217;s storage and records which pages and products you view and what you do in your shopping cart. If you are logged in or contact us, Richpanel links this data to your customer details, so that we can help you better. When the chat loads, Richpanel fetches a font from Google Fonts; Google receives your IP address when this happens.<\/p>\n<p><strong>Legal basis:<\/strong> if you open the chat yourself, this is necessary for the service you request (point b or f, see <a href=\"#customer-service\">Customer service<\/a>; Article 11.7a(3) of the Dutch Telecommunications Act); if the chat loads straight away, your consent (point a), which you can withdraw at any time via <a href=\"#cookie-settings\" class=\"ebc-open\" rel=\"nofollow\">Cookie settings<\/a>. <strong>How long:<\/strong> up to 24 months after your last contact or visit.<\/p>\n<h3>Gravatar and files from other servers<\/h3>\n<p>Next to reviews we show profile pictures from Gravatar, a service of Automattic (for users in Europe, that is Aut O&#8217;Mattic A8C Ireland Ltd. in Ireland; part of the data goes to Automattic Inc. in the United States). Your browser fetches these pictures directly from Gravatar. Gravatar then receives your IP address and a hash of the e-mail address of the person who wrote the review. On the My account and Shopping Cart pages, your browser also loads an icon file (Font Awesome) from cdnjs, a Cloudflare service, and connects in advance to a Google font server. These services see your IP address.<\/p>\n<p><strong>Legal basis:<\/strong> our legitimate interest in a website that works well and is easy to use (point f). <strong>How long:<\/strong> we do not keep any data from these requests ourselves.<\/p>\n<h3 id=\"stop-cookies\">Change your choice or block cookies<\/h3>\n<p>You can change your choice at any time via <a href=\"#cookie-settings\" class=\"ebc-open\" rel=\"nofollow\">Cookie settings<\/a>, a link that is also at the bottom of every page. You can also refuse or delete cookies in your browser settings, and block third-party scripts with a browser extension. For Google Analytics, Google offers a browser add-on that stops Google Analytics from collecting data: <a href=\"https:\/\/tools.google.com\/dlpage\/gaoptout\" target=\"_blank\" rel=\"noopener\">tools.google.com\/dlpage\/gaoptout<\/a>. You can object to processing based on our legitimate interests, such as for Gravatar and the files from other servers (see <a href=\"#rights\">Your rights<\/a>). If you block all cookies in your browser, the shopping cart, logging in and the choice of language may not work properly. If you choose \u201cReject all\u201d in the cookie banner, these keep working normally.<\/p>\n<h2 id=\"recipients\">4. Who receives your data<\/h2>\n<p>We do not sell your information. Except where required by law, we share it only with the parties named in this privacy policy, where needed for the purposes described, and with parties that help us meet our accounting and other administrative obligations. The latter are bound to confidentiality by their agreement with us, an oath or a legal obligation.<\/p>\n<p><strong>Service providers that work on our behalf (processors):<\/strong><\/p>\n<ul>\n<li>Rocket.net (onRocket.com, LLC, United States): hosting of our website;<\/li>\n<li>Cloudflare, Inc. (United States): security and performance network;<\/li>\n<li>Twilio Inc. (United States), with its SendGrid service: sending the e-mails from our website;<\/li>\n<li>Google Cloud EMEA Limited (Ireland), with Google Workspace: our business e-mail;<\/li>\n<li>Richpanel, Inc. (United States): customer service and chat;<\/li>\n<li>Klaviyo, Inc. (United States): e-mail marketing up to and including 8 October 2026; we had the data in our Klaviyo account deleted on 8 October 2026;<\/li>\n<li>freelancers in the Philippines: customer service;<\/li>\n<li>Google (Google Analytics): website statistics.<\/li>\n<\/ul>\n<p>We have concluded data processing agreements with these service providers, as required by Article 28 GDPR. The software for our online shop, the e-mails, the reviews and Star Points (including WooCommerce, FunnelKit, Customer Reviews for WooCommerce and YITH) runs on our own server.<\/p>\n<p><strong>Other recipients:<\/strong><\/p>\n<ul>\n<li>Mollie B.V., Klarna Bank AB (publ), the provider of the payment method you choose, and Coinbase, Inc., as independent controllers (see <a href=\"#payment\">Payment<\/a>);<\/li>\n<li>Google, as an independent controller for its own use of Google Analytics data for advertising (only if you allow \u201cStatistics\u201d and \u201cMarketing\u201d), and as the provider of Google Fonts; Cloudflare, as the provider of cdnjs; and Automattic (Gravatar);<\/li>\n<li>our technical suppliers for delivery and the profile check: they receive only the username or link, the service and the quantity;<\/li>\n<li>our accountant and advisers, who are bound to confidentiality;<\/li>\n<li>Stichting Webshop Keurmerk (the foundation behind a Dutch trust mark for online shops), if you take a complaint or dispute about your order to it;<\/li>\n<li>public authorities, such as the Dutch Tax and Customs Administration (Belastingdienst), the police or the judicial authorities, if we are required by law to share data with them.<\/li>\n<\/ul>\n<h2 id=\"transfers\">5. Transfers outside the European Economic Area<\/h2>\n<p>We are established in the United Kingdom. The European Commission has decided that the United Kingdom offers an adequate level of protection for personal data (an adequacy decision, valid until 27 December 2031).<\/p>\n<p>Some of our service providers are based in the United States. Google, Twilio and Cloudflare take part in the EU-US Data Privacy Framework, which is also covered by an adequacy decision of the European Commission. That framework also covered the data Klaviyo received from us up to and including 8 October 2026. For Rocket.net and Richpanel, which do not take part in that framework, the European Commission&#8217;s standard contractual clauses apply (Article 46(2)(c) GDPR). Automattic transfers Gravatar data outside the European Economic Area on the basis of standard contractual clauses. Richpanel also has part of the customer service data processed in India, again under standard contractual clauses. Our customer service freelancers work from the Philippines; for their access, too, we use standard contractual clauses. For cryptocurrency payments via Coinbase, see <a href=\"#coinbase\">Coinbase<\/a> above.<\/p>\n<p>Our technical suppliers for delivery and the profile check may be based outside the European Economic Area. They receive only the username or link, the service and the quantity, because this is necessary to carry out your order (Article 49(1)(b) GDPR).<\/p>\n<p>You can ask for a copy of these safeguards by e-mailing support@likes-kopen.nl.<\/p>\n<h2 id=\"rights\">6. Your rights<\/h2>\n<p>Under the GDPR you have the following rights, subject to the exceptions set out in the law:<\/p>\n<ul>\n<li>the right of access to the data we process about you (Article 15);<\/li>\n<li>the right to rectification of inaccurate or incomplete data (Article 16);<\/li>\n<li>the right to erasure of your data (Article 17), except data we are required by law to keep;<\/li>\n<li>the right to restriction of processing (Article 18);<\/li>\n<li>the right to data portability: you can receive the data you have given us in a commonly used, machine-readable format, or have it sent to someone else (Article 20);<\/li>\n<li>the right to withdraw your consent at any time; processing carried out before the withdrawal remains lawful (Article 7(3)).<\/li>\n<\/ul>\n<p><strong>Right to object (Article 21 GDPR): you can object at any time, on grounds relating to your particular situation, to processing that we base on our legitimate interests (point f). We will then stop that processing, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims. You can always object to the use of your data for direct marketing, such as our e-mails about our services and the profiling that goes with them, without giving reasons; we will then stop straight away.<\/strong><\/p>\n<p>To exercise your rights, e-mail <a href=\"mailto:support@likes-kopen.nl\">support@likes-kopen.nl<\/a>. We will respond within one month. If your request is complex or we receive a large number of requests, this period can be extended by a further two months; if so, we will tell you within one month. Requests are free of charge. To prevent misuse, we send data only to the e-mail address we have on file for you, or we first ask you to prove who you are.<\/p>\n<h2 id=\"complaint\">7. Making a complaint<\/h2>\n<p>If you are not happy with how we handle your data, please let us know. You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work or where the alleged infringement took place. In the Netherlands this is the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, which accepts complaints in Dutch or English (via its <a href=\"https:\/\/www.autoriteitpersoonsgegevens.nl\/een-tip-of-klacht-indienen-bij-de-ap\" target=\"_blank\" rel=\"noopener\">online complaint form<\/a> or by post: Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag, Netherlands). In Belgium it is the Data Protection Authority (Gegevensbeschermingsautoriteit \/ Autorit\u00e9 de protection des donn\u00e9es, <a href=\"https:\/\/www.gegevensbeschermingsautoriteit.be\" target=\"_blank\" rel=\"noopener\">gegevensbeschermingsautoriteit.be<\/a>). Because we are established in the United Kingdom, you can also contact the UK supervisory authority, the Information Commissioner&#8217;s Office (<a href=\"https:\/\/ico.org.uk\" target=\"_blank\" rel=\"noopener\">ico.org.uk<\/a>).<\/p>\n<h2 id=\"decisions\">8. Automated decisions<\/h2>\n<p>We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. If you pay with Klarna, Klarna may decide automatically whether you can use that payment method (see <a href=\"#klarna\">Klarna<\/a>).<\/p>\n<h2 id=\"changes\">9. Changes<\/h2>\n<p>We update this privacy policy when our website, our services or the rules change. The date at the top shows when it was last updated. If we want to use data we already hold about you for a new purpose, we will tell you in advance, for example by e-mail.<\/p>\n<p>Questions about this privacy policy? E-mail us at <a href=\"mailto:support@likes-kopen.nl\">support@likes-kopen.nl<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last updated: 8 October 2026 This privacy policy explains which personal data we process when you visit likes-kopen.nl or order from us, why we do so, on what legal basis, who we share data with, how long we keep it and what rights you have. It applies to our website in all languages. Contents Who [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"full-width-container","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-51207","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/pages\/51207","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/comments?post=51207"}],"version-history":[{"count":5,"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/pages\/51207\/revisions"}],"predecessor-version":[{"id":871876,"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/pages\/51207\/revisions\/871876"}],"wp:attachment":[{"href":"https:\/\/www.likes-kopen.nl\/en\/wp-json\/wp\/v2\/media?parent=51207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}