Last updated on 16 October 2026

Who we are

Sanne Kaal
Brugwal 11 A
3432NZ Nieuwegein
The Netherlands

KvK: 75584239
VAT: NL002407518B77

Sanne Kaal is responsible for the processing of personal data described in this statement.

What we collect and why

Orders
When you place an order we process your name, email address, phone number, shipping and billing address, the products you ordered and the payment status. We need this to deliver your order, to contact you about it and to keep our accounts (legal basis: performance of the contract and legal obligation). Payments are handled by [Stripe / PayPal] through Squarespace; we never see or store your card details.

Questions and messages
If you email us, we use your name, email address and message only to answer you (legal basis: legitimate interest / your request).

Newsletter
If you sign up for our newsletter, we use your email address to send it to you (legal basis: your consent). Every newsletter contains a link to unsubscribe.

Cookies
This website runs on Squarespace. Squarespace places a few strictly necessary cookies so the site, the shopping cart and checkout work properly. These cannot be switched off.
Only if you accept them in the cookie banner, Squarespace also places analytics cookies to show us how the website is used, such as which pages are visited (legal basis: your consent). You can change your choice at any time via “Cookie settings” at the bottom of every page.

Who we share data with
We only share data with parties that help us run the website and shop:

• Squarespace – hosting of this website, the online shop and contact forms.

• Stripe – payments and order details

• Shipping carriers – name, address and phone number, to deliver your order

• Our accountant and the tax authorities – where required by law

Some of these parties are located outside the European Union (for example in the United States). Where that is the case, the transfer is covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep data
Order and invoice data are kept for 7 years, as required by Dutch tax law. Messages are deleted when they are no longer needed, at the latest 2 years after our last contact.

Your rights
You can ask us to see, correct or delete your personal data, to restrict or object to its use, or to receive it in a portable format. You can withdraw your consent at any time. Send your request to info@sannekaal.com; we respond within one month. If you are not satisfied, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security
This website uses an encrypted connection (HTTPS). Payments are processed by Stripe,, which is certified to the highest payment-security standard (PCI DSS Level 1).