Privacy Policy

Personal data we process

Depending on how you use the website, we may process:

• name, email address, telephone number and contact details;
• billing and delivery addresses;
• order details, purchased products, prices, discounts and order history;
• payment status, payment method and transaction reference;
• account details and sign-in identifiers;
• saved cart, wishlist and stock-alert preferences;
• messages, return requests and customer-service correspondence;
• shipping, tracking and delivery information;
• IP address, browser information, timestamps and security logs;
• cookie preferences and necessary technical data.

We do not receive or store complete payment-card or online-banking credentials. Those are handled by the payment provider.

Why we use personal data

• to accept, process, deliver and administer orders;
• to process payments, refunds, returns and complaints;
• to create and manage customer accounts;
• to save carts, wishlists, discounts and stock notifications;
• to provide customer service;
• to prevent fraud, misuse and security incidents;
• to maintain and improve the reliability of the website;
• to comply with tax, accounting and other legal obligations;
• to send marketing only where a valid legal basis applies.

Legal bases

• Contract: processing orders, payments, delivery, returns and customer accounts.
• Legal obligation: retaining records required for tax, accounting, consumer protection or fraud prevention.
• Legitimate interests: securing and operating the website, preventing misuse and providing customer service, where these interests do not override individual rights.
• Consent: optional marketing or non-essential cookies if introduced. Consent can be withdrawn at any time.

Newsletter

Our optional newsletter covers weekly new arrivals and pre-orders. We keep a central contact list for customer and account administration, with a separate newsletter preference, signup source, confirmation and withdrawal history. Placing an order or creating an account does not automatically subscribe you. Public signups require confirmation by email. You can unsubscribe through the link in our newsletters or change your preference in your account. We keep a minimal unsubscribe record to respect your choice.

Who receives personal data

We share only the data needed with service providers involved in operating the webshop, including:

• Mollie or another displayed payment provider for payments and refunds;
• PostNL, its delivery partners, postal operators and customs authorities;
• website hosting, database, authentication and security providers;
• email and communication providers;
• bookkeeping, accounting and professional advisers;
• public authorities where disclosure is legally required.

We do not sell personal data.

International transfers

Some providers may process data outside the European Economic Area. Where required, we use an approved transfer mechanism and appropriate safeguards, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

Retention

We do not keep data longer than necessary, unless the law requires a longer period. In principle:

• order, invoice and payment-administration records: 7 years where required for tax and accounting;
• customer-service and return correspondence: normally up to 2 years after closure;
• account, wishlist, saved-cart and stock-alert data: while the account is active, subject to valid deletion requests and legal retention requirements;
• inactive accounts: may be removed after 2 years of inactivity, with advance warning where practical;
• security logs: normally no longer than 90 days, unless an incident requires longer retention;
• marketing preferences: until consent is withdrawn or the communication is no longer relevant.

Cookies and external services

Necessary cookies and similar technologies support sign-in, security and webshop functions. We currently do not use optional advertising or analytics cookies. Details are in our Cookie Policy.

External platforms reached through links, such as Instagram, Discogs and SoundCloud, apply their own privacy policies when you visit them.

Security

We take appropriate technical and organisational measures to protect personal data. Access to administrative systems is limited to authorised persons and providers who need it. No online system can be guaranteed completely secure.

Your rights

Depending on the circumstances, you may have the right to access, correct or delete your data; restrict or object to processing; receive certain data in a portable format; and withdraw consent. Send requests to info@dubsupplyrecords.com. We may request information needed to verify identity and normally respond within one month.

You may lodge a complaint with the Autoriteit Persoonsgegevens.

Children

The webshop is not directed at children, and we do not knowingly collect data from children who cannot validly provide their own consent. Contact us if such data was supplied without the required permission.

Changes and contact

We may update this policy when our services, suppliers or legal obligations change. Questions can be sent to info@dubsupplyrecords.com.