Privacy policy

OnePillow Privacy Policy®

About our privacy policy

OnePillow® cares deeply about your privacy. We only process data necessary for (improving) our services and handle the information we collect about you and your use of our services with care. We never share your data with third parties for commercial purposes. This privacy policy applies to the use of the OnePillow website and its services. The effective date of these terms is 02/08/2023; publishing a new version invalidates all previous versions. This policy explains what data we collect about you, how it is used, and with whom and under what conditions it may be shared. We also explain how we store your data, protect it from misuse, and your rights regarding the personal data you provide. If you have questions about our privacy policy, you can contact our privacy officer; contact details are at the end of this policy.

About data processing

Below you can read how we process your data, where it is stored, which security measures we use, and who has access to it.

Shop software Shopify

The OnePillow webshop® is built using Shopify software. Personal data you provide for our services is shared with this party. Shopify accesses your data to provide us with (technical) support and will never use your data for other purposes. Shopify is contractually obliged to implement appropriate security measures, including SSL encryption and a strong password policy. Shopify is a certified credit card data processor. Shopify uses cookies to collect technical information about your use of the software; no personal data is collected or stored. Shopify reserves the right to share collected data within its group to improve services. Shopify complies with applicable legal retention periods for (personal) data. The EU/US Privacy Shield applies, so your data may be processed in the United States.

Gmail

We use Gmail for our regular business email communications. Gmail has implemented appropriate technical and organisational measures to prevent misuse, loss, and corruption of your and our data. Gmail does not have access to our mailbox, and we treat all email communications confidentially.

WebwinkelKeur

We collect reviews via the WebwinkelKeur platform. When you leave a review through WebwinkelKeur, you must provide your name, city, and email address. WebwinkelKeur shares this data with us so we can link the review to your order. WebwinkelKeur also publishes your name and city on their website. Occasionally, WebwinkelKeur may contact you for clarification on your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur, who use this data solely to invite you to review. 

WebwinkelKeur has implemented appropriate technical and organisational measures to protect your personal data. They may engage third parties to provide their services, for which we have given permission. All the above data protection guarantees also apply to these third-party services.

 

Purpose of data processing

General purpose of processing

We use your data solely to provide our services. This means the processing purpose always directly relates to the order you place. We do not use your data for (targeted) marketing. If we want to contact you later for other reasons than your request, we will explicitly ask for your permission. Your data is not shared with third parties except to comply with accounting and other administrative obligations. These third parties are bound by confidentiality agreements, oaths, or legal obligations.

Automatically collected data

Data automatically collected by our website is processed to improve our services. This data (such as your IP address, web browser, and operating system) is not personal data.

Cooperation with fiscal and criminal investigations

In certain cases, OnePillow may be legally required to share your data for fiscal or criminal investigations by authorities. In such cases, we are obliged to share your data but will oppose this as far as legally possible.

Retention periods

We keep your data as long as you are a customer. This means we retain your customer profile until you indicate you no longer wish to use our services. We will treat this as a request to forget your data. We do not keep your data longer than two years after the last contact or transaction unless legally required. Due to administrative obligations, we must keep invoices with your (personal) data for the applicable period. However, employees no longer have access to your customer profile and documents.

Cookies

Your rights

Contact