Who is responsible
The data controller is [Registered company name], [registered address]. For any privacy question, email info@ireboot.nl.
What we collect
- Order data — items ordered, price, order number, and timestamps.
- Contact & delivery data — name, email, shipping address, supplied at checkout.
- Payment data — handled directly by Stripe. We never see or store your full card number.
- Technical data — server logs (IP address, request time) kept for security and troubleshooting.
Why we process it (legal basis)
- Performing the purchase contract (art. 6(1)(b) GDPR) — to take payment, ship your order, and provide support.
- Legal obligation (art. 6(1)(c)) — to keep invoices for tax law.
- Legitimate interest (art. 6(1)(f)) — to keep the store secure and prevent fraud.
Processors we share data with
We only share what each service needs to do its job:
- Stripe — payment processing.
- Vercel — hosting and server logs.
- Neon — order and account database.
- Our suppliers (AliExpress/DSers, CJdropshipping) — your shipping address is forwarded so they can dispatch the order directly to you.
How long we keep it
Order and invoice data is retained for as long as Dutch tax law requires (currently 7 years). Other data is deleted when no longer needed.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your data, restrict or object to processing, and request data portability. Email info@ireboot.nl to exercise any of these. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Cookies
This store uses only strictly necessary cookies to keep your cart and (for admins) your session. We do not use advertising or third-party tracking cookies. If analytics are added later, this section and a consent banner will be updated accordingly.