Privacy Statement

  1. Who are we? Spicy Tile is a trading name of GPV Concepts. Registered address: Hogestraat 44, 7091 CE Dinxperlo, Netherlands
    Chamber of Commerce number: 74861794 | VAT number: NL860053593B01
    Email: privacy@spicytile.com

In this statement, we explain which personal data we collect, why we do so, and how we handle it. We keep it short, honest, and without waffle – just like our tiles.

  1. What data do we collect and why? | Situation | Data | Purpose | Legal basis | |---|---|---|---| | Placing an order | Name, delivery & billing address, email, phone, payment & order details | To process and deliver your order and provide support | Performance of contract | | Creating an account (optional) | Login/contact details, order history | Convenience for repeat orders and order overview | Consent (for account) | | Newsletter | Name & email | Sending inspiring tile tips and offers | Consent (opt-in) | | Website statistics | IP address (anonymised), device & browser info, page visits | Improve site and detect bugs via Matomo Analytics (self-hosted) and Google Analytics | Legitimate interest* | | Advertising tracking | Pixel ID, viewed products, transactions | Targeted advertising on Facebook/Instagram (Meta-pixel) and TikTok | Consent (via cookie banner) |

*For Google Analytics, we mask the last octet of the IP address and have disabled 'data sharing'. You can always object: see §7.

  1. Cookies and pixels When you first visit, we display a cookie banner. There, you indicate which cookie categories you accept:

  • Essential: necessary for basic functionality (always active).

  • Statistics: Matomo & Google Analytics – measuring is knowing.

  • Marketing: Meta-pixel & TikTok-pixel – so you'll see that perfect tile again later.

You can change your preferences at any time via the Cookie settings link in the footer.

  1. Sharing of data We only share your data with:

  • Payment providers (e.g., Mollie) for secure transactions;

  • Delivery services (PostNL, DHL) to deliver your package;

  • Analytics & advertising platforms as mentioned in §2, but ONLY after you have given consent (for marketing cookies) or when IP anonymisation is enabled (statistics).

With each processor, we conclude a processor agreement that complies with the GDPR. Where data is processed outside the EEA (Google, Meta, TikTok), we use the EU standard contractual clauses.

  1. Retention periods

  • Order and invoice data: 7 years (fiscal retention obligation).

  • Account data: as long as your account is active – or until you request its deletion.

  • Newsletter data: until you unsubscribe (each email contains an unsubscribe link).

  • Analytics and advertising data: 26 months (Google) / 13 months (Matomo standard) / 180 days (Meta & TikTok pixel events).

  1. Security We take appropriate technical and organisational measures (SSL certificate, encrypted backups, restricted access rights) to protect your data.

  2. Your rights You have the right to:

  • access your personal data;

  • have it rectified or erased;

  • restrict its processing or object to it;

  • request data portability;

  • withdraw any given consent at any time;

  • lodge a complaint with the Dutch Data Protection Authority.

Do you wish to exercise one of these rights? Email us at privacy@spicytile.com and we will respond within 14 days.

  1. Changes We may update this privacy statement when our services or legislation changes. We will clearly announce major changes on our website. The latest version is always available here; please check the Last update date at the top.

Questions or comments? Send us an email – we're faster than PostNL (usually 😉).