Last updated: 15 October 2026
Website: https://inpakheld.nl
Introduction
Welcome to Inpakheld. We respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, when we share it with other organisations, and what rights you have under the General Data Protection Regulation (GDPR), known in the Netherlands as the Algemene Verordening Gegevensbescherming (AVG).
This policy applies to visitors to our website, customers who place orders, and people who contact us about our products or services.
We aim to collect only personal data that is reasonably necessary for the purposes described in this policy.
Who Is Responsible for Your Personal Data?
Inpakheld is an online store offering gift-wrapping products and related accessories.
Inpakheld operates in the context of the Studentenbedrijf programme. The legal entity responsible for processing personal data must be identified according to the applicable Studentenbedrijf arrangements.
Contact details
Business name: WrapMate
Trading name: Inpakheld
Email: inpakheld@gmail.com
Address: Postbus 116, 3870 CC Hoevelaken, The Netherlands
KVK number: 91915775
VAT identification number: NL865815720B01
Website: https://inpakheld.nl
For questions about this Privacy Policy or the processing of your personal data, please contact us by email.
What Personal Data Do We Collect?
We collect personal data only when it is reasonably necessary for operating our webshop, processing orders, providing customer service, or meeting legal obligations.
Depending on how you use our website, we may collect the following information.
3.1 Personal and contact details
When you place an order or contact us, we may collect your name, email address, telephone number if provided, billing address, and delivery address.
3.2 Order information
When you purchase a product, we may process information such as your order number, the products purchased, order date, total price, payment status, delivery details, and information relating to returns, refunds, or customer-service requests.
3.3 Payment information
Our webshop offers online payments through the payment methods made available at checkout.
Payments are processed through the relevant payment service provider and, where applicable, your bank. We may receive information necessary to confirm and administer a payment, such as the transaction reference, payment status, and amount.
We do not intend to collect or store your full bank login details or payment authentication credentials.
3.4 Technical information and cookies
When you visit our website, technical information may be processed to operate and secure the website. Depending on the services enabled and your cookie preferences, this may include your IP address, browser type, device information, pages visited, and information about website interactions.
Cookies and similar technologies may also be used to remember preferences and support essential webshop functions. Further information is provided in Section 7.
3.5 Customer communications
If you contact us by email or through a contact form, we process the information you provide so that we can respond to your questions and resolve your request.
We do not require you to provide information that is unrelated to your enquiry.
Why Do We Process Your Personal Data?
We process personal data only when a lawful basis under the GDPR applies.
Processing and fulfilling orders
We use your contact, order, and delivery information to process purchases, send order confirmations, arrange delivery, provide tracking information, and handle returns or refunds. The legal basis is the performance of a contract.
-Processing payments
We process the information necessary to confirm and administer payments. The legal basis is the performance of a contract and, where applicable, compliance with legal obligations.
-Customer service
We use information you provide to answer questions, handle complaints, and assist with orders. Depending on the circumstances, the legal basis is the performance of a contract or our legitimate interest in providing customer service.
-Financial and administrative records
We retain information required for bookkeeping, tax, and other legal obligations. The legal basis is compliance with a legal obligation.
-Website security
We may process limited technical information to protect our website, prevent misuse, and investigate technical problems. Where applicable, the legal basis is our legitimate interest in maintaining a secure and functioning webshop.
-Cookies, analytics, and advertising
Essential cookies may be used to provide the functions necessary for the webshop to operate. Non-essential analytics or advertising technologies will be used only where applicable consent requirements have been satisfied.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
Orders and Payments
Our website uses WordPress and WooCommerce to operate the online store and manage orders.
When you place an order, the information you provide is used to process your purchase, manage payment status, send relevant order communications, arrange delivery, and maintain records required for business administration.
The payment methods available to you are displayed during checkout. Online payments are processed by the relevant payment service provider and, where applicable, financial institutions.
These providers may process personal data under their own privacy policies and legal responsibilities.
We do not use your order information to send promotional emails without an appropriate legal basis.
Delivery of Orders
We use DHL for delivery of orders.
To deliver your purchase, the information necessary for shipping may be shared with DHL. This may include your name, delivery address, and shipment information, together with contact details where needed to arrange or complete delivery.
This information is used to transport your order, provide delivery updates, and support shipment tracking.
For further information about DHL's handling of personal data, please consult the relevant privacy information on DHL's official website
Cookies and Similar Technologies
Our website uses WordPress, WooCommerce, and a cookie-consent tool to support website functionality and manage cookie preferences.
Cookies are small files stored on your device. Some are necessary for the website to function, while others may be used for analytics, preferences, or advertising.
7.1 Essential cookies
Essential cookies support necessary website functions, such as shopping-cart functionality, checkout, security, and remembering relevant preferences.
These cookies may be used without consent where permitted by applicable law. We provide information about their use through our cookie information and consent interface.
7.2 Analytics cookies
Analytics tools can help website operators understand how visitors use a website and identify areas for improvement.
If analytics services are enabled on Inpakheld and require consent, they will not be activated before valid consent has been obtained.
7.3 Advertising and marketing cookies
Advertising technologies may be used to measure advertising performance, record conversions, or support personalised advertising.
Google Ads and Meta Pixel are planned for possible future use. They are not described here as currently active services.
If these or other non-essential advertising technologies are introduced, they must be configured in accordance with applicable law, including obtaining prior consent where required.
7.4 Managing your cookie preferences
When the cookie-consent banner is displayed, you can choose whether to accept or reject non-essential cookies and, where available, adjust your preferences by category.
You should be able to change or withdraw your consent later through the website's cookie settings.
Rejecting non-essential cookies should not prevent you from using the essential shopping functions of our website.
For details about the cookies actually used, their purposes, providers, and retention periods, please consult the cookie information made available on our website.
Email Communications and Marketing
We use your email address to send messages necessary for your purchase, such as order confirmations, payment-related updates, and delivery information.
These service messages are different from promotional communications.
We do not send newsletters or other promotional emails unless we have an appropriate legal basis to do so. Where consent is required, we will ask for it separately from the purchase process.
You can withdraw your consent to marketing communications at any time. If a marketing email includes an unsubscribe link, you can use that link to opt out. You may also contact us at inpakheld@gmail.com.
Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.
Who May Receive Your Personal Data?
We may share personal data with service providers when this is necessary to operate the webshop, fulfil your order, process payments, provide delivery services, maintain security, or comply with legal obligations.
WordPress and WooCommerce
Our website platform and webshop system process information necessary to display products, manage customer orders, and operate checkout.
Website hosting provider
Our website is hosted through a hosting service. The hosting provider may process technical information and data stored on the website as necessary to provide hosting and technical services.
Payment service provider and relevant financial institutions
Payment-related information is processed by the provider responsible for the payment method selected at checkout and, where applicable, by your bank.
DHL
We share the information necessary to deliver your order and provide shipment-related services.
Administrative or professional service providers
Where necessary, authorised administrative or professional service providers may access relevant information to support legal, accounting, or administrative obligations.
We aim to limit the information shared to what is necessary for the relevant purpose. Service providers may process personal data according to their contractual obligations and applicable law.
Google Analytics, Google Ads, and Meta Pixel are not listed as active recipients because these services are not currently active on our website.
We do not sell personal data to third parties.
How Long Do We Keep Your Personal Data?
We retain personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal retention requirements.
Financial and administrative records in the Netherlands may generally be subject to a statutory retention period of seven years. The exact requirements depend on the type of record and the applicable law.
Other retention periods depend on the type of information and the purpose for which it is processed. These may include customer account information, order and delivery information, customer-service correspondence, technical and security logs, and cookie-consent records.
We aim to delete or anonymise personal data when it is no longer necessary. Information that must be retained to comply with a legal obligation will not be deleted prematurely.
How Do We Protect Your Personal Data?
We take appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
Access to personal data should be limited to authorised people who need it for legitimate operational or administrative purposes.
We also aim to keep our website and its software maintained and to use appropriate security measures for online data processing.
No website or online system can be guaranteed to be completely secure. If you believe that your personal data has been compromised in connection with our website, please contact us.
International Transfers of Personal Data
Some technology or service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, the transfer must comply with applicable data-protection law. Depending on the circumstances, this may require an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.
The actual location and transfer arrangements depend on the providers and services enabled on our website.
Your Rights Under the GDPR
Under the GDPR, you have rights concerning your personal data, subject to applicable legal conditions.
Right to be informed
You have the right to receive clear information about how and why your personal data is processed.
Right of access
You can ask whether we process your personal data and request a copy of the relevant information.
Right to rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to erasure
You can request deletion of your personal data where the legal conditions for erasure are met. Some information may need to be retained to comply with legal obligations.
Right to restriction
In certain circumstances, you can ask us to restrict the processing of your personal data.
Right to data portability
Where the legal conditions apply, you can request the personal data you provided in a structured, commonly used, machine-readable format.
Right to object
You may object to processing based on legitimate interests in circumstances provided for by the GDPR. You have an absolute right to object to processing of your personal data for direct marketing.
Right to withdraw consent
Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect processing carried out lawfully before withdrawal.
To exercise your rights, email us at inpakheld@gmail.com.
We may need to verify your identity before handling your request. We will respond within the time limits required by applicable law, generally within one month.
Automated Decision-Making
We do not describe any solely automated decision-making that produces legal effects or similarly significant effects on individuals as part of our current webshop operations.
If this changes, we will provide any additional information required by applicable data-protection law.
Information Needed to Place an Order
Certain information, such as your name and delivery address, is necessary to fulfil an order.
If you do not provide information that is required for a purchase or delivery, we may be unable to process your order.
Providing personal data for optional marketing purposes is not required to purchase products from our webshop.
Children's Privacy
Our webshop is intended for general consumers and is not specifically directed at children.
We do not knowingly seek to collect personal data from children beyond what is necessary and lawful for the operation of the webshop.
Where applicable law requires parental consent for processing a child's personal data, we will respect those requirements.
Complaints
If you have concerns about how we process your personal data, please contact us first at inpakheld@gmail.com so that we can review your concern.
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
In the Netherlands, this is the Autoriteit Persoonsgegevens.
Website: https://autoriteitpersoonsgegevens.nl
Changes to This Privacy Policy
We may update this Privacy Policy when our website, services, data-processing activities, or legal obligations change.
The latest version will be published on this page, together with the date it was last updated.
Where required by law, we will provide additional information or request consent before introducing new processing activities.
Contact Us
If you have questions about this Privacy Policy, our handling of personal data, or your rights under the GDPR, please contact us.
Inpakheld
Email: inpakheld@gmail.com
Address: Postbus 116, 3870 CC Hoevelaken, The Netherlands
Website: https://inpakheld.nl
We aim to handle privacy-related questions and requests in a transparent and timely manner.
