Privacy policy

Effective date: 3 November 2026

This Privacy Policy describes how DoelShop, a trading name of ShopDonation, Vondelwende 52, 2182 VV Hillegom (Chamber of Commerce number 63810573) ("we", "us" or "our"), collects, uses and shares your personal data when you use our websites, mobile applications and related services (collectively, the "Services").

We are committed to protecting your privacy and handling your data in a transparent, secure and lawful manner, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable privacy laws.

1. Who We Are

DoelShop
Vondelwende 52, 2182 VV Hillegom, the Netherlands, Chamber of Commerce (KvK) 63810573
Email: info@doelshop.nl

We are the data controller of your personal data in accordance with applicable data protection laws.

2. What Data We Collect

When you register, we only ask for your email address and a username you make up yourself. Everything else is optional. Depending on how you use our Services, we may process the following personal data:

• Username
• Date of birth (optional, only if you choose to fill it in)
• Email address
• Profile photo (optional)
• Name and bank details (only if you receive a referral bonus yourself)
• Income level (optional, only if you choose to fill it in)
• Interests and hobbies (optional, only if you choose to fill it in)

We may also collect data automatically through cookies and other tracking technologies (see Section 8).

3. Legal Bases for Processing

We process your personal data based on one or more of the following legal bases:

• Your consent
• Performance of a contract
• Our legitimate interest in keeping the Services safe and preventing fraud and abuse

4. Purposes of Data Processing

We process your personal data for the following purposes:

• Creating and managing user accounts
• Providing and facilitating the sale of goods and services
• Sending marketing communications and newsletters
• Enhancing and personalising the user experience
• Performing analytics and service improvement
• Providing customer support
• Communicating with users regarding updates or service-related matters
• Ensuring the proper functioning and security of the website and apps
• Enabling interactive features such as comments, messages, forums and other forms of social interaction
• Only if you say yes: using the optional profile data you choose to fill in (such as date of birth, income level, interests and hobbies) to show you deals and promotions that fit your needs. Without your yes, we do not use this data for that. You can change your mind and remove this data at any time in your account.

We never sell, rent or share your personal data with advertisers or other third parties for their own use. We only share data with the service providers that help us run the Services, and only under our instructions (see Section 6).

5. International Data Transfers (Transfers to Third Countries)

To provide you with a seamless and efficient experience across our Services, it may be necessary to transfer your personal data to trusted service providers and partners located outside the EU/EEA. These transfers are essential for the international functionality of our Services.

We take your privacy seriously and only work with carefully selected partners who demonstrate a strong commitment to data protection. Where applicable, we implement appropriate safeguards to ensure that your data continues to be protected, regardless of where it is processed.

Important Notices Regarding Transfers:

• To support the global visibility and functionality of our Services, certain limited profile information, such as your username and your profile photo, may be made publicly visible in countries both within and outside the EU/EEA. We understand the importance of privacy, so you can choose to make your username and profile photo anonymous. This gives you full control over what you make visible publicly and allows you to use the platform without revealing your personal identity.

6. Data Sharing with Third Parties

To provide you with an efficient experience across our Services, it may be necessary to share your personal data with:

• Service providers and partners who perform services on our behalf (e.g. payment processing, analytics, hosting, email delivery)
• Other users, to the extent that your profile information is public or shared by you
• Legal and regulatory authorities, when required by applicable laws

These recipients may be located inside or outside the EU/EEA.

The service providers we use are, for example, for hosting, sending email, analytics and AI translation. When personal data goes to a country outside the EU/EEA, we use the safeguards required by law: a decision of the European Commission that the country offers adequate protection (such as the EU-US Data Privacy Framework) or the EU standard contractual clauses.

We use AI services to translate and write texts on the Website. These services may process the texts entered, under our instructions.

7. Public Visibility

Some limited information from your profile, such as your username and your profile photo, may be visible to other users or the general public, including users outside the EU/EEA.

This visibility supports social features or user identification in public-facing areas of the Service.

We understand the importance of privacy, so you can choose to make your username and profile photo anonymous. This gives you full control over what you make visible publicly and allows you to use the platform without revealing your personal identity.

8. Cookies and Similar Technologies

8.1 What are cookies?

Cookies are small text files that a website places on your computer, tablet or phone. Some are needed to make the website work, others help us improve it. We also use similar technologies, such as scripts and pixels from other companies. Where we write "cookies" below, we mean these technologies too.

8.2 Your choice

On your first visit, a cookie banner asks which cookies you allow:

• Only necessary: only the cookies needed to make the website work and to register your purchase.
• Accept all: all cookies listed in the banner at that moment.
• Settings: you choose per category. For each service you can read what it does, which company is behind it and how long the data is kept.

Even if you only allow necessary cookies, your purchases still generate free donations.

We remember your choice for 6 months. After that, or when we add a new service, we ask again. You can change or withdraw your choice at any time via "Cookie settings" at the bottom of every page. Withdrawing is as easy as giving consent.

8.3 Which cookies do we use?

We use four categories:

• Necessary (always on): needed to make the website work and to register your purchase with the webshop, so your cause receives the donation. These include our own session and security cookies, your cookie choice, spam protection for forms and the cookies of the affiliate networks (such as Awin, CJ, TradeTracker and Daisycon).
• Functional (only with your consent): extra features on the website, such as a chat window to ask us a question or reviews from other visitors.
• Analytics (only with your consent): help us understand how visitors use the website, for example which pages are viewed most, so we can improve it.
• Marketing (only with your consent): measure which ads bring new visitors to the website.

The complete and current list of services is always available in "Cookie settings" at the bottom of every page. There you can read for each service what it does, which company is behind it and how long the data is kept. This list is updated automatically when we add or remove a service.

The services in the Functional, Analytics and Marketing categories only start after you have given your consent. Without your consent, we do not load their scripts.

8.4 Proof of your consent

To be able to show that you gave your consent, we store your choice: which categories you allowed, the version of the banner, the language and the date. This is done with a random code, without your IP address or other data that could identify you. We keep this for 2 years and then delete it automatically.

8.5 Data outside the European Union

Some of these companies are part of an American group (such as Google) or process data outside the European Union. Data may therefore also end up in the United States. The safeguards described in Section 6 apply, such as the EU-US Data Privacy Framework or the EU standard contractual clauses.

8.6 Deleting cookies

You can also delete or block cookies yourself in your browser settings. Please note: if you block all cookies, your purchase may not be registered by the webshop and your cause will not receive a donation.

9. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this Policy, comply with legal obligations, resolve disputes and enforce agreements.

When data is no longer needed, it will be deleted or anonymised.

10. Your Rights

Depending on your location, you have the following rights under the GDPR:

• Right of access – You can request access to your personal data.
• Right to rectification – You can have inaccurate or incomplete data corrected.
• Right to erasure – You can request deletion of your personal data.
• Right to restriction – You can request restriction of the processing of your data.
• Right to object – You can object to processing based on legitimate interests or for direct marketing.
• Right to data portability – You can request your data in a structured, commonly used format.

You may withdraw your consent at any time where processing is based on consent.

To exercise these rights, please contact us at: info@doelshop.nl

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). If you live or work in another country of the European Union, you can also complain to the data protection authority of that country.

11. Children’s Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect data from children under 16 without parental consent.

12. Security of Your Data

We take reasonable organisational and technical measures to secure your personal data against unauthorised access, disclosure, alteration or destruction.

However, no system is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top. If changes are material, we will notify you by posting a notice or via email.

14. Additional Information for UK Users (UK GDPR)

If you are located in the United Kingdom, your data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Your rights under the UK GDPR mirror those under the EU GDPR and include:

• The right of access
• The right to rectification
• The right to erasure
• The right to restrict or object to processing
• The right to data portability
• The right to lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights or raise concerns, please contact us at: info@doelshop.nl

15. Additional Information for California Residents (CCPA/CPRA)

If you are a resident of California, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected:

We may collect the following categories of personal information, as defined under the CCPA:

• Identifiers (e.g. email address, username, IP address; name only if you receive a referral bonus yourself)
• Commercial information (e.g. purchase history)
• Internet or other network activity (e.g. browsing history, device information)
• Profile data you choose to fill in (e.g. interests, hobbies), only if you say yes
• Financial information (bank details, only if you receive a referral bonus yourself)
• Personal characteristics you choose to fill in (e.g. date of birth, income level), only if you say yes

Your Rights:

• Right to Know – Insight into the categories and specific pieces of data collected about you.
• Right to Delete – Request deletion of your data, subject to certain exceptions.
• Right to Opt Out of Sale/Sharing – Request that your data is not sold or shared.
• Right to Non-Discrimination – You may not be disadvantaged for exercising your rights.

To submit a request, please contact us at: info@doelshop.nl.

DoelShop does not sell or share personal information as defined under the CCPA, and never gives your personal data to advertisers.

If you are an authorised agent making a request on behalf of a California consumer, you must provide written authorisation and proof of identity.

16. Social Networks

Our website contains links to our pages on social networks such as Facebook, Instagram, X and LinkedIn. A link alone does not share any data with that network. Only when you click it do you go to the network's website, where that network's own privacy policy applies.

If we later add features from social networks to the website, such as embedded posts or videos, they only load after you have given your consent through the cookie banner (see Section 8). If we offer logging in with an account from another service, such as Google, we only receive data if you choose that option yourself: your name and email address, which we use to create your account.

17. Privacy Contact

If you have any questions, requests or complaints regarding how we process your data, or wish to exercise your rights, you may contact:

Privacy contact
Email: info@doelshop.nl
Address: Vondelwende 52, 2182 VV Hillegom, the Netherlands

We will review your request and respond within one month.

18. Contact Us

For general enquiries related to this Privacy Policy, our Services or the use of your information, you may contact us at:

DoelShop
Email: info@doelshop.nl
Address: Vondelwende 52, 2182 VV Hillegom, the Netherlands

For privacy-related questions or to exercise your rights, please refer to Section 17 (Privacy Contact).

19. Public Information

Our Services may allow users to post content or information publicly, including but not limited to photographs, status updates, comments, blogs, articles or other personal contributions.

Please note: any content you make public will be accessible to other users and possibly to the general public.

We cannot guarantee the privacy or confidentiality of such information. You are solely responsible for what you share, and we advise you to exercise caution when publishing personal information.

20. Opting Out of Communications

From time to time, we may send you informational or marketing communications, such as announcements, promotional materials or updates about our Services. You may opt out of receiving such communications at any time by:

• Clicking the “unsubscribe” or “opt-out” link in the footer of our emails
• Or contacting us at: info@doelshop.nl

Please note: opting out of marketing emails does not affect essential communications about your account or our Services.

21. Our App

When you use our app, we also process: the type and operating system of your device, the app version, crash reports and, if you allow notifications, a code to send you push notifications. The app asks your permission before it sends notifications; you can switch them off at any time in the settings of your phone. Analytics in the app only start after you have given your consent, in the same way as the cookie banner on the website (see Section 8). If you only delete the app from your phone, your account remains. You can delete your account and data in the app or on the website via Account > Delete account. Apple and Google process data when you download the app from their app store, under their own privacy policies.

22. Our Browser Extension

Our browser extension recognises on your own device whether a webshop you visit, or a search result, is part of the Website. Your browsing history is not sent to us and is not stored. Only when you click on a reminder from the extension do we record that click, so that your purchase can be registered for your Cause.

By using our Services, you agree to the terms of this Privacy Policy.