Privacy statement

This privacy statement explains which personal data PrestaHaven processes when you visit our shop, create an account, place an order or contact us, and what your rights are.

Who we are

PrestaHaven is a trade name of GP WebTech (sole proprietorship), Paxtonstraat 3N, 8013 RP Zwolle, the Netherlands, Chamber of Commerce no. 08199002, VAT no. NL001114044B82. GP WebTech is responsible for the processing of your personal data as described in this privacy statement.

Questions about privacy can be sent to [email protected].

Which data we process

We only supply businesses. Even then, your details as a contact person can be personal data. We process:

  • Account and order data: name, e-mail address, password (stored encrypted), company name, VAT number, billing address, phone number (if you enter it), your orders and invoices.
  • Payment data: the payment method you choose and the status of your payment. We do not receive card details; the payment service processes those.
  • Messages: your e-mail address, your message and any attachment when you use our contact form or e-mail us.
  • Reviews: the name, title and text you enter with a product review. We show your last name shortened.
  • Technical data: IP address, browser and device data, the pages you visit and cookies (see Cookies).

Why we process your data

  • To carry out your order, deliver the modules and give you support (performance of the contract).
  • To draw up invoices and keep our accounts (legal obligation).
  • To answer your questions (performance of the contract or our legitimate interest).
  • To run and secure the shop (our legitimate interest).
  • To see with Google Analytics how visitors use the shop, so we can improve it (see Cookies).
  • With your consent: to measure with Google Ads which of our ads lead to an order, and to show our ads to earlier visitors.

We do not send newsletters and we do not sell your data to others.

Who we share data with

We work with service providers that process data on our behalf. They only receive the data they need for their task:

  • Stripe and MultiSafepay: processing payments. If you pay with a method of another party, such as Klarna or PayPal, that party receives the data needed for that payment.
  • Cloudflare: security and fast delivery of the website. All traffic to the shop passes through Cloudflare.
  • Google: visitor statistics with Google Analytics and, with your consent, Google Ads (results of our ads and remarketing). If you are logged in, we send a customer number, not your name or e-mail address. When you place an order, Google Ads receives the order number, the amount and your e-mail address in encrypted (hashed) form, to link the order to a click on an ad (enhanced conversions).
  • Purelymail: sending e-mails, such as order confirmations and invoices.
  • Our hosting provider: storage of the shop and its database.

Apart from that, we only pass on data when the law requires us to, for example to the Dutch tax authorities.

Data outside the European Union

Some service providers, such as Google, Stripe and Cloudflare, may process data outside the European Economic Area, for example in the United States. This only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.

How long we keep data

  • Invoices and the data in our accounts: 7 years, as Dutch tax law requires.
  • Your account: as long as your account exists. You can ask us to delete your account.
  • Messages: as long as needed to handle your question and any follow-up questions.
  • Statistics in Google Analytics: at most 14 months.

Cookies

Cookies are small files the website stores in your browser. We use:

  • Functional cookies: the PrestaShop cookie (cart, language and login status; valid for 20 days) and a session cookie. The shop does not work without these cookies.
  • Analytical cookies of Google Analytics (_ga and _ga_…): to measure how visitors use the shop.
  • Advertising cookies of Google Ads (such as _gcl_au): to link an order to a click on one of our ads. Analytical and advertising cookies are only placed with your consent; you can change your choice at any time with the cookie button at the bottom left of the page.
  • Cookies of Stripe and MultiSafepay during payment, to prevent fraud, and possibly a security cookie of Cloudflare.

You can always delete or block cookies in your browser settings. If you block functional cookies, the cart and logging in no longer work.

Security

We take appropriate measures to protect your data. The shop is only available over an encrypted connection (https) and we store passwords encrypted.

Your rights

You have the right to access your personal data, to have it corrected or deleted, to have its processing restricted, to object to the processing and to have your data transferred. In your account you can view, change and download your data.

To make a request, send an e-mail to [email protected]. We respond within one month.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may change this privacy statement. The latest version is always on this page.

Last updated: 26 October 2026

Back to top