After these periods, your data will be deleted or anonymized.
5. Email Collection and Marketing Communications
If you choose to receive our newsletter or other marketing updates, we’ll store your email address and preferences securely using Omnisend.
- Purpose: To send you marketing communications with your consent
- Retention: Up to 3 years after you opt out, to ensure we don’t send unwanted messages
- Storage: Data may be transferred to Omnisend servers in the U.S. under Standard Contractual Clauses (SCCs) as approved by the European Commission
- Protection: Omnisend uses encryption, secure access controls, and GDPR-compliant data-processing agreements
- Opt Out: You can unsubscribe at any time by clicking “unsubscribe” in any email or contacting us at
privacy@squishables.eu
You can view Omnisend’s policies here:
6. Cookies and Analytics
We use cookies and similar technologies to make our website work smoothly, personalize your experience, and analyze how it’s used.
For example, cookies help us remember what’s in your cart, measure website traffic, and show you relevant products.
You can see the full list of cookies and their durations by visiting our cookie policy.
You can change or withdraw your consent to cookies anytime using the “Manage Cookies” link at the bottom of our site.
7. How We Share Your Data
We only share your personal data where necessary and always under strict data-protection conditions.
This includes sharing information with trusted partners who help us provide our services, for example:
- Shopify – Website hosting and e-commerce platform (servers located in the EEA) - Shopify Privacy Policy
- Omnisend – Marketing communications (SCCs for U.S. transfers) - Omnisend Privacy Policy
- Payment processors – PayPal, Apple Pay, Google Pay, VISA, Mastercard, American Express, and others
- Analytics and advertising – Google Analytics, Meta (Facebook/Instagram), and (in future) TikTok Ads
- Shipping providers – Delivery and logistics partners to fulfill your order
We require all third-party processors to comply with GDPR and use your data only as instructed by us.
We never sell or rent your personal data to anyone.
8. Data Transfers Outside the EEA or UK
If we transfer your data outside the EEA or UK, we ensure that it remains protected by one of the following safeguards:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions (for countries recognized as providing adequate protection)
- Encryption and access control measures
Omnisend, Google, and Meta transfers are protected through SCCs and technical safeguards that align with GDPR Articles 44–49.
9. Your Rights Under GDPR
You have several important rights over your personal data, including:
- Access: Request a copy of your data
- Correction: Ask us to fix incorrect or outdated information
- Erasure (“Right to be Forgotten”): Request deletion of your account or data (unless we need it for legal purposes)
- Restriction: Ask us to limit how we use your data
- Portability: Request a copy of your data in a portable format
- Objection: Object to marketing or certain processing
- Withdraw Consent: Withdraw consent for marketing or cookies at any time
To exercise any of these rights, you can contact us at privacy@squishables.eu or through the My Account → Manage My Data page.
We’ll respond within one month.
10. Account Deletion and Data Erasure
You can delete your account at any time through your account settings or by contacting us at privacy@squishables.eu.
We’ll delete your data within 30 days, except for records we must keep for legal or tax purposes (kept for 7 years).
11. Children’s Privacy
Our website and products are not directed to children under 16.
If we learn that we have collected data from a child under the applicable age of consent without parental permission, we’ll delete it promptly.
12. Data Security
We use appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit
- Firewalls and secure server configurations
- Limited, role-based staff access
- Regular audits and compliance reviews
While we take every reasonable step to protect your data, no online system can be 100% secure, so please use strong passwords and safeguard your account information.
13. Complaints
If you have a concern about how we handle your personal data, please contact us first at privacy@squishables.eu.
If we can’t resolve it, you have the right to lodge a complaint with your local supervisory authority:
14. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our services or legal obligations.
The latest version will always be available on our website, with the “Last updated” date shown at the top.
15. Contact Us
If you have any questions or wish to exercise your data rights, contact:
Squishable B.V.
De Lairessestraat 145 C
1075 HJ Amsterdam, Netherlands
Email: privacy@squishables.eu
