Privacy Policy

This document was last amended 9 July 2025.

Who we are

Our website address is: https://heinakroon.net

What personal data we collect and why we collect it

Orders and Checkout

When you place an order through our webshop, we collect personal information such as your name, email address, billing/shipping address, phone number and order details. This data is used for:

Processing and delivering your order
Customer support and returns
Internal record keeping and legal compliance (e.g. accounting)
(Optional) Sending you updates and news about similar products, if you have opted in

We do not collect or store your credit card details; all payments are securely processed by our third-party payment providers.

Marketing Communications

You may choose to subscribe to updates about new overlay designs and related products. If you opt in during checkout or via a form on our website, we will occasionally contact you with relevant news or promotions. You can unsubscribe at any time using the link at the bottom of any marketing email.

We will never send you marketing emails without your consent.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (a hash) may be provided to the Gravatar service to check if you use it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

We use cookies for essential site functionality (such as logins), remembering preferences, and collecting anonymous analytics data to improve our website.

If you leave a comment, you may opt in to saving your name, email address, and website in cookies for your convenience. These cookies last for one year.

See our Cookie Policy for full details.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles). Embedded content behaves in the same way as if the visitor has visited the original website. These sites may collect data, use cookies, and monitor your interaction with their content.

Analytics

We use anonymous usage data to understand how visitors interact with our site. This helps us improve layout, navigation, and content relevance. We do not use personal identifiers for analytics purposes.

Who we share your data with

We do not sell or rent your personal data. We only share it in the following limited situations:

With trusted third parties (e.g., payment processors, order fulfillment partners) necessary for delivering your purchase
With authorities if required by law or in response to valid legal processes
In case of a business transfer or sale (your data would be part of the assets transferred)

How long we retain your data

Comments and their metadata: indefinitely
Customer order data: as required by tax and accounting laws (usually 6–10 years)
User profiles: as long as the account remains active
Marketing opt-ins: until you unsubscribe or request deletion

What rights you have over your data

Under the GDPR, you have the right to:

Access a copy of the personal data we hold about you
Request correction or deletion of your data
Object to or restrict processing of your data
Withdraw marketing consent at any time
File a complaint with a data protection authority

To exercise your rights, contact us at: [email protected]

Where we send your data

Comments may be checked via automated spam detection services
Order and account data may be securely processed and stored via third-party systems (e.g., web host, payment providers)

International data transfers

Some of our service providers (such as email or analytics tools) may store data outside the EU. In these cases, we ensure appropriate safeguards (such as EU-approved Standard Contractual Clauses) are in place.