Privacy statement
Last updated: 25 October 2026
This statement explains what personal data the Jantebi shop at jantebi.com collects, why, who receives it and how long it is kept.
Who is responsible
Jantebi is run by Marieke, who is the controller for the personal data described here. For any question or request about your data, email hueytonantzin10@gmail.com.
The shop is built and maintained on Marieke's behalf by Niels Roest (Expeditionair). He receives order notifications and technical alerts and can access order data to keep the shop running.
What we collect and why
When you browse the shop. We do not use analytics, advertising or tracking tools. Our hosting provider records technical data for each request, such as your IP address and browser type, to deliver the site and keep it secure. Basis: our legitimate interest in a working, secure website (GDPR art. 6(1)(f)).
When you place an order. Payment runs through Stripe Checkout. Stripe collects your card or iDEAL details directly; we never see them. After payment we receive and store:
- your name and email address
- your billing and shipping address
- your phone number, if you gave one
- what you ordered, the amounts, and any discount code you used
We use this to deliver your order, send you an order confirmation, handle returns and refunds, and answer your questions. Basis: performing our contract with you (art. 6(1)(b)). We keep order and invoice records because tax law requires it (art. 6(1)(c)).
When you start checkout, we record your order with only the destination country and the amounts, before you pay. If you do not complete payment, that record is marked as cancelled.
Returns. If you return something, we record which items, the reason you give and the refund. Basis: our contract with you and the statutory 14-day withdrawal period (art. 6(1)(b) and (c)).
Security and continuity. We check every hour that each paid order has been processed and that its emails were sent, and we make an encrypted backup of the shop database every night. Basis: our legitimate interest in processing every order correctly and not losing data (art. 6(1)(f)).
We do not send newsletters or marketing emails, and we do not sell or share your data for advertising.
Who receives your data
Stripe
Payment, fraud screening, refunds
Stripe Payments Europe (Ireland); Stripe may also process data in the United States
Vercel
Hosting of the website and its server functions
Server functions run in Ireland (EU); Vercel is a US company
Supabase
Database with orders and returns
Data stored in Ireland (EU); Supabase is a US company
Resend
Sending order confirmations and order notifications
United States
GitHub
Storing the encrypted nightly backup
United States; the backup is encrypted with a key only we hold
PostNL or another carrier
Delivering your parcel
Your name and shipping address, on the shipping label
Stripe uses automated fraud screening on payments. If your payment was declined and you think this was a mistake, contact us and we will look at it with you.
Where data goes to a provider outside the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as set out in that provider's data processing terms.
How long we keep it
| Data | Kept for |
|---|---|
| Orders, invoice details and returns | 7 years, as required by Dutch tax law |
| Checkouts that were never paid (country and amounts only) | 7 years, together with the order records |
| Encrypted database backups | 90 days |
| Your shopping cart in your browser | Until you empty it or complete your order |
| Shop administrator accounts | Until their access is withdrawn |
| Server logs at our hosting provider | A short period, set by the provider |
Cookies and local storage
The shop sets no cookies when you browse it, and uses no analytics, advertising or tracking.
Your shopping cart (product variants and quantities) and the country you choose for shipping are saved in your browser's local storage, so they are still there when you come back. They are stored on your device and are not linked to your name or email address. This is necessary for the shop to work, so we do not ask for consent.
The payment page is hosted by Stripe on its own domain and uses Stripe's own cookies, as described in Stripe's privacy policy. The shop's admin area uses a login cookie for administrators only.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its use, and to receive your data in a portable format. Some data we must keep for tax purposes; in that case we will tell you. Email hueytonantzin10@gmail.com and we will respond within one month.
If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the data protection authority in your country.
Changes
If we change how we handle personal data, we update this page and the date at the top.