Privacyverklaring
Privacy statement
We ask for as little as we can and we do not sell any of it. This page says what we hold, why we are allowed to hold it, how long we keep it, and what you can make us do about it.
Who is responsible
SOCK SOURCE B.V., trading as Inkstep, is the controller for the personal data described here. The registered address and company details are on the legal information page.
For anything about your data: support@socksource.shop.
What we collect, and why
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, address, email, phone | To deliver your order and contact you about it | Performance of the contract | 7 years (Dutch tax law) |
| Order contents and value | To fulfil the order and handle returns | Performance of the contract | 7 years (Dutch tax law) |
| Checkout details where payment was never completed | So we can help if you come back, and to spot problems in our checkout | Legitimate interest | 6 months, then deleted |
| Contact form messages | To answer you | Legitimate interest | 2 years |
| Rights-holder objections | To act on the claim and keep a record of what we did | Legal obligation and legitimate interest | 5 years |
| Email address for pattern announcements | To send you the emails you asked for | Consent | Until you unsubscribe |
Consent for pattern announcements is asked for separately from processing your order. Ticking one never ticks the other, and refusing the marketing one never blocks a purchase.
Card details
We never receive your card number. Payment is completed on the secure page of a payment services provider certified to PCI DSS Level 1. Card data is entered there and never passes through our servers.
What we get back is confirmation that a payment succeeded, plus the last digits and card type for reconciliation. That is all.
Who else sees your data
Only parties we need to involve to get your order to you:
- · The carrier that delivers your parcel — name, address, phone.
- · Our payment services provider — the amount and your email, not held by us.
- · Our hosting and email providers, as processors under contract.
- · Our accountant, and the tax authority where the law requires it.
We do not sell personal data and we do not share it for anyone else’s marketing.
Transfers outside the EEA
Our hosting is in the European Union. Where a processor operates outside the EEA, the transfer relies on an adequacy decision or on the European Commission’s standard contractual clauses. Ask us and we will tell you which applies to which provider.
Your rights
Under the GDPR you can ask us to:
- · Show you what we hold about you (access)
- · Correct anything wrong (rectification)
- · Delete it (erasure, where no legal duty to keep it applies)
- · Restrict what we do with it
- · Hand it over in a portable format
- · Stop processing based on legitimate interest (objection)
- · Withdraw consent at any time, without affecting what came before
Email support@socksource.shop. We answer within one month. There is no charge.
Complaining to the regulator
If you are not satisfied with how we have handled your data, you have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (AP).
Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag, Nederland. They publish a complaints procedure on their own website.
You can also complain to the supervisory authority in the EU country where you live or work. Telling us first is welcome but not required.
Security
The site runs over HTTPS throughout. Access to order data is limited to the people who need it to do their job. If a breach ever puts your rights at risk, we notify the AP within 72 hours and tell you directly where the law requires it.
Children
This site is not intended for children under 13 and we do not knowingly collect their data. Anyone aged 13 to 17 needs the consent of a parent or guardian. If you believe a child has given us data, email us and we will delete it.
Cookies
Cookies are covered separately on the cookie statement.
Contact: support@socksource.shop · +31 85 0160421