Last updated: September 2026
At Casa Alba, we value your privacy and handle your personal data with care. When you visit our website, place an order, contact us or use our services, we may process certain personal information.
In this Privacy Policy, we explain what personal data we collect, why we collect it, how we use and protect it, and what rights you have.
1. Who is responsible for your personal data?
Casa Alba is responsible for the processing of personal data as described in this Privacy Policy.
Casa Alba
Poststraat 33
6828 EK Arnhem
The Netherlands
Chamber of Commerce (KvK): 42126753
Email: info@casalba.nl
If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us by email.
2. What personal data do we collect?
We may collect and process personal data when you visit our website, place an order, create an account, request a personalised product or contact us.
Depending on how you use our website, this may include:
First and last name
Billing and shipping address
Email address
Telephone number, if provided
Order and purchase information
Account information
Payment information
Information you provide when ordering a personalised product
Messages or information you send us by email, social media or through our website
IP address
Browser and device information
Information about your use of our website
Cookie data
For personalised products, you may provide additional information, such as names, text, photographs, illustrations or other content required to create your order. We only use this information to provide the requested product or service.
Please only provide personal information, photographs or other content relating to another person when you have permission to do so.
3. Why do we process your personal data?
We only process personal data when we have a valid reason to do so under applicable privacy legislation.
We may process your personal data for the following purposes:
Processing and delivering your order
We use your information to process payments, prepare your order, communicate about your order and arrange delivery.
Creating personalised products
If you order a personalised product, we use the information, text, photographs or other materials you provide to create that product.
Customer service
We use your information to answer questions, handle requests and resolve problems relating to your order or our services.
Managing your account
If you create an account on our website, we process the information necessary to provide and manage your account.
Administration and legal obligations
We may need to retain certain information, such as invoices and transaction records, to comply with tax and other legal obligations.
Improving our website and services
Where permitted, we may use information about how our website is used to improve its functionality, performance and user experience.
Marketing and newsletters
If you have subscribed to our newsletter or otherwise given us permission, we may use your email address to send you news, inspiration, product updates or offers. You can unsubscribe at any time.
4. Legal bases for processing
Under the General Data Protection Regulation (GDPR), we need a legal basis for processing personal data.
Depending on the situation, we process your data because:
it is necessary to perform a contract with you, for example when you place an order;
we need to comply with a legal obligation;
you have given us consent; or
we have a legitimate interest in processing the information, for example to improve our services or prevent fraud, provided that your privacy rights do not outweigh that interest.
Where processing is based on your consent, you may withdraw your consent at any time.
5. Payments
When you place an order, your payment is processed through the payment methods and payment service providers available in our webshop.
The payment provider may process information such as your name, payment details, bank details, transaction information and IP address where necessary to complete and secure your payment.
Casa Alba does not receive or store all of your banking or card information itself. Payment providers process this information in accordance with their own privacy policies and applicable legislation.
6. Shipping and delivery
To deliver your order, we may share the information necessary for delivery with the relevant postal or delivery service.
This may include your:
Name
Shipping address
Email address
Telephone number, where required for delivery
We only provide information that is necessary to process and deliver your order.
7. Sharing personal data with third parties
Casa Alba does not sell your personal data.
We only share personal data with third parties where this is necessary to operate our webshop, provide our services, fulfil an order or comply with a legal obligation.
These parties may include:
Payment service providers
Postal and delivery services
Website and hosting providers
WooCommerce and services connected to our webshop
Email service providers
Accounting or administrative service providers
Analytics and cookie providers, where applicable
Other service providers necessary to operate Casa Alba
Where required, we make appropriate arrangements with service providers regarding the protection and processing of personal data.
We may also disclose personal data if we are legally required to do so or if this is necessary to prevent or investigate fraud or misuse.
8. International transfers
Some service providers we use may process personal data outside the European Economic Area (EEA).
If personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place where required by law, such as an adequacy decision by the European Commission or approved Standard Contractual Clauses.
9. How long do we keep your personal data?
We do not keep your personal data longer than necessary for the purpose for which it was collected, unless we are legally required to retain it for a longer period.
For example, certain financial and administrative records must be retained for the period required by Dutch tax legislation.
Information relating to personalised products, customer service requests and website accounts is retained only for as long as reasonably necessary for the relevant purpose.
When personal data is no longer required, we delete or anonymise it where appropriate.
10. Personalised products and uploaded content
Casa Alba may offer personalised products for which you can provide text, names, photographs, illustrations or other content.
We process this content solely for the purpose of preparing, producing and delivering the requested personalised product and providing related customer service.
Please do not upload sensitive personal information unless it is genuinely necessary for the product you are ordering.
If your personalised product contains information or images relating to another person, you are responsible for ensuring that you are permitted to provide and use that material.
11. Cookies
Our website may use cookies and similar technologies.
Cookies are small files stored on your device that help websites function correctly and can provide information about how a website is used.
We may use:
Necessary cookies
These cookies are required for the website and webshop to function properly. For example, they can be used to remember the contents of your shopping cart or keep your account secure.
Preference cookies
These cookies can remember choices you make on our website.
Analytics cookies
These cookies help us understand how visitors use our website so that we can improve it.
Marketing cookies
If we use marketing or advertising cookies, these are only placed where your consent is required and you have given that consent.
You can manage your cookie preferences through the cookie settings on our website.
For more detailed information about the cookies we use, please see our Cookie Policy.
12. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or disclosure.
Our website uses a secure SSL connection. You can recognise this by the padlock symbol in your browser’s address bar.
Access to personal data is limited to those who need it to perform their work or provide services to Casa Alba.
Although we take appropriate precautions, no method of transmitting or storing information online can be guaranteed to be completely secure.
13. Data breaches
If a personal data breach occurs, we will assess the potential risks and take appropriate action.
Where required by law, we will report the breach to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you where legally required.
14. Your privacy rights
Under the GDPR, you have several rights regarding your personal data.
Depending on the circumstances, you may have the right to:
Access the personal data we hold about you
Correct inaccurate or incomplete personal data
Request deletion of your personal data
Request restriction of processing
Object to certain processing of your personal data
Withdraw your consent
Receive certain personal data in a structured, commonly used and machine-readable format
Request that your personal data be transferred to another organisation where applicable
If you wish to exercise any of these rights, please contact us at info@casalba.nl.
We may ask you to provide information necessary to verify your identity before processing your request.
We aim to respond to requests within one month, as required by the GDPR.
15. Complaints
If you have a question or complaint about how Casa Alba handles your personal data, please contact us first so that we can try to resolve the matter.
You also have the right to submit a complaint to the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
The Netherlands
More information is available on the website of the Autoriteit Persoonsgegevens.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example if our website, services or legal obligations change.
The most recent version will always be available on our website. The date at the top of this Privacy Policy indicates when it was last updated.
17. Contact
If you have any questions about this Privacy Policy, your personal data or your privacy rights, please contact us:
Casa Alba
Email: info@casalba.nl
Chamber of Commerce (KvK): 42126753
Poststraat 33
6828 EK Arnhem
The Netherlands