Currency

Privacy policy

Last updated: February 12, 2026

Tapín VOF, Dollebegijnensteeg 5B, 1012 HD Amsterdam, The Netherlands (“Tapín”, “we”, “us”) operates www.tapin.studio. We are the data controller within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This Privacy Policy explains how we collect, use, disclose and protect your personal data.

1. PERSONAL DATA WE COLLECT

We may collect the following categories of personal data:

Identity & Contact Data
Name, billing address, shipping address, email address, telephone number.

Order & Transaction Data
Order details, custom specifications, purchase history, payment confirmations, invoices, communications relating to custom production.

Payment Data
Processed securely by Shopify Payments and its payment processing partners. We do not store full credit card details.

Account Data
Login credentials (if account created), preferences and saved information.

Technical & Usage Data
IP address, browser type, device information, usage data, cookie identifiers.

Marketing Data
Email subscription status, advertising interactions, analytics identifiers.

2. LEGAL BASIS FOR PROCESSING (GDPR)

We process your personal data on the following legal grounds:

  • Contract performance (Art. 6(1)(b) GDPR): to process and fulfill your order, including custom production and shipping.
  • Legal obligation (Art. 6(1)(c) GDPR): compliance with tax, accounting and regulatory requirements.
  • Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention, service improvement, website security.
  • Consent (Art. 6(1)(a) GDPR): marketing communications and non-essential cookies.

You may withdraw consent at any time without affecting the lawfulness of prior processing.

3. HOW WE USE YOUR DATA

We use your data to:

  • Process custom and made-to-order rug production
  • Process 50% deposit and final payment
  • Arrange shipping and customs documentation
  • Provide customer support
  • Prevent fraud and secure transactions
  • Comply with tax and accounting obligations
  • Send marketing communications (if consent given)
  • Improve website functionality and user experience

4. DATA SHARING AND PROCESSORS

We share personal data only where necessary and under GDPR-compliant agreements.

WE SHARE DATA WITH:

Shopify Inc.
Our e-commerce platform provider, which hosts our store and processes personal data as both processor and independent controller for certain enhanced services.
Shopify Privacy Policy: https://privacy.shopify.com

Payment Processors
Shopify Payments and affiliated financial institutions.

Shipping & Logistics Providers
DHL, FedEx, UPS or similar carriers to fulfill international delivery.

Accounting & Tax Advisors
For statutory financial reporting and compliance.

Marketing & Analytics Providers
Google, Meta (Facebook/Instagram), and Shopify advertising services (only where consent is provided).

We do not sell personal data.

5. INTERNATIONAL TRANSFERS

Because Shopify and certain service providers operate outside the European Economic Area (EEA), personal data may be transferred outside the EU.

Where such transfers occur, we rely on:

  • European Commission Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Or equivalent legally recognized safeguards

6. DATA RETENTION

We retain personal data only as long as necessary:

  • Order and invoice data: 7 years (Dutch tax law requirement)
  • Customer account data: Until deletion request or account closure
  • Marketing data: Until unsubscribe or consent withdrawal
  • Technical cookie data: According to cookie duration settings

After expiration, data is securely deleted or anonymized.

7. COOKIES AND TRACKING

We use:

  • Essential cookies – required for checkout and security
  • Analytics cookies – to understand website usage
  • Marketing cookies – for advertising and retargeting (with consent)

You may manage cookie preferences via our cookie banner.
You can also withdraw consent at any time.

For more information, see our Cookie Policy.

8. YOUR RIGHTS UNDER GDPR

If you reside in the EU or UK, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise your rights, contact:
info@tapin.studio

We may request proof of identity before responding.

9. SECURITY MEASURES

We implement appropriate technical and organizational measures, including:

  • SSL encryption
  • Secure payment gateways
  • Restricted internal data access
  • Shopify-hosted secure infrastructure

However, no system is completely secure.

10. CHILDREN

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The version published on our website at the time of purchase applies to that transaction.

12. CONTACT

Tapín VOF
Dollebegijnensteeg 5B
1012 HD Amsterdam
The Netherlands

Email: info@tapin.studio
Website: www.tapin.studio

For the purposes of GDPR, Tapín VOF is the data controller.

Cart

0 products in your cart

Deposit due today: €0,00 Worldwide delivery included. For deliveries outside the EU, import duties and local taxes may apply and are the responsibility of the customer.
View Cart
Start shopping