Privacy Policy
Last updated: March 2026
This Privacy Policy explains how Bergh Special Products B.V. collects, uses, and protects your personal data when you use https://bspshop.com.
We are committed to protecting your personal data and handling it responsibly in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Who we are
The controller responsible for processing your personal data is:
Bergh Special Products B.V.
Handelsweg 10
7041 GX 's-Heerenberg
The Netherlands
Chamber of Commerce (KvK): 09114707
VAT number: NL80.98.33.426.B01
Email: info@bspshop.com
Privacy contact: privacy@bspshop.com
Website: https://bspshop.com
2. What personal data we collect
We may collect and process the following categories of personal data:
2.1 Data you provide directly
- first and last name
- billing and shipping address
- email address
- phone number
- company name (if applicable)
- account login details
- any information you provide in communication with us
2.2 Order data
- order details and products purchased
- order value and transaction details
- shipping method and delivery information
- order history
2.3 Payment data
Payments are processed by third-party providers such as Shopify Payments and PayPal.
We do not store full payment card details.
2.4 Account data
If you create an account:
- login credentials
- saved addresses
- order history
- account preferences
If you sign in via Google, we may receive your name and email address from your Google account. Google acts as an independent controller for its own data processing; you can review Google's privacy practices at https://policies.google.com/privacy.
2.5 Customization and uploaded content
When using product customization features, we process:
- uploaded images, files, or artwork
- product configuration data
- customization selections and specifications
- instructions or notes provided by you
2.6 Newsletter and marketing data
- email address
- subscription status
- communication preferences
- interaction with emails (where permitted)
2.7 Communication data
- emails, messages, and support requests
- customer service interactions
2.8 Technical and usage data
- IP address
- browser and device information
- pages visited and interactions
- date and time of access
- referral URLs
3. How we use your data
We process your personal data for the following purposes:
3.1 Order processing
- processing and fulfilling orders
- shipping and delivery
- customer support
- handling returns, replacements, and warranty
3.2 Account management
- creating and maintaining user accounts
- simplifying future purchases
3.3 Custom product production
- preparing customized products
- processing uploaded designs
- ensuring production requirements are met
3.4 Communication
- responding to inquiries
- sending order updates and service messages
3.5 Marketing
- sending newsletters and promotional content (only where permitted or with consent)
3.6 Website improvement
- analyzing website usage
- improving performance and usability
3.7 Security and fraud prevention
- detecting and preventing misuse
- protecting our systems and users
3.8 Legal obligations
- complying with tax, accounting, and legal requirements
4. Legal bases for processing
We process personal data based on:
- Contract performance — to fulfil orders and provide services
- Consent — for marketing and non-essential cookies
- Legal obligation — for compliance with laws
- Legitimate interests — for improving services, preventing fraud, and operating our business
5. Payments
We use external payment providers, including:
- Shopify Payments
- PayPal
These providers process your payment data in accordance with their own privacy policies.
6. Product customization and user content
When you upload files or designs:
- you are responsible for the content you provide
- we process this data solely to produce your customized product
- we may review files for technical suitability
- we reserve the right to refuse content that is unsuitable, unlawful, or not printable
7. Cookies and similar technologies
We use cookies and similar technologies to operate our website and improve user experience.
Some cookies are strictly necessary, while others (such as analytics and marketing) are used only with your consent.
For more detailed information, please see our Cookie Policy.
8. Sharing your data
We may share your personal data with the following categories of third parties:
Payment providers:
- Shopify Payments
- PayPal
E-commerce platform:
- Shopify Inc. (Canada)
Shipping and logistics partners:
- PostNL, DHL, FedEx, UPS, DPD, Mainfreight (depending on shipment type and destination)
Analytics and website improvement (only with your consent):
- Google LLC (Google Analytics 4)
- Microsoft Corporation (Microsoft Clarity)
Cookie consent management:
- Cybot A/S (Cookiebot)
IT and hosting service providers that support the operation of our website and internal systems.
Legal or regulatory authorities where required by law (e.g. tax authorities, courts).
We do not sell your personal data.
All third-party processors act on our instructions under data processing agreements (Article 28 GDPR), except where they act as independent controllers (e.g. Google when you sign in with your Google account).
9. International data transfers
Some of our service providers may process personal data outside the European Economic Area (EEA), including in:
- Canada — Shopify (e-commerce platform). Canada is recognized by the European Commission as providing an adequate level of data protection (Adequacy Decision).
- United States — Google (Google Analytics), Microsoft (Clarity), and other providers where applicable. These transfers are based on the EU-U.S. Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented where appropriate by additional technical and organizational safeguards.
- Denmark — Cybot A/S (Cookiebot). Denmark is within the EEA, so no special transfer mechanism is required.
Where transfers occur to countries without an adequacy decision, we ensure that appropriate safeguards are in place in accordance with Articles 44–49 GDPR.
You can request more information about specific transfer safeguards by contacting us at privacy@bspshop.com.
10. Data retention
We retain personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law:
- Order and invoice data — 7 years from the end of the financial year, in accordance with Dutch tax law (Article 52 of the General Tax Act / Algemene wet inzake rijksbelastingen).
- Account data — until you request deletion of your account, after which data is removed within 30 days, except where retention is required by law.
- Customer support communications — up to 24 months after the last interaction.
- Customization files and uploaded content — for the duration needed to fulfill the order plus a reasonable support period (typically 12 months after delivery).
- Marketing data (newsletter) — until you unsubscribe, after which the email address is removed from active lists within 30 days. We may retain a record of unsubscribe requests to honor your preference.
- Cookie consent records — 12 months from the date of consent, in accordance with EDPB guidelines.
- Website analytics data — anonymized or pseudonymized data may be retained up to 14 months (Google Analytics default retention).
- Security logs — up to 12 months for security and fraud prevention purposes.
After the applicable retention period, data is either deleted or anonymized so that you can no longer be identified.
11. Your rights
Under GDPR, you have the right to:
- access your personal data
- correct inaccurate data
- request deletion
- restrict processing
- object to processing
- data portability
- withdraw consent at any time
You also have the right to lodge a complaint with a supervisory authority (see Section 12).
12. Contact and Data Protection Requests
For any questions about this Privacy Policy, or to exercise your rights under the GDPR (access, rectification, erasure, restriction, portability, objection, or withdrawal of consent), please contact us at:
Email: privacy@bspshop.com
Postal address: Bergh Special Products B.V., Handelsweg 10, 7041 GX 's-Heerenberg, The Netherlands
Response time
We will respond to your request within one month of receipt, in accordance with Article 12(3) GDPR. In complex cases, this period may be extended by up to two additional months, in which case we will inform you of the extension and the reasons for it within the first month.
Identity verification
When submitting a request, please include sufficient information to allow us to identify you and process the request, such as:
- the email address used for your account or order
- your full name
- the relevant order number (if applicable)
We may ask for additional verification where reasonably needed to protect your data and prevent unauthorized disclosure.
No automated decision-making
We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR.
Right to lodge a complaint
If you believe that your personal data is being processed in violation of applicable law, you have the right to lodge a complaint with a supervisory authority. The competent authority for the Netherlands is:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
Hoge Nieuwstraat 8, 2514 EL Den Haag
Website: https://autoriteitpersoonsgegevens.nl
Phone: +31 (0)88 - 1805 250
You also have the right to lodge a complaint with the supervisory authority in your country of residence or place of work, if different.
