Privacy Policy
Last updated: October 2026
Who we are
This website is operated by Encoro. We are the controller for the processing of personal data described in this policy, as defined in the General Data Protection Regulation (GDPR). You can reach us via the contact form on this website.
What data we process
Contact form: your name, work email address, company, store URL, platform, revenue range and any message you send. Cookie choices: a record of the cookie categories you accepted or declined, and when. Technical data: like any website, our hosting processes technical data such as IP address, browser type and time of visit in server logs, to deliver and secure the website. We do not use analytics or advertising cookies, and we do not build visitor profiles.
Purposes and legal bases
We use contact form details to respond to your request and to schedule and scope a Revenue Audit (steps prior to entering into a contract, Art. 6(1)(b) GDPR, and our legitimate interest in responding to business enquiries, Art. 6(1)(f)). We keep a record of your cookie choices to be able to demonstrate consent (legal obligation, Art. 6(1)(c) and Art. 7(1)). Server logs are processed for security and reliable operation (legitimate interest, Art. 6(1)(f)). Optional cookies would only be used with your consent (Art. 6(1)(a)).
Who receives your data
We do not sell your data and do not share it for advertising. Service providers that help us run this website and handle enquiries — such as hosting and our customer-relationship tooling — only process data on our instructions, as processors under a data processing agreement.
Transfers outside the EEA
We aim to process data within the European Economic Area. If a service provider processes data outside the EEA, we only allow this with appropriate safeguards, such as an adequacy decision of the European Commission or the EU Standard Contractual Clauses.
How long we keep data
Enquiries: up to 24 months after our last contact, unless a customer relationship follows, in which case the retention periods of that relationship apply. Cookie choices: 12 months, after which we ask again. Server logs: only as long as needed for security and operation.
Security
We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access, including encrypted connections and access limited to people who need it.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. Where processing is based on consent, you can withdraw it at any time — for cookies via “Cookie settings” at the bottom of every page — without affecting processing before withdrawal. To exercise your rights, contact us via the contact form; we respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the authority in your own country.
Automated decision-making
This website does not use automated decision-making or profiling that produces legal or similarly significant effects for you.
Changes to this policy
We may update this policy. The date at the top shows when it was last changed. If changes affect cookies that require consent, we will ask for your consent again.