Privacy Policy

Last updated: July 28, 2026

1. Introduction

StickItLab, operated by deToon ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services.

We process your data in compliance with the General Data Protection Regulation (GDPR/EU 2016/679) and the Dutch implementation thereof, the Algemene Verordening Gegevensbescherming (AVG).

2. Data Controller

3. Personal Data We Collect

3.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Password (encrypted)
• Account preferences

3.2 Order Information

When you place an order, we collect:

• Shipping address
• Billing address
• Phone number (optional, for delivery purposes)
• Payment information (processed by secure third-party payment providers)
• Order history

3.3 Uploaded Content

When you use our service, we store:

• Design files you upload (images)
• Product specifications you select

3.4 Technical Data

We automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and interactions
• Cookies and similar technologies (see Section 9)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 GDPR:

• Contract Performance (Art. 6(1)(b)): To fulfill orders, provide services, and manage your account.
• Legal Obligation (Art. 6(1)(c)): To comply with tax, accounting, and other legal requirements.
• Legitimate Interests (Art. 6(1)(f)): To improve our services, prevent fraud, and ensure security.
• Consent (Art. 6(1)(a)): For marketing communications (when opted in).

5. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Process and fulfill your orders
• Communicate with you about orders and services
• Provide customer support
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and ensure security
• Send marketing communications (only with your consent)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Retained while your account is active. Upon account deletion request, data is removed within 30 days, except where retention is required by law.
• Order Data: Retained for 7 years after the order date to comply with Dutch tax and accounting regulations (fiscale bewaarplicht).
• Uploaded Designs: Retained while your account is active. Deleted within 30 days of account deletion, unless associated with an active order.
• Technical/Log Data: Retained for up to 12 months for security and analytics purposes.

7. Data Sharing and Third Parties

We may share your data with:

• Payment Processors: To process payments securely (e.g., Stripe, PayPal).
• Shipping Partners: To deliver your orders (shipping name and address only).
• Service Providers: Hosting, email services, and analytics providers operating under data processing agreements.
• Legal Authorities: When required by law or to protect our rights.

We do not sell your personal data to third parties.

8. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for website functionality and security.
• Preference Cookies: To remember your settings (e.g., dark mode preference).
• Analytics Cookies: To understand how visitors use our site (with consent).

You can manage cookie preferences through your browser settings.

10. Your Rights Under GDPR/AVG

Under the GDPR and AVG, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data.
• Right to Rectification (Art. 16): Request correction of inaccurate data.
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Right to Restriction (Art. 18): Request limitation of processing.
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent).

To exercise your rights, contact us at info@de-toon.com. We will respond within 30 days as required by law.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Encrypted password storage
• Regular security assessments
• Access controls and authentication
• Secure data storage facilities

12. Children's Privacy

Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and, where appropriate, by email. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about our data processing practices, please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

15. Contact Us

For any questions about this Privacy Policy or our data practices, contact us at: