I’m Sabrena and I make the garlands at Letterknus. To handle your order, I need a few details from you. Here you can read which details, what I use them for, who I share them with and how long I keep them.
Last updated: 25 October 2026
Who I am
Letterknus is a sole proprietorship owned by Sabrena. I am responsible for your personal data.
- Address: Tolheksbos 47, 2134 GH Hoofddorp, the Netherlands
- Chamber of Commerce (KvK) number: 42196032
- Email: sabrena@letterknus.nl
What data I use, and why
Your order. Your name, address, email address, your phone number (if you enter it) and what you order: the name on the garland and the fabrics you choose. I need these to make and send your garland, and to email you about your order. I’m allowed to do this because we enter into a purchase agreement together.
The name on the garland. This is often a child’s name. I only use it for your order. I only post a photo of your garland or the name on it on Instagram, TikTok or the website if you have said yes to that first: with the tick box when you complete your order, or in a message. You can always withdraw that permission; just send me an email.
Your payment. You pay through Mollie. I can see whether you have paid, the amount and how you paid. With iDEAL I can also see the name and account number you paid with.
Looking up your address. When you enter your postcode and house number at checkout, I look up your street and town with PDOK, a free address service run by the Dutch government. I only send your postcode and house number, not your name or email address.
My accounts. I keep orders and payments for the Dutch tax authorities. The law requires this.
Questions and messages. If you email me or send me a DM on Instagram or TikTok, I use what you send to help you. If you order through a DM, I use your details just as I would for an order in the webshop.
The review email. Seven days after your order is complete, I send you one email asking how you like your garland. I do this because I’d love to know whether you’re happy, and because a review helps other customers. Would you rather not get that email? Just let me know and I won’t send it. If you write a review, it appears on the website with your first name and the number of stars.
A discount code. If your confirmation email contains a discount code, the webshop uses your email address to check whether you have already used that code.
A secure webshop. The webshop’s server records which pages are requested, along with the IP address. To prevent misuse, the webshop also briefly keeps track of how often someone logs in or looks up an address from one IP address. It does this with an encrypted code of your IP address, which is deleted after 10 minutes. If something goes wrong in the webshop, I get an error report through Sentry. No names, email addresses, phone numbers or IP addresses are included, only things like an order number and the status of an order.
The newsletter. If you sign up for my newsletter, at the bottom of the website or with the tick box when you complete your order, I’ll send you the occasional email about new fabrics and offers. For that I use your email address, your first name (if you fill it in) and the language of the website. I only do this if you sign up yourself. You’ll get a welcome email straight away. If someone else signed you up, you can unsubscribe in that email with one click. So that I can show you signed up, the time and IP address of your sign-up are kept. I can also see whether a newsletter was opened and which links were clicked. You can unsubscribe at any time, with the link at the bottom of every newsletter or by emailing me.
I don’t use your data for any other advertising and I never sell your data.
Who I share your data with
I only share what is needed:
- DHL delivers your order and receives your name, address and email address for that. DHL uses that email address to send you the track-and-trace email. DHL is itself responsible for what it does with that data. If you collect your order in Hoofddorp, DHL receives nothing.
- PostNL delivers your order if you live in Belgium (together with bpost) and receives your name, address and email address for that. PostNL uses that email address to send you the track-and-trace email. PostNL is itself responsible for what it does with that data.
- Mollie handles the payment. Mollie is itself responsible for your payment details; see Mollie’s privacy policy for that.
- mijn.host hosts the Letterknus website and email, in the Netherlands. So your order and your emails are stored on their servers. I have a data processing agreement with them.
- Sentry sends me the webshop’s error reports. These are stored in the European Union, without names or email addresses. I also have a data processing agreement with Sentry.
- Laposta sends the newsletter and receives your email address, your first name (if you fill it in), the language and the IP address you signed up from. Laposta is based in the Netherlands. I have a data processing agreement with Laposta.
- PDOK, the government address service, only receives your postcode and house number (see above).
- Instagram and TikTok: if you send me a message there, the rules of Meta and TikTok also apply.
- The Dutch tax authorities, if they ask for it.
Your data stays in the European Union.
How long I keep your data
- Orders, payments and invoices: 7 years, because that’s how long I have to keep my accounts for the Dutch tax authorities.
- Emails and messages about an order: 7 years, because they are part of my business records. Other messages and questions: 1 year.
- An order that was never paid: 1 month.
- Your review: for as long as it’s on the website. Would you like it removed? Then I’ll remove it.
- The webshop’s log: 30 days. The server log at mijn.host: 12 months at most. Error reports in Sentry: 30 days.
- The newsletter: for as long as you are signed up. If you unsubscribe, your email address stays at Laposta marked as “unsubscribed”, so you don’t get a newsletter again by mistake. Would you like me to remove it completely? Just email me.
Cookies
A cookie is a small file that a website places in your browser. I only use cookies that are needed to make the webshop work. I don’t use cookies to track you, no analytics cookies and no advertising cookies. That’s why you don’t see a cookie banner.
- lk_taal: remembers whether you want to see the website in Dutch or English, when you choose with the language button. Kept for 1 year.
- woocommerce_items_in_cart and woocommerce_cart_hash: remember what’s in your basket. Deleted when you close your browser.
- wp_woocommerce_session_…: keeps your basket if you step away for a while. Kept for 2 days.
On Mollie’s payment page, Mollie’s own cookies and rules apply.
Your rights
It’s your data. You can:
- ask which data I hold about you, and get a copy;
- have anything that’s wrong corrected;
- have your data deleted, except what I have to keep for the tax authorities;
- object, for example to the review email;
- withdraw your consent, for example for the newsletter;
- ask me to do less with your data, or to pass it on to someone else.
Email your request to sabrena@letterknus.nl. I’ll reply within one month. Sometimes I’ll first ask you to show that it really is your data.
Not happy with how I handle your data? Please let me know first, so we can find a solution together. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Security
The website uses a secure connection (https). Only I and the webshop’s administrator can access the orders.
Changes
If anything changes in how I handle your data, I’ll update this privacy policy. At the top you can see when that last happened.
Got a question? Feel free to send me an email!