Privacy Policy

1. Who we are

CUNUCU is a small handcraft business based in the Netherlands, selling tropical-themed products made with a Cricut cutting machine and 3D printer. You can contact us at shop@cunucu.nl.

2. What data we collect

When you place an order or create an account, we collect:

• Your name and email address
• Your shipping address (for shop orders)
• Your order history and messages exchanged with us

We do not collect payment card data. Payments are handled separately and we never store your card details.

3. Why we collect it

We use your data to:

• Process and fulfil your orders
• Send you order confirmations and status updates
• Respond to your messages and custom order requests
• Maintain your account if you choose to create one

The legal basis is performance of a contract (Article 6(1)(b) GDPR) — we need this data to deliver your order.

4. Cookies

We use a single strictly necessary cookie to remember your shopping cart between pages. This cookie does not track you across other websites and does not require your consent under EU law (Directive 2002/58/EC, Article 5(3)).

If you create an account, a second cookie stores your login session. Both cookies expire when you close your browser or log out.

5. Who we share data with

We do not sell or share your personal data with third parties for marketing purposes. Your data may be shared with:

• Our hosting provider (server infrastructure only)
• Shipping carriers, solely to deliver your order

6. How long we keep data

Order records are kept for 7 years to comply with Dutch tax law. Account data is kept until you request deletion. You can request deletion of your account at any time by emailing us at shop@cunucu.nl.

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (where legally permitted)
• Object to processing or request restriction
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl

To exercise any of these rights, email us at shop@cunucu.nl. We will respond within 30 days.

8. Security

Your data is stored on a secured server. Passwords are hashed using bcrypt and never stored in plain text. We use HTTPS to protect data in transit.

9. Changes to this policy

We may update this policy occasionally. We will notify you of significant changes by email or a notice on our website. The date at the top of this page shows when it was last updated.

10. Contact

Questions about this privacy policy? Email us at shop@cunucu.nl.