Controller and contact
PrintingNest Studio, Beukenhof 70, 2982 CE Ridderkerk, Netherlands, KVK 93619022, VAT NL004940023B10, is the controller. Privacy requests can be sent to sales@printingneststudio.com or made by telephone at +31 6 429 967 40.
Policies
Privacy Policy
How PrintingNest Studio collects, uses, stores and protects customer, quote, order and account information. Last updated 26 July 2026.
Privacy Policy
Data we process
We process account and contact details, billing and delivery addresses, VAT numbers, quote and order details, artwork uploads, correspondence, payment status and technical security logs. Stripe processes payment-card details on its hosted checkout; PrintingNest Studio does not store full card numbers.
Mobile app permissions and notifications
The mobile app asks for camera or photo-library access only when you choose Camera or Photos for artwork or return evidence. It processes only the images and files you capture or select; draft copies may be kept on your device for recovery and are uploaded when you attach or submit them. The app does not scan your photo library. If you enable push notifications, we register an Expo push token together with the device platform, app audience and language. Expo and the underlying Apple or Google notification service process the token and delivery data. Operational order, quote, return and production updates can be enabled separately from promotional notifications; promotional push is sent only after your opt-in. You can turn either category off in the app and can also change system permissions in device settings.
Website and app measurement
We keep short-lived, first-party operational records from the website and mobile app: aggregate page, screen and action counts, product search terms and result counts, catalogue filters, quotation actions, technical errors, performance timings, and app version, build and platform. Search text is shortened and email addresses and phone numbers are removed. This operational log does not store IP addresses, account IDs, advertising identifiers, hidden visitor IDs or individual browsing journeys and is normally deleted after 90 days. Google Analytics and any detailed cross-page website analytics remain disabled until the visitor grants Analytics consent in the cookie preferences.
Purposes and legal bases
We process data to answer quote requests, perform contracts, produce and deliver orders, issue invoices and provide account support. The legal bases are steps requested before a contract, performance of a contract, compliance with tax and accounting obligations, and legitimate interests in customer service, fraud prevention and website security. Marketing email is sent only after explicit confirmation and can be withdrawn.
Recipients and international services
Data is shared only where needed with hosting and email providers, Stripe for payment, delivery carriers, garment suppliers and production partners, professional advisers, or public authorities where legally required. We require service providers to protect personal data consistently with this policy and applicable law. Providers may process data outside the EEA under an applicable adequacy decision or approved safeguards such as standard contractual clauses.
Security and validation
Address and VAT details may be sent to official address or VAT-validation services and public registries when you ask us to verify them. Production connections use HTTPS. Passwords are salted and hashed, session and verification tokens are stored as hashes, and access is restricted by role. Limited IP-address and user-agent data may be kept for session security; pseudonymous rate-limit identifiers are deleted after 30 days.
Retention
Dutch business records, invoices and transaction data are retained for at least 7 years, and OSS-related records may require 10 years. Unconverted quote requests and artwork are reviewed for deletion when no longer needed, normally after 12 months. Account and support data is retained while the account or business relationship remains active and then only as required for legal claims or statutory duties.
Your rights and mobile account deletion
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing and direct marketing. You may withdraw consent at any time. A signed-in mobile customer can start account deletion under Account > Delete account; this removes the customer login and related app account data, while invoices, transactions and other records that must be retained by law remain subject to the retention periods above. You may also contact us, and we may request identity verification. We normally respond within one month. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
PrintingNest Studio
Ready to start your project?
Send your garment, quantity and artwork details and we will help choose the right production method.
Request a quote