Privacy policy Doll.shop

Last updated: January 17, 2026

Your privacy matters to us. In this privacy policy, we explain what data we collect, why we collect it and how we protect it. We process personal data in accordance with the General Data Protection Regulation (GDPR).

1. Who are we?

The controller responsible for processing personal data is:

Trade name Doll.shop (part of DVWZ B.V.)
Address Celsius 8, 7942 DB Meppel, The Netherlands
Registration number 82678057

2. What data do we collect?

We process personal data because you use our services and/or because you provide this data to us yourself:

  • Personal details: first and last name, address and city (for delivery).
  • Contact details: email address and phone number (order updates).
  • Payment data: IBAN or credit card details (processed via our payment provider).
  • Technical data: IP address and information about your browser/device.

3. Why do we need this data?

We use your data only for the following purposes:

  • Order processing: to process payments and deliver your package.
  • Customer service: to contact you when necessary.
  • Legal obligations: to store certain data (such as invoices) for tax purposes.

4. How long do we keep your data?

We do not keep your personal data longer than strictly necessary.

  • Tax retention: invoices and order data are kept for 7 years.
  • Other data: kept for a maximum of 2 years after the last contact, unless legally required otherwise.

5. Sharing with others

We never sell your data to third parties. We only share your data with parties that are necessary to fulfill the agreement:

  • Logistics: courier services (such as UPS, PostNL).
  • Payments: our payment provider (Mollie).
  • IT & administration: hosting provider and accountant, strictly for technical and administrative support.

6. Cookies

Doll.shop uses only technical and functional cookies, and analytical cookies that do not infringe on your privacy.

7. Your rights

You have the right to access, correct or delete your personal data. You may also withdraw your consent or object to the processing of your personal data at any time.

Send your request to [email protected]. To verify your identity, we may ask for additional information.

8. Security

We take the protection of your data seriously and apply appropriate measures (such as SSL encryption) to prevent misuse, loss or unauthorized access.