Privacybeleid

Love to Make It

https://lovetomakeit.com

Privacy Policy

GDPR / AVG compliant | Version 1.0

Version 1.0 — June 5, 2026

1. Introduction

Love to Make It ("we", "us", "our") is committed to protecting the privacy of its customers and website visitors. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR / AVG) and the Dutch Uitvoeringswet AVG (UAVG).

This Privacy Policy applies to all data processing activities carried out through lovetomakeit.com and in connection with our products and services.

2. Data Controller

The data controller responsible for processing your personal data is:

Love to Make It (VOF Love to make it)

Chamber of Commerce (KvK): 89275535

VAT number: NL864931694B01

Email: hello@lovetomakeit.com

Website: https://lovetomakeit.com

3. Personal Data We Collect

3.1 Purchase Data

When you place an Order on our Website, we collect:

• First and last name

• Email address

• Billing country and/or region (used for VAT/tax calculation via Shopify Markets)

• Payment method information (processed and encrypted by Shopify Payments or PayPal; we do not store your full payment card details)

• IP address (collected automatically by Shopify)

• Order history and transaction identifiers

3.2 Customer Account Data

If you choose to create an optional customer account on our Website, we additionally collect:

• Login credentials (email address; password is hashed and encrypted)

• Order history linked to your account

3.3 Newsletter and Marketing Data

If you opt in to receive our newsletter (via a separate opt-in checkbox during checkout or via a standalone signup form), we collect:

• Email address

• Timestamp and source of your consent

3.4 Technical and Analytics Data

When you visit our Website, certain technical data is collected automatically by our systems and third-party services:

• Browser type and version

• Operating system and device type

• IP address

• Referring URL

• Pages visited, time on page, and click/interaction data

This data is collected via cookies and similar technologies. Please refer to our Cookie Policy for full details.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under the GDPR:

Purpose of Processing	Legal Basis (GDPR Art. 6)
Processing and fulfilling your Order	Performance of a contract (Art. 6(1)(b))
Sending order confirmation and download access emails	Performance of a contract (Art. 6(1)(b))
Retaining accounting and financial records	Legal obligation (Art. 6(1)(c)); Dutch tax law
Sending marketing emails / newsletter	Consent (Art. 6(1)(a))
Website analytics and improvement	Legitimate interest (Art. 6(1)(f)) / Consent for cookies
Fraud prevention and security	Legitimate interest (Art. 6(1)(f))
Compliance with sanctions obligations	Legal obligation (Art. 6(1)(c))

5. How We Use Your Data

We use your personal data to:

• Process and fulfil your Order and deliver Digital Products and Course access to you

• Send order confirmation, invoice, and download link emails

• Maintain accounting records and comply with Dutch fiscal obligations

• Respond to enquiries, complaints, and support requests

• Send our newsletter and marketing communications (only with your prior consent)

• Improve our Website and products using anonymised analytics data

• Detect, investigate, and prevent fraudulent or unauthorised activity

• Comply with applicable legal obligations, including sanctions compliance

6. Data Processors and Third-Party Recipients

We share your personal data with the following third-party service providers. Each of these parties processes data on our behalf under a Data Processing Agreement (DPA) with Love to Make It, or as a separate independent data controller under their own privacy policies.

6.1 Shopify

Our Website is hosted and operated on the Shopify platform. Shopify processes Order data, payment data (via Shopify Payments), and customer account data on our behalf.

6.2 Filemonk

We use Filemonk to deliver Digital Products to customers. Filemonk receives your email address and Order details in order to send download links.

6.3 Flodesk

We use Flodesk to manage our newsletter and marketing email campaigns. If you have opted in to receive our newsletter, your email address and consent record will be processed by Flodesk.

6.4 Moneybird

We use Moneybird as our accounting and invoicing platform. Moneybird processes invoice data (including your name, email address, and purchase details) for accounting and tax compliance purposes.

6.5 Google Analytics

We use Google Analytics to analyse Website traffic and usage. Google Analytics collects anonymised data about your visit (including pages visited, session duration, browser, and device type) via cookies. We have configured IP anonymisation.

6.6 Google Ads and YouTube

We may use Google Ads and YouTube for advertising and remarketing purposes. This may involve the use of conversion tracking pixels and remarketing cookies.

6.7 Meta Pixel (Facebook / Instagram)

We use the Meta Pixel on our Website to measure the effectiveness of our advertising on Facebook and Instagram and to enable retargeting. This may involve the transfer of browsing behaviour data to Meta Platforms Inc., which may be based outside the EEA.

6.8 Pinterest Tag

We use the Pinterest Tag to measure conversions and enable advertising retargeting on Pinterest.

Privacy policy: https://policy.pinterest.com/en/privacy-policy | Opt-out: https://help.pinterest.com/en/article/opt-out-of-personalization

6.9 TikTok Pixel

We may use the TikTok Pixel to measure advertising conversions and enable retargeting on TikTok.

6.10 Payment Processors

Payments are processed by Shopify Payments (operated by Stripe) and/or PayPal. These processors handle payment card data independently under their own privacy policies and are subject to PCI-DSS requirements. Love to Make It does not store or have access to full payment card details.

• Stripe / Shopify Payments: https://stripe.com/privacy

• PayPal: https://www.paypal.com/webapps/mpp/ua/privacy-full

6.11 Disclosure to Authorities

We may disclose your personal data to competent authorities (including the Dutch Tax Authority / Belastingdienst) when required to do so by law.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable law:

Category of Data	Retention Period
Financial records (invoices, payment data)	7 years from transaction date (statutory duty under Dutch tax law)
Order and customer account data	2 years after last Order or account closure
Newsletter subscriber data	Until unsubscribed, or 2 years after last interaction, whichever is earlier
Analytics data	As configured in each platform (typically 14 months for Google Analytics)
Cookie consent records	13 months

After the applicable retention period expires, your data will be securely deleted or irreversibly anonymised.

8. International Data Transfers

Some of our data processors — including Shopify, Flodesk, Google, Meta, Pinterest, and TikTok — are based in, or transfer personal data to, countries outside the European Economic Area (EEA), including the United States.

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with GDPR Chapter V, including:

• Standard Contractual Clauses (SCCs) as adopted by the European Commission;

• Adequacy decisions issued by the European Commission; or

• Other transfer mechanisms approved by a competent supervisory authority.

9. Your Rights Under the GDPR

As a data subject, you have the following rights with respect to your personal data:

Right of access: you may request a copy of the personal data we hold about you.

Right to rectification: you may request correction of inaccurate or incomplete personal data.

Right to erasure: you may request deletion of your personal data, subject to applicable legal retention obligations.

Right to restriction of processing: you may request that we limit how we process your data in certain circumstances.

Right to data portability: you may request your personal data in a structured, commonly used, machine-readable format.

Right to object: you may object to processing based on legitimate interest or for direct marketing purposes.

Right to withdraw consent: where processing is based on your consent (e.g., newsletter subscription), you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at hello@lovetomakeit.com. We will respond within 30 days of receipt (extendable by two months for complex or multiple requests, with prior notice). We may need to verify your identity before processing a request.

9.1 Right to Lodge a Complaint

If you believe that we have not processed your personal data in accordance with the GDPR, you have the right to lodge a complaint with the Dutch supervisory authority:

Autoriteit Persoonsgegevens (AP)

Website: https://www.autoriteitpersoonsgegevens.nl

Phone: +31 88 1805 250

10. Cookies

We use cookies and similar technologies on our Website. For full details of the cookies we use, the purposes for which they are used, and how you can manage your preferences, please refer to our separate Cookie Policy available at https://lovetomakeit.com.

11. Amendments

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or changes in applicable law. We will notify you of significant changes by posting a notice on our Website. We recommend periodically reviewing this page.

This Privacy Policy was last updated on June 5, 2026.

12. Contact

For questions, requests, or concerns about this Privacy Policy or the processing of your personal data, please contact: