Privacy policy

Last updated: February 12, 2026

Grandmaster's Atelier operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services").

Grandmaster's Atelier is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

We are based in the Netherlands and process personal data in compliance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information:

• Contact details: Name, billing address, shipping address, phone number, and email address.

• Financial information: Payment card details (processed securely by our payment providers such as Shopify Payments, iDEAL, or PayPal), transaction details, and payment confirmation.

• Account information: Username, password, preferences, and order history.

• Customization data: Text, names, dates, or images you provide to us specifically for the purpose of personalizing products (e.g., for engravings or custom chess sets).

• Transaction information: Items you view, purchase, return, or exchange.

• Device & Usage information: IP address, browser type, device info, and how you navigate the Services (collected via cookies).

Legal Basis for Processing (GDPR)

Under European law, we must have a valid legal basis to process your data. We rely on the following:

1. Performance of Contract: We process your contact, financial, and customization data to fulfill your order, arrange shipping, and provide customer support.

2. Legal Obligation: We are required by Dutch law to retain certain financial data for tax purposes (e.g., invoices).

3. Consent: We rely on your consent for optional activities, such as sending marketing emails (newsletters) or placing non-essential cookies. You may withdraw this consent at any time.

4. Legitimate Interest: We use data to detect fraud, improve our website security, and analyze general store performance to improve our Services.

How We Use Your Personal Information

We use your personal information to:

• Provide the Services: Process payments, fulfill orders, and arrange shipping (including custom orders).

• Personalization: If you order a personalized item, we use the specific text or data you provide solely to manufacture that specific product.

• Communication: Send you order confirmations, shipping updates, and respond to support inquiries.

• Marketing: If you have opted in, we may send you emails about new collections or offers.

• Security & Fiscal Compliance: Prevent fraud and maintain financial records for the Dutch Tax Authority (Belastingdienst).

How We Disclose Personal Information

We do not sell your personal information. We disclose data only to third parties strictly necessary to operate our business:

• Service Providers: Shopify (our hosting platform), payment processors (e.g., Mollie, iDEAL, PayPal), and logistics carriers (e.g., PostNL, DHL, UPS) to deliver your products.

• Legal Compliance: If required by law, subpoena, or to protect our rights.

• Business Transfers: In the event of a merger or acquisition.

Relationship with Shopify

The Services are hosted by Shopify. Your data is transmitted to and stored by Shopify to enable the functionality of our store. Shopify processes this data in compliance with GDPR. For more details, please review the Shopify Privacy Policy.

Security and Retention of Your Information

We take reasonable steps to protect your data. However, no transmission over the internet is 100% secure.

• General Retention: We retain your personal information only as long as necessary to fulfill the purposes for which it was collected (e.g., maintaining your account).

• Fiscal Retention: In accordance with Dutch tax laws, we retain invoices, transaction records, and related fiscal data for 7 years. After this period, such data is deleted or anonymized.

Your Rights (GDPR)

If you reside in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request correction of inaccurate data.

• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to our legal tax retention obligations).

• Right to Restriction: Ask us to limit how we use your data.

• Right to Object: Object to processing based on legitimate interests or direct marketing.

• Right to Portability: Receive your data in a structured, commonly used format.

To exercise these rights, please contact us at the email below.

Cookies

We use cookies to make our website work (functional cookies) and to analyze traffic (analytical cookies). When you first visit our store, you will be presented with a cookie banner allowing you to accept or decline non-essential cookies.

International Transfers

Your personal information may be transferred outside of the EEA (for example, to Shopify's servers in Canada or the US). When we do so, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or adequacy decisions (e.g., the EU-U.S. Data Privacy Framework) to ensure your data is protected.

Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will post the revised date at the top of this policy.

Contact

If you have questions, complaints, or wish to exercise your rights, please contact us:

Grandmaster's Atelier Email: info@grandmasters-atelier.com Address: Meindert Hobbemastraat 19, Bergen, 5854 EN, The Netherlands

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).