Privacy Policy

Last updated: 27 August 2026

1. Who we are

This website (paperchipcones.co.uk) is operated by:

• Company: Cocobe B.V.
• Registered address: Dr. Schaepmanlaan 27, 4836 AR Breda, the Netherlands
• Company registration number: 50330543 (Netherlands Chamber of Commerce, Kamer van Koophandel)
• VAT number: NL822680270B01
• Email: [email protected]
• Phone: +31 76 889 3761

In this Privacy Policy, “we”, “us” and “our” refer to the company named above. We are the data controller responsible for your personal data.

Because our company is established in the Netherlands, part of the European Union, and we sell to customers in the United Kingdom, your data may be processed in the EU. For UK customers, our processing of your personal data is covered by the UK GDPR and the Data Protection Act 2018. Your rights as a UK data subject are described in section 9.

Given the occasional nature and small scale of our processing of UK customer data, we do not currently appoint a UK representative under Article 27 UK GDPR.

2. What personal data we collect

Depending on how you use our shop, we may collect:

• Identity and contact data: name, company name, billing and shipping address, email address, phone number.
• Order and transaction data: products ordered, order history, custom print artwork and specifications you supply, invoices.
• Payment data: payment method and confirmation of payment. Full card details are handled by our payment provider, not stored by us. See section 5.
• Account data: username and password if you create an account.
• Communication data: messages you send us by email, contact form, WhatsApp or phone.
• Technical and usage data: IP address, browser type, device information, and website usage collected through cookies and similar technologies. See our separate Cookie Policy.

3. How we use your data and our legal basis

Purpose	Legal basis
Processing and delivering your order, including custom print jobs	Performance of a contract
Customer service and answering your questions	Performance of a contract / legitimate interest
Sending order and shipping confirmations	Performance of a contract
Invoicing and bookkeeping	Legal obligation
Fraud prevention and website security	Legitimate interest
Marketing emails / newsletter, where applicable	Consent (you can withdraw at any time)
Analytics and website improvement	Consent (via cookie banner)

We do not sell your personal data. We do not use your data for automated decision making that produces legal or similarly significant effects.

4. Marketing communications

If you have consented, or where permitted for existing customers under applicable law, we may send you emails about similar products. You can opt out at any time via the unsubscribe link in each email or by contacting [email protected].

Marketing emails follow the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

5. Sharing your data with third parties (processors)

We share personal data only with parties that help us run the shop, under a data processing agreement, and only for the purposes described here. These currently include:

• Website hosting: Construkt (managed by Katama)
• E-commerce platform: WordPress / WooCommerce
• Payment processing: Buckaroo
• Shipping and fulfilment: national and international parcel carriers selected at checkout (e.g. PostNL, DHL, or the courier shown at checkout)
• Accounting: e-Boekhouden.nl
• Analytics: Google Analytics (via Google Tag Manager)

We may also disclose data where required by law, or to protect our rights.

6. International data transfers

Your data is processed primarily in the Netherlands and the European Union. Where our processors (such as Google, for Google Analytics) are located outside the EU/UK, transfers take place only on the basis of an applicable adequacy decision — including the EU-U.S. Data Privacy Framework and its UK Extension where applicable — or appropriate contractual safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum.

7. How long we keep your data

We keep your data only as long as necessary:

• Order and account data: for the duration of the customer relationship.
• Invoices and financial records: 7 years, in line with Dutch tax record-keeping requirements.
• Marketing data: until you withdraw consent.

After these periods we delete or anonymise your data.

8. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted connections (SSL/TLS) and access controls. No online transmission is fully secure, so we cannot guarantee absolute security.

9. Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted (“right to be forgotten”), subject to legal retention obligations;
• restrict or object to processing;
• data portability (receive your data in a machine readable format);
• withdraw consent at any time.

To exercise these rights, contact [email protected], for the attention of Willem Leeuwenburgh. We respond within one month.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), ico.org.uk.

10. Cookies

We use cookies and similar technologies. See our separate Cookie Policy for details and how to manage your preferences.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on our website with the “last updated” date.

12. Contact

Questions about this Privacy Policy or your data:

• Willem Leeuwenburgh
• [email protected]
• +31 76 889 3761
• Dr. Schaepmanlaan 27, 4836 AR Breda, the Netherlands