Privacy Policy

FilRight Privacy Policy

Version 3.1

This privacy policy was last updated on 2 November 2026.

We understand that you place your trust in us. We therefore consider it our responsibility to protect your privacy. We only process the data we need to provide and improve our services, and we handle information collected about you and your use of our services with care. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services provided through it by FilRight B.V. The effective date of this policy is 5 October 2026. Publication of a new version supersedes all previous versions. This policy describes what data we collect about you, how we use it, and with whom and under what conditions we may share it. It also explains how we store your data, protect it against misuse, and what rights you have regarding the personal data you provide to us. If you have questions about this policy, please contact our privacy contact using the details at the end of this document.

About data processing

Below we explain how we process your data, where we store it or have it stored, what security measures we use, and who can access it.

Purpose of data processing

General purpose of processing

We use your data solely to provide our services. This means that the purpose of processing is always directly related to the services you request from us. We do not use your data for targeted or other marketing. If you share data with us and we wish to use it to contact you at a later date other than at your request, we will ask for your explicit consent. We share your data with service providers insofar as necessary to provide our services, such as processing orders and payments, shipping products, collecting reviews, and maintaining our administration and accounts. We may also share data where required by law. Below we describe the parties with whom we share data and for what purposes.

Automatically collected data

Data automatically collected by our website is processed to improve our services. This data, such as your IP address, web browser and operating system, is not personal data.

Cooperation with tax and criminal investigations

In certain circumstances, FilRight B.V. may be legally required to share your data in connection with government tax or criminal investigations. In such cases we are obliged to share your data, but we will oppose this within the limits permitted by law.

Retention periods

We retain your data for as long as you are our customer. This means we retain your customer profile until you indicate that you no longer wish to use our services. We will also treat such notification as a request for erasure. Applicable administrative obligations require us to retain invoices containing your personal data for the relevant retention period. However, employees will no longer have access to your customer profile or documents we have prepared in connection with your order.

Third parties

We share personal data with the service providers listed below for the purposes described for each provider. We only provide the data necessary for those purposes. Within our organisation, personal data is accessible only to employees who need it to carry out their work. Our employees are required to treat your data confidentially.

Lightspeed eCommerce

Lightspeed's eCommerce software forms the basis of FilRight's online store operations. Lightspeed hosts the website, processes our data and passes it to other parties needed to provide our services. We have entered into a data processing agreement with Lightspeed requiring it to safeguard your privacy, handle your data with care and protect it through appropriate security measures. These include regular backups and encrypted data storage.

Brincr

In addition to Lightspeed, we use Brincr for business administration and to manage and process customer data, orders and stock. This involves processing your name, address, town or city of residence, contact details and order information. We use this data to fulfil orders and support our services. Access is restricted to employees and service providers who need this data to carry out their work.

Shipping

Courier services

We use courier services for some of our pallet shipments. We share the recipient's name and delivery address and, where necessary to coordinate delivery, their telephone number and email address. This data is provided to deliver the order and enable communication about the delivery.

Sendcloud

We use Sendcloud to arrange shipping for almost all orders. These orders are then shipped with DHL, DPD or PostNL. We share the recipient's name and delivery address with Sendcloud and the relevant carrier and, where necessary for shipping and delivery, their email address and telephone number. This data is used to create shipping labels, deliver the order and provide delivery information, such as a tracking link.

Payment processors

Mollie

We use Mollie's platform to process some or all payments in our online store. Mollie processes your name, address, town or city of residence and payment details, such as your bank account or credit card number. Mollie has implemented appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to improve its services and, in that context, to share anonymised data with third parties. The safeguards described above also apply to those parts of Mollie's services for which it engages third parties. Mollie retains your data no longer than permitted under statutory retention periods.

Email and mailing lists

MailChimp

We use MailChimp to send our email newsletters. MailChimp will never use your name and email address for its own purposes. An unsubscribe link appears at the bottom of every email sent automatically through our website. Using it means you will no longer receive our newsletter. MailChimp stores your personal data securely. MailChimp uses cookies and other internet technologies to determine whether emails are opened and read. MailChimp reserves the right to use your data to improve its services and, in that context, to share information with third parties.

Microsoft 365

We use Microsoft 365 for our regular business email. Email addresses, the content of our correspondence and any attachments are processed through Microsoft's services. We use this data to answer enquiries and communicate about orders and our services. We treat our email correspondence confidentially and restrict access to employees who need this data to carry out their work.

Reviews

Kiyoh

We collect reviews through Kiyoh's platform. If you leave a review through Kiyoh, you must provide your name, town or city of residence and email address. Kiyoh shares this data with us so we can link the review to your order. Kiyoh also publishes your name and town or city of residence on its own website. In some cases, Kiyoh may contact you to ask you to explain your review. If we invite you to leave a review, we share your name and email address with Kiyoh. It uses this data solely to invite you to leave a review. Kiyoh has implemented appropriate technical and organisational measures to protect your personal data. Kiyoh reserves the right to engage third parties to provide its services, for which we have given permission. The safeguards described above also apply to the parts of Kiyoh's services for which it engages third parties. Kiyoh retains your personal data for as long as you keep the review published on its platform. Kiyoh has appointed a Data Protection Officer whose contact details are available on Kiyoh's website.

Yotpo

We collect product reviews through Yotpo's platform. If you leave a review through Yotpo, you must provide your name, town or city of residence and email address. Yotpo shares this data with us so we can link the review to your order. Yotpo also publishes your name and town or city of residence on its own website. In some cases, Yotpo may contact you to ask you to explain your review. If we invite you to leave a review, we share your name and email address with Yotpo. It uses this data solely to invite you to leave a review. Yotpo has implemented appropriate technical and organisational measures to protect your personal data. Yotpo reserves the right to engage third parties to provide its services, for which we have given permission. The safeguards described above also apply to the parts of its services for which Yotpo engages third parties.

Invoicing and accounting

Accounting software

We use accounting software to maintain our administration and accounts. We process your name, address, town or city of residence and information about your orders, invoices and payments in this software. This data is used for our financial administration and to meet administrative and tax obligations. We restrict access to employees and service providers who need this data to carry out their work.

Cookies

Google Analytics

Our website places cookies from the US company Google as part of its Analytics service. We use this service to monitor and obtain reports on how visitors use our website. This processor may be required to disclose this data under applicable laws and regulations. We have not authorised Google to use the analytics information obtained for other Google services.

Tawk.to live chat software

Our website places cookies from the US company tawk.to as part of our live chat service. This service allows you to contact us directly through the website's chat function. To enable this software to function, it records how users use our website. This processor may be required to disclose this data under applicable laws and regulations. We have not authorised Tawk.to to use the information obtained for other services.

Third party cookies

Where third party software solutions use cookies, this is stated in this privacy policy.

Disabling cookies

Most browsers accept cookies by default, but you can change your browser settings to refuse all cookies or notify you when a cookie is sent. However, some features and services on our and other websites may not function correctly if cookies are disabled in your browser.

Your rights

Under applicable Dutch and European legislation, you have certain rights as a data subject regarding personal data processed by us or on our behalf. Below we explain these rights and how you can exercise them.

To prevent misuse, we generally send copies of your data only to the email address we already hold for you. If you wish to receive the data at another email address or, for example, by post, we will ask you to verify your identity. We keep records of completed requests. For erasure requests, we record anonymised information. All copies of data are provided in the machine-readable format used within our systems.

You always have the right to lodge a complaint with the Dutch Data Protection Authority if you believe that we are using your personal data improperly.

Right of access

You always have the right to access data we process, or have processed, that relates to you or can be traced back to you. You may submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send a copy of all the data to the email address we hold for you, together with an overview of the processors holding this data and the categories under which we have stored it.

Right to rectification

You always have the right to have data we process, or have processed, that relates to you or can be traced back to you corrected. You may submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send confirmation to the email address we hold for you that the data has been corrected.

Right to restriction of processing

You always have the right to restrict the processing of data we process, or have processed, that relates to you or can be traced back to you. You may submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send confirmation to the email address we hold for you that the data will no longer be processed until you lift the restriction.

Right to data portability

You always have the right to have data we process, or have processed, that relates to you or can be traced back to you processed by another party. You may submit a request to our privacy contact. You will receive a response within 30 days. If your request is granted, we will send copies of all data about you processed by us, or by other processors or third parties on our behalf, to the email address we hold for you. In such a case, we will most likely be unable to continue providing our services, because secure links between data files can no longer be guaranteed.

Right to object and other rights

In certain circumstances, you have the right to object to the processing of your personal data by or on behalf of FilRight B.V. If you object, we will immediately suspend processing pending the handling of your objection. If your objection is justified, we will make copies of the data we process, or have processed, available to you and then permanently cease processing.

You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way that makes this right applicable. If you believe otherwise, please contact our privacy contact.

Changes to this privacy policy

We reserve the right to amend our privacy policy at any time. The most recent version is always available on this page. If a new policy affects how we process data already collected about you, we will notify you by email.

Questions and feedback

We regularly check whether we comply with this privacy policy. If you have questions about it, please contact us:

FilRight B.V.
Nijverheidsweg 3
3401 MC IJsselstein
The Netherlands
Telephone: +31 30 207 2172
Email: [email protected]