Privacy policy

XL Kunst is responsible for processing personal data as described in this privacy policy.

• Name, address, email address and telephone number when you order.
• Order details: selected artworks, materials, sizes and amounts.
• Payment information, processed by Shopify and its payment provider. We do not see complete card details.
• Files you upload for your own design, together with your chosen settings.
• Information you send us by email or phone.
• Technical information such as IP address and browser type, and what you store in your browser (cart and last viewed room image).

• To produce, deliver and handle your order (performance of a contract).
• To contact you about your order or custom design.
• To comply with legal obligations, including tax record retention.
• To keep the website secure and improve it (legitimate interest).

Custom-design files are stored securely and are not public. You do not need an account; your upload is linked to an anonymous code in your browser.

Uploads that do not result in an order are automatically deleted after the configured retention period (90 days by default). We retain ordered designs for as long as necessary for production, warranty and legal record-keeping.

We do not keep data longer than necessary. We retain order and invoice records for 7 years due to tax obligations. We keep email correspondence for up to 2 years after resolution.

We never sell your data. We only share it with partners necessary to fulfil your order:

• Shopify, for the online shop, checkout and payments.
• Our production partner and carrier, to produce and deliver your order.
• Our hosting provider, to securely store the website and uploads.

We have agreements with these parties on security and confidentiality. Where data is processed outside the EU, appropriate safeguards such as standard contractual clauses apply.

The website uses only functional storage in your browser, for example for your cart, preferred language and rotating room images. Shopify may set cookies required for checkout. We do not use advertising or tracking cookies.

We take appropriate technical and organisational steps to protect your data, including encrypted connections, protected storage and restricted employee access.

You can access, correct or delete your data, restrict processing, object to processing and request data portability. Email info@xlkunst.com; we respond within one month.

If you are dissatisfied with how we handle your data, you can complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

We may update this privacy policy. The latest version is always available on this page.