Your data, safe with us.

At Cannoli Box B.V. we handle your data with care. On this page we explain what data we collect, why, and how long we keep it.

1. What data do we collect?

When you place an order, we need the following:

• Name, email address, phone number — for order confirmation and delivery
• Delivery address and billing address — to deliver your box
• Payment details — handled via our payment processor; we do not store any card details
• Order history — to be able to provide customer service

2. What do we use it for?

• Fulfilling your order (required)
• Communication about your order (shipping, delays, questions)
• Legal obligations (mandatory retention of invoices)
• Optional: newsletter, product improvements — only with explicit opt-in

3. How long do we keep it?

Order data is kept for 7 years due to legal retention requirements (VAT administration). You can request access to or deletion of your data at any time by emailing klantenservice@cannolibox.nl.

4. Who do we share it with?

Only with parties we need for your order:

• Shipping partners — Dragonfly (NL), BPost (BE), DHL (DE), PostAT (AT)
• Payment processor — to handle your payment
• Email provider — to send confirmations and (after opt-in) newsletters

We never sell your data to third parties.

5. Cookies

Our website uses cookies for:

• Functional — to keep the shopping cart working (no consent needed)
• Analytical — to see which pages are popular (anonymous)
• Marketing — only after explicit opt-in via the cookie banner

6. Your rights

Under the GDPR you have the right to:

• See what data we hold about you
• Have your data corrected or deleted
• Object to processing
• File a complaint with the Dutch Data Protection Authority

Email your request to klantenservice@cannolibox.nl — we respond within 14 days.

7. Contact

Cannoli Box B.V.
Lübeck 5
2993 LK Barendrecht
The Netherlands

KvK: 78300339
BTW: NL861337530B01