Privacy Policy

​1. WHO WE ARE
Gray Steel
Johannes Verhulststraat 63-2, 1071MT, Amsterdam
Chamber of Commerce: 66361311
VAT: 856512916B01
Email: info@graysteel.nl
Website: www.graysteel.nl
Gray Steel is responsible for the processing of personal data as described in this privacy policy.

2. PERSONAL DATA WE COLLECT
We may collect and process the following types of personal data:
- Full name
- Company name (if applicable)
- Billing and shipping address
- Email address
- Phone number
- Payment and transaction details (via payment provider)
- Order history
- IP address and browser/device information (for analytics and security)

3. WHY WE COLLECT YOUR DATA
We use your data to:
- Process and ship your order
- Handle payments and refunds
- Communicate with you about your order or questions
- Improve our webshop and user experience
- Comply with legal and tax obligations
- Send service-related or promotional emails (only with consent)

4. LEGAL BASIS FOR PROCESSING
We process personal data on the basis of:
- Performance of a contract (e.g., processing your order)
- Legal obligations (e.g., tax administration)
- Consent (e.g., for newsletters)
- Legitimate interest (e.g., website security and analytics)

5. DATA SHARING
We only share data when necessary, and only with:
- Our logistics and fulfilment partners
- Payment service providers (e.g., Mollie, PayPal)
- Our hosting provider and technical partners
- Tax authorities or other legal entities, if required by law
All partners operate under strict data protection agreements.

6. DATA RETENTION
We retain personal data for as long as necessary for the purposes stated above, and in accordance
with legal obligations. This typically means:
- Order-related data: 7 years (tax law)
- Account data: as long as the account is active
- Email communications: up to 2 years
- Newsletter consent: until withdrawn

7. YOUR RIGHTS (UNDER GDPR)
You have the right to:
- Access your data
- Correct or update your data
- Request deletion of your data
- Withdraw consent (e.g., for emails)
- Object to or limit processing
- Data portability (in some cases)
You can contact us at info@graysteel.nl for any privacy-related request. We will respond within 30
days.

8. COOKIES & ANALYTICS
We use functional, analytical, and possibly tracking cookies to improve your experience. For more
information, please refer to our Cookie Policy.

9. SECURITY
We take appropriate technical and organizational measures to protect your data from unauthorized
access, loss, or misuse. This includes secure SSL connections, firewalls, and access restrictions.

10. CHANGES TO THIS POLICY
We may update this privacy policy from time to time. The latest version will always be published on
our website with the date of last revision.

11. QUESTIONS OR COMPLAINTS
If you have concerns about how we handle your data, please contact us directly. You also have the
right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Last updated: March 25, 2025