Privacy Policy
How we handle your data
Kwekerij Sela attaches great importance to the protection of your personal data. In this privacy policy, we explain what data we collect and why.
Cookies on our website
Who is responsible for your data?
The data controller for the processing described in this policy is Kwekerij Sela, located at West Breukelderweg 13A, 6721 MP Bennekom, the Netherlands. For any questions about your privacy or your data you can reach us at rosalie@kwekerijsela.nl or by phone on +31 6 48 68 71 41.
What data do we collect?
We collect data you provide when placing an order: name, email address, delivery address, and optionally a phone number. In addition, but only after consent for analytical cookies, we process technical data such as city-level IP-based location, browser type, device type, page views and interaction events to understand how the website is used.
Purposes and legal bases
We only process your data for clearly defined purposes, each based on a legal ground under the GDPR. For processing and delivering your order and the related communication, we rely on the performance of the contract. For sending our newsletter and placing analytical cookies, we ask for your prior consent, which you can withdraw at any time. We retain order and invoice data on the basis of a legal (tax) obligation. For handling questions via the contact form, displaying reviews and securing our website and images, we rely on our legitimate interest in protecting our services and property.
Newsletter
If you subscribe to our newsletter, we store your email address and language preference so we can send you our newsletter. We do this solely on the basis of your consent. We use Resend to manage and send the newsletter. You can unsubscribe at any time via the link at the bottom of every newsletter or by sending an email to rosalie@kwekerijsela.nl; you can therefore always withdraw your consent. After unsubscribing, we only keep the data needed to honour your unsubscription.
Reviews
If you have purchased a product from us, we may invite you by email to leave a review. For such an invitation we use your email address and, if known, your name and order number. If you post a review, we store the name you provide, your rating (stars) and any text. Approved reviews are shown publicly on the relevant product page, with the name you provided — we never make your email address public. You can always ask us to amend or delete your review.
Contact form
If you send a message through our contact form, we process your name, email address and the content of your message in order to answer your question. This data is delivered to us by email via Resend and is not used for any other purpose. We do not keep contact messages longer than necessary to fully handle your question.
Image Protection
Our website uses technical measures to prevent unauthorized use of our product images. This includes blocking the context menu (right-click) on images and using digital watermarks.
Analytical session logs and real-time insight
After your consent for analytical cookies, we record session-based events such as page views, searches, product views, cart actions, checkout steps, purchases, newsletter sign-ups and contact clicks. We use this data in Google Analytics and in an internal admin overview to see which events were sent within a session. At session start, an internal push notification may be sent to the Kwekerij Sela admin PWA. Until you grant analytical consent, or if you reject it, we do not store these analytical session data. In addition, we use Vercel Analytics and Speed Insights to measure the performance and general use of the website in an aggregated, cookieless way; no personally identifiable data is recorded in the process.
Sharing with Third Parties
We only share your data with parties needed to fulfil your order or operate our website, and only to the extent necessary. Specifically, we use the following processors: Supabase (the database in which orders, reviews and newsletter subscriptions, among others, are stored), Vercel (website hosting), Resend (sending emails) and Google Analytics (website statistics). For delivering orders, we also engage a delivery service. Payments are not handled by an online payment service: you pay by invoice or, when collecting in person, on the spot. We never sell your data to third parties, and all our processors are contractually obliged to treat your data confidentially and securely.
Transfers outside the EEA
Some of our processors (such as Google, Resend and Vercel) are located in, or process data in, the United States. Where personal data is processed outside the European Economic Area (EEA), we ensure this is done with appropriate safeguards, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses adopted by the European Commission. This keeps your data protection at an equivalent level even outside the EEA.
Retention Periods
Order data is retained for 7 years in accordance with Dutch tax regulations. Analytical data in Google Analytics is retained for a maximum of 26 months. Internal session logs for operational website insights are retained for a maximum of 30 days by default and are deleted periodically. Newsletter data is kept until you unsubscribe, after which we only keep what is needed to honour your unsubscription. Reviews are kept for as long as the relevant product is offered, unless you request deletion. After the retention period, data is securely deleted.
Security of your data
We take appropriate technical and organisational measures to protect your personal data against loss and unauthorised access. For example, all traffic with our website runs over a secure connection (HTTPS), access to personal data is limited to authorised persons, and the admin area is secured with login credentials and two-factor authentication (MFA).
Automated decision-making
We do not make decisions based solely on automated processing (such as profiling) that produce legal effects concerning you or similarly significantly affect you.
Your Rights
Under the GDPR, you have the right to access, correct, and delete your personal data. You also have the right to have processing restricted, to object to processing and to request data portability. If you have given us consent, for example for the newsletter or analytical cookies, you can withdraw that consent at any time; this does not affect processing that took place beforehand. Requests can be sent to rosalie@kwekerijsela.nl. We will respond within 4 weeks.
Complaints
Do you have a complaint about the processing of your personal data? Please contact us first at rosalie@kwekerijsela.nl. If we cannot resolve it, you can file a complaint with the Dutch Data Protection Authority at www.autoriteitpersoonsgegevens.nl.
Last updated: June 2026.