Privacy Policy

Who we are

You will see the word ‘we’ everywhere on this site, but actually Arc.fish is run by just one person, Étienne van Buuren. Please see the About Us & Contact page for all company information pertaining to Arc.fish.

What personal data we collect and why we collect it

Cookies

We use temporary cookies to allow the webshop to function, such as remembering what you have in your cart. These cookies contain no personal data and are deleted after two days of not using the webshop.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information. Login cookies last for two days. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Order DATA

When you make a purchase, we require personal data to process and fulfill your order. In addition, we must retain order information for seven years to comply with statutory duties. This includes the following data:

-Customer name, billing address, shipping address, email address, phone number, and payment details.

Account data

Creating an account is optional, you can use all functionalities of the Arc.fish website without one. If you do sign up for an account, the information you provide will be stored for as long as you retain the account and deleted upon deletion of the account. For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Newsletter DATA

Even without an account you can sign up for our newsletter. We will retain your e-mail address for as long as your continue to be enrolled in the newsletter. If you cancel your subscription, your personal data will be deleted. 

Data sharing with third parties

We only share your data with Printful, our order and fulfillment platform. The data shared is the same as the data needed to fulfill your order:


-Customer name, billing address, shipping address, email address, phone number, and payment details.

How long we retain your data

Cookies: Up to 2 days, up to 14 days if the user uses the ‘remember me’ function

Account data/newsletter subscription data: For as long as the user continues to keep their account/subscription active.

Order data: Seven years, as required by law.

What rights you have over your data

You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes, specifically data related to product orders.

How we protect your data

Within Arc.fish, we take the following steps to protect your data:
  • Need-to-know: Within Arc.fish, your data is only accessible by one person.
  • Purpose limitation: Your personal data is not used for any other purpose than to fulfill the customer-facing functions of the website.
  • Data minimization: We only ask for the minimum data required to allow our website to function.
  • Storage limitation: We only store your data for as long as is needed to allow the functions of the website, unless otherwise required by law.
  • Minimum data sharing: We only share your data with Printful, and only the minimum a mount of data needed to fulfill orders placed in our webshop

What data breach procedures we have in place

At Arc.fish, we value the trust you place in us by sharing your data with us, and we take data breaches extremely seriously. 

  1. Any identified data breaches will be stopped immediately
  2. The relevant authorities will be informed
  3. Customers will be informed of what data was involved and when in how the breach happened
  4. We document and review how the breach could have happened and take steps to prevent something like this from happening again.