Privacy policy

Last updated: 2026

Moo's Cookies, Heerenveen, KvK 42143058, respects your privacy and processes personal data in accordance with the GDPR.

Short version: this site sets no cookies, runs no analytics and loads nothing from third-party servers. The only personal data we receive is what you give us yourself: your email address when you join Moo’s Cookies Club, and whatever you email us.

1. What data we collect

When you join Moo’s Cookies Club: your email address. For an order or request by email: name, address, email address, phone number, and payment details (where applicable). Online ordering is not available yet.

Beyond that, only what you put in your email yourself, such as a preferred delivery date or an allergy or delivery note. An allergy note can count as health data under Art. 9 GDPR. It is used for one thing — making sure your box is safe to eat — and is not kept outside the order correspondence.

2. Why

To process, deliver, and communicate with you about your order.

Handling your order — performance of a contract, Art. 6(1)(b) GDPR.
The bookkeeping — legal obligation, Art. 6(1)(c) GDPR. Dutch tax law requires invoices and order records to be kept for seven years.

Your details are never used for marketing without your explicit consent.

3. Retention period

We do not keep your data longer than necessary for fulfilling the agreement and legal (tax) retention obligations.

Order correspondence that is not part of the bookkeeping: deleted within 12 months.
Anything that counts as an invoice or accounting record: kept 7 years, because the Belastingdienst requires it.
A request that never became an order: deleted within 3 months.

4. Sharing with third parties

We only share data with parties necessary for shipping (delivery service) and payment, and never for commercial purposes without consent.

The email provider that carries the order mail.
The delivery service, which needs your address to deliver the box.
The hosting provider of this website, which processes server logs including IP addresses for security and troubleshooting.
Netlify, which hosts this website. Netlify is a US company; data may be processed outside the EU.

Name your processors Replace this box with the providers you actually use (host, email, form service) and confirm each has a processing agreement (verwerkersovereenkomst). If any of them stores data outside the EU, that transfer has to be named here too.

5. Your rights

You have the right to access, correct, and delete your data. Contact us at contact@mooscookies.nl.

You can also have the processing restricted and receive your data in a portable format. You have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

6. Contact

Questions about this statement: contact@mooscookies.nl

Cookies and tracking

This site sets no cookies, uses no local storage for tracking, and contains no analytics, advertising pixels or social media trackers. Fonts, images and video are served from this site's own domain, so opening the page does not reveal your IP address to any other company.

Keep this page true Every claim above describes the site exactly as built. The moment you add analytics, a pixel, an embedded map or a newsletter tool, this page stops being accurate and must be updated — a tracking cookie would additionally require a consent banner.

Security

The site is served over HTTPS. Order data lives in the email account and, if configured, the form provider's inbox — both protected with two-factor authentication.