Privacy Policy

Last updated: 10/04/2026

At NEST Aquarel Atelier Amsterdam, we are committed to protecting your privacy and personal data. This privacy policy explains what data we collect, how we use it, and your rights in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are

Company name:

NEST Aquarel Atelier Amsterdam (VOF)

Registered address: Donaulaan 70, 1448JC Purmerend

Email: info@nestaquarel.com

Chamber of Commerce (KvK): 98113658

2. What Data We Collect

We collect the following types of data:

Contact and purchase data via Stripe Checkout:
- Name
- Email address
- Phone number (optional)
Email for communication stored in Supabase
Email for newsletters stored in Mailchimp
Usage data such as IP address, device info, and user behavior on the site via Google Analytics and Meta Pixel
Cookies for analytical and performance purposes
Marketing consent data: we record whether you have opted in to receive marketing emails, including the date and method of consent, in accordance with GDPR Article 7.

3. How We Use Your Data

We use your data for the following purposes:

To process course purchases and bookings
To send payment confirmations and reminders
To provide you with updates about our studio and courses (if subscribed)
To analyze website traffic and improve our services
To maintain internal records for legal and administrative purposes

4. Legal Basis for Data Processing

We process your personal data on the following lawful bases:

Contractual necessity: to fulfill your purchases and bookings
Consent: for marketing emails, tracking cookies, and analytics tools (Google Analytics, Meta Pixel)
Legal obligation: when required by tax or other applicable law

5. Third-Party Sharing

We do not sell your data. However, we share limited data with trusted third-party service providers:

Stripe – for secure payment processing (you provide data directly to Stripe)
Supabase – to store your email and name linked to your order
Resend – to send transactional emails (e.g., booking confirmations)
Mailchimp – to send newsletters (opt-in only; unsubscribe anytime)
Google Analytics & Meta Pixel – to analyze traffic and site performance

Stripe, Supabase, Resend, and Mailchimp act as data processors on our behalf under GDPR-compliant Data Processing Agreements (DPAs).

Google and Meta act as independent controllers for their own analytics and advertising purposes. Their processing is governed by their respective privacy policies and your consent, given via our cookie banner.

6. Cookies

We use cookies to enhance your experience and collect analytical data.

Purpose: Understanding site traffic and user behavior
Types: Analytics and performance cookies only
Cookie lifetime: up to 24 months (based on Meta & Google defaults)
Opt-out: You can opt out anytime by clicking “Decline Cookies” in the banner or disabling cookies in your browser settings.
Analytics and tracking cookies are only loaded after you have given explicit consent via our cookie banner. If you decline, no tracking cookies will be set and no data will be shared with Google or Meta.

7. Data Retention

We retain personal data as follows:

Order data (name, email): retained for 7 years in accordance with Dutch tax law (Belastingdienst requirements), after which data is deleted or anonymised.
Newsletter emails (Mailchimp): retained until you unsubscribe, after which your data is removed promptly.
Analytics data: retained for 14 months (Google Analytics default, configured accordingly) and up to 90 days for Meta Pixel aggregated data.

8. Your Rights

You have the right to:

Access your personal data
Correct or update your data
Withdraw consent at any time
Request deletion of your data (subject to legal exceptions)
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these rights, contact us at info@nestaquarel.com.

9. Data Security

We use industry-standard measures to protect your data, including HTTPS, secure authentication, and limited access to sensitive systems.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with the updated date.

11. Email Newsletter & Marketing Communications

If you have opted in to receive marketing emails, we will send you updates about new classes, workshops, early bird offers, and studio news.
Your consent:
Your subscription is based on your explicit consent, given at the time of purchase or sign-up. We will never add you to our mailing list without your agreement.
Unsubscribe anytime:
You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link included in every email we send. Your email will be removed from our mailing list promptly, and you will receive no further marketing communications.
Unsubscribing from marketing emails does not affect the delivery of transactional emails related to your bookings or purchases (e.g., payment confirmations, course reminders).
Data storage:
Your email address is stored in Mailchimp for the purpose of sending newsletters. Upon unsubscribing, your data will be removed from our active mailing list in accordance with Mailchimp's data retention practices.

Withdraw Consent