our privacy policy

Munay-Ki cares deeply about your privacy. We therefore process only the data necessary for (improving) our services and handle with care the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the services provided through it by Munay-Ki. The effective date of these terms is 11/06/2025; upon publication of a new version, all previous versions become invalid. This privacy policy describes which data about you is collected by us, for what purposes this data is used, and with whom and under which conditions this data may be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and which rights you have with regard to the personal data you have provided to us.

If you have any questions about our privacy policy, you can contact our privacy contact person; you will find the contact details at the end of our privacy policy.

About data processing
Below you can read how we process your data, where we store (or have stored) this data, which security techniques we use, and who has access to the data.

Webshop software

ECWID
Our webshop is developed using software provided by ECWID. Personal data that you provide to us for the purpose of our services is shared with this party. ECWID has access to your data in order to provide us with (technical) support and will never use your data for any other purpose. Based on the agreement we have entered into with them, ECWID is obliged to take appropriate security measures. These security measures include the use of SSL encryption and a strong password policy. ECWID uses cookies to collect technical information related to your use of the software; no personal data is collected and/or stored. ECWID reserves the right to share collected data within its own group in order to further improve its services.

Hosting
Our webshop is developed using software from ECWID, and we have chosen Peaches.io for our web hosting. Personal data that you provide to us for the purpose of our services is shared with this party. Peaches.io has access to your data in order to provide us with (technical) support and will never use your data for any other purpose. Based on the agreement we have entered into with them, Peaches.io is obliged to take appropriate security measures. These security measures include the use of SSL encryption and a strong password policy. Regular backups are made to prevent data loss.

Email and mailing lists

MailerLite
We send our email newsletters using MailerLite. MailerLite will never use your name and email address for its own purposes. At the bottom of every email that is automatically sent via our website, you will find an “unsubscribe” link. If you use this link, you will no longer receive our newsletter. Your personal data is securely stored by MailerLite. MailerLite uses cookies and other internet technologies that provide insight into whether emails are opened and read. MailerLite reserves the right to use your data to further improve its services and, in that context, to share information with third parties.

Google Mail
We use the services of Google Mail for our regular business email communications. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your data and our data as much as possible. Google Mail has no access to our mailbox, and we treat all email correspondence confidentially.

Payment processors

Mollie & Stripe
For processing (part of) the payments in our webshop, we use the platforms of Mollie and Stripe. Mollie and Stripe process your name, address and place of residence details, as well as your payment information such as your bank account or credit card number. Mollie and Stripe have taken appropriate technical and organizational measures to protect your personal data. Mollie and Stripe reserve the right to use your data to further improve their services and, in that context, to share (anonymized) data with third parties. All the above-mentioned safeguards regarding the protection of your personal data also apply to the parts of their services for which they engage third parties. Mollie and Stripe do not retain your data for longer than is permitted under statutory retention periods.

REviews

WebwinkelKeur

We collect reviews through the platform of WebwinkelKeur. If you leave a review via WebwinkelKeur, you are required to provide your name and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to request clarification of your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the provision of its services; we have given WebwinkelKeur permission to do so. All the above-mentioned safeguards regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.

Shipping and logistics

DHL
If you place an order with us, it is our responsibility to have your package delivered to you. We use the services of DHLto carry out deliveries. For this purpose, it is necessary for us to share your name, address, and place of residence details with DHL. DHL uses this data solely for the purpose of performing the agreement. In the event that DHL engages subcontractors, DHL will also make your data available to these parties.

Invoicing and accounting

Exact
For maintaining our administration and accounting, we use the services of Exact. We share your name, address and place of residence details, as well as details relating to your order. This data is used for administering sales invoices. Your personal data is transmitted and stored securely. Exact is bound by confidentiality and will treat your data confidentially. Exact does not use your personal data for any purposes other than those described above.

Purpose of data processing

General purpose of processing
We use your data exclusively for the purpose of providing our services. This means that the purpose of the processing is always directly related to the assignment you give us. We do not use your data for (targeted) marketing. If you share data with us and we use this data—other than at your request—to contact you at a later time, we will explicitly ask for your consent. Your data is not shared with third parties, except where necessary to comply with accounting and other administrative obligations. All such third parties are bound by confidentiality based on the agreement between them and us, or by an oath or statutory obligation.

Automatically collected data
Data that is automatically collected by our website is processed for the purpose of further improving our services. This data (for example, your IP address, web browser, and operating system) does not constitute personal data.

Cooperation with fiscal and criminal investigations
In certain cases, Munay-Ki may be legally required to share your data in connection with fiscal or criminal investigations by government authorities. In such cases, we are compelled to share your data, but we will oppose this to the extent permitted by law.

Retention periods
We retain your data for as long as you are a customer of ours. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also interpret this as a request for erasure. This also means that we do not retain your data for longer than two years from the last contact moment or transaction, unless there is a legal basis for doing so. Based on applicable administrative obligations, we are required to retain invoices containing your (personal) data; these data will therefore be stored for as long as the applicable statutory retention period applies. However, employees will no longer have access to your client profile or to documents we have created in connection with your assignment.

Your rights

Under applicable Dutch and European legislation, you as a data subject have certain rights with regard to the personal data that is processed by or on our behalf. Below, we explain what these rights are and how you can exercise them. In principle, to prevent misuse, we send copies and extracts of your data only to the email address already known to us. If you wish to receive the data at a different email address or, for example, by post, we will ask you to verify your identity. We keep records of processed requests; in the case of a request for erasure, we record anonymized data. All copies and extracts of data will be provided in the machine-readable format that we use within our systems. You have the right at all times to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you suspect that we are using your personal data incorrectly.

Right of access
You always have the right to access the data that we process (or have processed) and that relates to you or can be traced back to you. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send a copy of all data to the email address known to us, along with an overview of the processors who have access to this data, indicating the category under which we have stored the data.

Right to rectification
You always have the right to have the data that we process (or have processed) and that relates to you or can be traced back to you corrected. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address known to us stating that the data has been amended.

Right to restriction of processing
You always have the right to restrict the processing of the data that we process (or have processed) and that relates to you or can be traced back to you. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address known to us stating that the data will no longer be processed until you lift the restriction.

Right to data portability
You always have the right to have the data that we process (or have processed) and that relates to you or can be traced back to you transferred to or processed by another party. You can submit a request to this effect to our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send copies or extracts of all data about you that we have processed, or that has been processed on our behalf by other processors or third parties, to the email address known to us. In such a case, we will in all likelihood no longer be able to continue providing our services, as the secure linkage of data files can no longer be guaranteed.

Right to object and other rights
In certain cases, you have the right to object to the processing of your personal data by or on behalf of Munay-Ki. If you raise an objection, we will immediately suspend the processing of your data pending the handling of your objection. If your objection is well founded, we will make copies and/or extracts of the data that we process (or have processed) available to you and will then permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is nevertheless the case, please contact our privacy contact person.

Cookies

Google Analytics
Cookies from Google are placed on our website as part of the “Analytics” service. We use this service to track and receive reports on how visitors use the website. This processor may be required, under applicable laws and regulations, to provide access to this data. We collect information about your browsing behavior and share this data with Google. Google may interpret this information in conjunction with other datasets and, in this way, track your movements across the internet. Google uses this information for, among other things, offering targeted advertisements (AdWords) and other Google services and products.

Cookies from third parties
In the event that third-party software solutions use cookies, this is stated in this privacy policy.

Changes to the privacy policy

We reserve the right to amend our privacy policy at any time. However, you will always find the most recent version on this page. If the new privacy policy affects the way we process data already collected about you, we will notify you by email.

Contact details
Munay-Ki B.V.
Postbus 109
3645 ZL Vinkeveen
T (06) 10460695
E hello@munay-ki.com

Privacy contact person
Lieke Laan