Privacy policy
Last updated: 9 November 2026
This privacy policy explains which personal data Garden of Eedens processes about you, why, for how long, with whom we share it and what rights you have. It applies to this website, the webshop, the business ordering environment and contact with our customer service.
Who we are
Garden of Eedens B.V. is responsible for the processing of your personal data.
Garden of Eedens B.V.
Pampuslaan 59, 1382 JM Weesp, the Netherlands
Chamber of Commerce (KvK) 42105176
Email: info@gardenofeedens.com
Phone: +31 20 303 39 56
For questions about privacy or a request about your data, contact info@gardenofeedens.com.
What data we process and why
Ordering and delivery
Name, address, email address, phone number, the products you order, payment status and shipping details. We use this data to process, deliver and invoice your order and to keep you informed about it.
Legal basis: performance of the contract with you.
Payment
Payments are handled by our payment service Mollie and the payment method you choose. We do not receive full card details, only whether and how payment was made.
Legal basis: performance of the contract.
Your customer account
If you create an account: your name, email address, addresses, order history and preferences. You sign in with a code we send to your email address.
Legal basis: performance of the contract. You can have your account deleted at any time.
Wine and age verification
We only sell wine to people aged 18 or over. In the cart you confirm with a tick box that you are 18 or over. With the order we only store that you confirmed this, not your date of birth. On delivery the carrier checks your age against an ID document.
Legal basis: legal obligation (Dutch Alcohol Act).
Contact and customer service
What you send us via the contact form, email or phone, with your name and contact details. We use this to answer your question.
Legal basis: legitimate interest (handling your question properly), or the contract if it concerns an order.
Business customers
Company name, Chamber of Commerce and VAT number, invoice and delivery address, and name, email address and phone number of the contact person. We use this to assess and manage your business account and to deliver and invoice orders.
Legal basis: performance of the contract and, for assessing an application, our legitimate interest.
Withdrawal and returns
If you withdraw from a purchase or send something back: your order number, email address, the products and any explanation you give.
Legal basis: legal obligation and performance of the contract.
Accounting
We keep invoices and payment details for our accounts.
Legal basis: legal obligation (tax retention requirement).
We do not send you newsletters or advertising unless you have first given your consent. We do not use your data for advertising and we do not sell it.
How long we keep data
| Data | Retention period |
|---|---|
| Orders, invoices and payment details | 7 years, legal retention requirement |
| Customer account | Until you have the account deleted. Orders are then kept for 7 years for the accounts |
| Confirmation of age verification for a wine order | As long as the order is kept |
| Contact messages and emails | 2 years after the last contact |
| Business customer data | For as long as the collaboration lasts, then 7 years for invoices |
| Application for a business account that does not lead to an account | 6 months |
Who we share data with
We only share your data where needed for the purposes above, with parties that process it on our behalf or have a task of their own:
- Shopify (Shopify International Limited, Ireland): the platform for our webshop, customer accounts and checkout.
- MyParcel, PostNL and, for business shipments, sometimes DHL: for shipping and delivering your order.
- Webwinkelfacturen and Twinfield: for invoices and our accounts.
- Stockroom (MyWorks): for managing stock and orders.
- OpenAI (ChatGPT), via the Shopify integration: we use it to manage our webshop, which may involve processing order and customer data.
- Mollie (Mollie B.V., the Netherlands): for payments with iDEAL, payment cards and Bancontact.
- Google (Google Workspace): for our email.
- Our accountant: for our accounts and tax returns.
- Government authorities, if the law requires us to.
We have agreements on security and confidentiality with parties that process data on our behalf.
Data outside the European Union
Some service providers, such as Shopify, Google and OpenAI, may also process data outside the European Economic Area. This only happens with the safeguards the GDPR requires, such as a decision by the European Commission that the country offers an adequate level of protection, or the European Commission's standard contractual clauses.
Cookies
How this website uses cookies is explained in our cookie policy. We do not place advertising cookies. Cookies that are not needed for the webshop to work are only placed with your consent.
Security
We protect your data with appropriate technical and organisational measures. The website uses an encrypted connection (https), and only staff who need your data for their work can access it.
Your rights
You have the right to:
- access your data;
- have incorrect data corrected;
- have your data deleted, insofar as we are not legally required to keep it;
- have processing restricted;
- object to processing based on legitimate interest;
- receive your data in a common file format or have it transferred;
- withdraw consent you have given.
Send your request to info@gardenofeedens.com. We respond within one month. To avoid giving data to the wrong person, we may ask you to confirm that it is you.
Complaints
Not happy with how we handle your data? Let us know first via info@gardenofeedens.com. You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
Children
Our webshop is not intended for children under 16. We only sell wine to people aged 18 or over.
Changes
We may change this privacy policy. The date at the top shows when it was last changed. We will let you know about major changes, for example via the website.