Privacy Policy
We take your privacy seriously. Below we explain who controls your personal data, why we process it, who we share it with, how long we keep it and which rights you have under the General Data Protection Regulation (GDPR).
1. Data controller:
De Haan Online, Splitting 1, 9281 KJ Harkema, the Netherlands. KvK 88724204. VAT NL004654469B78. Telephone +31 6 44842016. Email: support@getkernly.com.
2. Purposes and legal bases:
processing your order (Article 6(1)(b) GDPR); handling payments securely through our payment providers (Article 6(1)(b)); customer service, returns, refunds and complaints (Article 6(1)(b) and (c)); legal obligations such as accounting and tax (Article 6(1)(c)); newsletter and marketing emails only with your consent or where the law allows it for existing customers, with an unsubscribe link in every email (Article 6(1)(a) and (f)); analytics, advertising and remarketing cookies and pixels only with the consent you give in our cookie banner (Article 6(1)(a)); our legitimate interests in keeping the shop secure, preventing fraud and defending legal claims (Article 6(1)(f)).
3. Data we process:
identity and contact details (name, email address, telephone number); delivery and billing address; order details and correspondence; payment details, handled by our payment providers (we never store your full card details); technical data such as IP address, device and browser type and cookie data (with your consent). We do not ask for health information. If you share health information with us in a message, we only use it to answer your question and do not keep it longer than necessary.
4. Recipients and processors:
our shop platform, payment providers, couriers and fulfilment partners, parcel tracking services, analytics and advertising providers (only with your consent), and our accountant or public authorities where the law requires it. We never sell your personal data.
5. Transfers outside the European Economic Area:
some service providers, including fulfilment partners and advertising platforms, process data outside the EEA. In those cases we rely on an adequacy decision of the European Commission or appropriate safeguards, in particular the EU Standard Contractual Clauses.
6. How long we keep your data:
order and accounting records 7 years (Dutch tax law); customer account data until you delete your account or ask us to erase it; newsletter data until you unsubscribe; cookie data in line with the lifespan shown in the cookie banner.
7. Your rights:
access, rectification, erasure, restriction, data portability, objection (including an absolute right to object to direct marketing) and withdrawal of consent at any time. Email support@getkernly.com; we respond within one month, free of charge.
8. Complaints:
you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the supervisory authority in your EU country of residence.
9. Cookies:
we use strictly necessary cookies and, only with your consent, analytics and marketing cookies. You can change your choice at any time via Manage cookies.
10. Changes:
we may update this policy; the current version is always on this page. Last updated: October 2026.