Privacy statement
This is a translation. In case of any difference in interpretation, the Dutch text prevails.
What we keep about you, why, and how to get rid of it.
Who processes your data
Gemini Marketing, trading under the name MerchPadel, is the data controller.
- Nijmegen, Nederland
- Chamber of Commerce number: 95627960
- Privacy questions: info@merchpadel.com
What we process and why
When you order
We process your name, email address, delivery address, billing address and, if you order as a business, your company name and VAT number. We also record which version of the terms and conditions you accepted and at what moment, and that you waived the right of withdrawal for personalised products.
Basis: performance of the contract. Without this data we cannot deliver and cannot issue an invoice.
Your design
What you upload (a logo, a photo) and the text you add, we keep in order to make the product and generate the print file. If there is a name on the racket, we therefore keep that too. We only create the print file once your payment has cleared.
Your VAT number
If you supply a VAT number, we check it against VIES, the database of the European Commission. We store the result of that check as evidence with your order, because the tax authority may ask for it.
Checking your address
If you order for delivery in the Netherlands, we fill in the street and town for you as soon as you have entered your postcode and house number. To do this, our server looks up those two details with the PDOK Locatieserver of the Kadaster (the Dutch government’s Land Registry), which takes the addresses from the Dutch Basic Register of Addresses and Buildings (BAG). Only the postcode and house number are sent, not your name and not your IP address, because the request comes from us and not from your browser.
When you request a quote
Name, email address, your description, any uploaded file and, if you fill them in, your phone number, company name and VAT number. Legal basis: your request for a quote.
Technical data
To prevent anyone from automatically overloading our upload function, the quote form or the VAT check, we count the number of requests per visitor. For that we do not keep an IP address but an encrypted derivation of it that cannot be reversed. That counter expires by itself and is cleaned up daily. Basis: our legitimate interest in keeping the shop reachable.
Newsletter
Only if you ask for it yourself. Basis: your consent. Every email carries an unsubscribe link, and unsubscribing takes effect immediately.
Cookies
We use a basket cookie so your order does not disappear when you reload the page. It contains only product numbers and quantities, no amounts and no personal data. That cookie cannot be read by scripts and expires after thirty days. It is technically necessary, so we do not have to ask consent for it.
Your choice of seeing prices including or excluding VAT is stored in your browser itself. That information never reaches our server.
We only place analytics or advertising cookies if you consent through the cookie banner. If you decline, nothing happens.
Measurement and advertising
If you click Accept in the cookie banner, we use Google Analytics 4 (visitor statistics), Microsoft Clarity (heatmaps and recordings of how the site is used) and the Meta pixel (to measure which ads on Facebook and Instagram lead to a request or an order, and to improve those ads). If you click Decline or make no choice, these services do not load and we place none of the cookies below. Legal basis: your consent.
If you place an order or request a quote or print proof, and you have given consent, we also send that event from our own server to Meta (Conversions API) and, for an order, to Google (Measurement Protocol). It contains the type of event, the amount excluding VAT, the products, the order or request number and your email address in an unreadable (hashed) form. For a request, your IP address and browser details (type of browser and device) are also sent to Meta, and for an order your browser details and the cookie IDs below (_fbp, _fbc, _ga). This only happens with your consent. This way an order is counted once, even if an ad blocker stops the pixel. We do not store your IP address.
With your consent we also remember which campaign brought you here (the UTM codes in the link and the click ID from Meta or Google) and attach it to your order or request. This shows us which ads work.
Microsoft Clarity (Microsoft Ireland Operations Ltd.) shows us where visitors click and scroll and where they get stuck, with heatmaps and recordings of how the site is used. It only loads after Accept. What you type in forms, and your name, address and email address, are made unreadable (masked) in those recordings. Clarity does not run on the thank-you page, in your account or on the links to a quote or print proof. Microsoft processes this data partly in the United States, on the basis of the EU-US Data Privacy Framework.
Advertising (if active). The Meta pixel and Google Ads conversion tracking (Google Ireland Ltd.) only run during periods in which we advertise on Facebook, Instagram or Google, and even then only after Accept. Google Ads then measures which ad led to a request or an order, using the click ID from the link (gclid) and the cookie below. If we do not advertise on a channel, the measurement for that channel does not load.
| Name | Service | Purpose | Retention |
|---|---|---|---|
mp_consent | MerchPadel | Your choice in the cookie banner (stored in your browser, not as a cookie) | Until you change it |
mp_attr | MerchPadel | Where your visit came from (campaign, click ID) and the signal that you gave consent | 90 days |
mp_evt | MerchPadel | Short queue for a measurement, such as an order | 10 minutes |
mp_ord | MerchPadel | Links the thank-you page to your order, so the purchase is measured once | 2 days |
_ga, _ga_* | Google Analytics | Recognise visits and sessions for statistics | 13 months |
_fbp, _fbc | Meta | Recognise your visit and a click on an ad | 90 days |
_clck, _clsk | Microsoft Clarity | Recognise visits and link a session together for heatmaps and recordings (analytics) | 1 year (_clck), 1 day (_clsk) |
_gcl_au | Google Ads (if active) | Link a click on an ad to a request or an order | 90 days |
Google (Google Ireland Ltd.) and Meta (Meta Platforms Ireland Ltd.) also process this data for their own purposes, partly in the United States, under the EU-US Data Privacy Framework. If you are logged in to Facebook or Instagram, Meta can also read its own cookies on its domains; see the Meta cookie policy. Google and Meta are therefore not our processors and are not covered by the processing agreements under ‘Who we share with’.
With your order or request we keep the cookie IDs (_fbp, _fbc, _ga) and your browser details only until the event has been sent to Meta and Google, and for 90 days at most. We keep the campaign data (UTM codes, landing page, click ID) for 13 months. After that, only whether you gave consent remains. This is separate from the seven years that apply to the order itself.
Change your choice
You can withdraw your consent at any time. The button below deletes our measurement cookies and the Google and Meta cookies on this domain, and shows the cookie banner again.
Who we share with
We do not sell your data. We do use service providers that the shop needs to work. They only receive what they need for their task and may not use it for anything else; we set this down with each of them in a data processing agreement.
| Service | What for | Where |
|---|---|---|
| Mollie | Payments. Your payment details never reach our server. | Netherlands |
| Vercel | Hosting of the website | US and EU |
| Vercel Blob | Storage of uploaded files, designs, print proofs, print files and invoices | US and EU |
| Neon | Database of orders and designs | EU (Frankfurt) |
| Google Workspace | Email: our mailbox, and the emails we send you, such as confirmations, quotes and your print proof | US and EU |
| Resend | Sending those same emails, if we use this service for that instead of our own mailbox | United States |
| Klaviyo | The newsletter, only with your consent, and service emails about your order (such as "your racket has shipped") if this connection is switched on | United States |
| Crisp (Crisp IM SAS) | The live chat on the site. Crisp only loads when you click the chat button yourself; before that nothing is sent to Crisp and Crisp sets no cookies. After your click, Crisp processes your messages, the page you are chatting from and, if you are logged in, your name and email address. | France (EU) |
| Google (sign-in) | Only if you choose Continue with Google: your name, email address and Google ID, to sign you in. We receive no password and no access to your Google account. | US and EU |
| PDOK (Kadaster) | Looking up street and town from postcode and house number (only those two details) | Netherlands |
| Parcel carriers (for example PostNL, DHL or DPD) | Delivering your parcel: your name and delivery address | Netherlands |
| Our production partner | Making and printing your racket: only the print file with your design and the order number. No address, email address or phone number. | Outside the EEA (Pakistan) |
Data outside the European Economic Area
Vercel, Neon, Google, Resend and Klaviyo are American companies; part of the processing may take place in the United States. This is based on the EU-US Data Privacy Framework, which these companies have joined, and otherwise on the standard contractual clauses of the European Commission.
Our production partner makes the rackets in Pakistan. The European Commission has not adopted an adequacy decision for Pakistan. We therefore set down the transfer with the European Commission's standard contractual clauses. We send the factory as little as possible: only the print file and the order number, never your address, email address or phone number. If there is a name on your racket, it is also in the print file; otherwise the racket cannot be made. Legal basis: performance of the contract. You can ask us for a copy of these arrangements.
How long we keep it
| What | How long | Why |
|---|---|---|
| Orders and invoices | 7 years | Statutory retention obligation of the tax authority |
| Your design and print file | 2 years after delivery | So you can reorder and we can assess a complaint |
| Quote requests | 1 year | To follow up on your request |
| Newsletter subscription | Until you unsubscribe | Consent |
| Overload counters | One day at most | Security |
Your rights
You may ask us for access to your data, for correction, for erasure, for restriction of processing, and to receive your data in a common file format. If you give consent for the newsletter, you may withdraw it at any time.
Send your request to info@merchpadel.com. We respond within one month. One limitation: data covered by the statutory tax retention obligation cannot be deleted by us before seven years have passed.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch data protection authority at autoriteitpersoonsgegevens.nl.
Security
The connection to this site is encrypted. We do not process payment details ourselves, they go straight to Mollie. The admin is protected by a password and does not appear in search engines. Only people who need it for their work have access to orders.
See also the terms and conditions.