Privacy Policy
Article 1. Introduction
Idimota respects your privacy and processes personal data carefully, confidentially, and in accordance with applicable privacy legislation, including the General Data Protection Regulation (GDPR).
In this Privacy Policy, we explain which personal data we collect, why we process it, how we handle it, and what rights you have regarding your personal data.
This Privacy Policy applies to all visits to and transactions through:
www.idimota.com
www.idimota.nl
By using the webshop, you acknowledge that you have read this Privacy Policy.
Article 2. Data controller
Idimota
Tulpstraat 110
2841 AE Moordrecht
The Netherlands
Chamber of Commerce number: 89047605
VAT number: NL004686307B74
Idimota is responsible for the processing of personal data as described in this Privacy Policy.
The Idimota webshop is hosted via Shopify.
Article 3. Which personal data we collect
Depending on how you use the webshop, we may process the following personal data.
Order and customer information
- first and last name
- billing address
- shipping address
- e-mail address
- telephone number (if provided)
- order details
- payment information
Customer service and communication
When you contact us, we may process:
- name
- e-mail address
- order number
- contents of communication
- attached photos or files
Technical and website information
When visiting the webshop, certain information may automatically be collected, including:
- IP address
- browser type
- device information
- visited pages
- date and time of visit
- cookie data
- interactions with the webshop
Article 4. How we collect personal data
Personal data may be collected, among others:
- when you place an order
- when you contact us
- when you use the webshop
- through cookies and similar technologies
- through payment providers and logistics partners
- through marketing and analytics tools
Article 5. Purposes of processing
Idimota processes personal data exclusively for legitimate purposes, including:
- processing and delivering orders
- processing payments
- sending order and shipping confirmations
- customer service and communication
- processing returns and complaints
- fraud prevention and webshop security
- improving the webshop and user experience
- marketing purposes where consent has been given
- compliance with legal obligations
Article 6. Legal bases for processing
Idimota processes personal data solely on the basis of valid legal grounds as referred to in the GDPR.
We process personal data on the basis of:
- performance of a contract
- legal obligations
- legitimate interest
- consent of the user
Article 7. Payments
Payments through the webshop are processed by external payment providers.
Idimota does not have access to complete payment details such as credit card numbers or full payment card information.
Payment providers process personal data in accordance with their own privacy policies and security measures.
Article 8. Sharing personal data with third parties
Idimota never sells personal data to third parties.
Personal data is only shared where necessary for:
- the performance of the agreement
- the provision of services
- fraud prevention
- compliance with legal obligations
Personal data may be shared with, among others:
- Shopify
- payment providers
- carriers such as PostNL
- hosting and IT service providers
- customer service, review, and communication services
- analytics and marketing services
Idimota only works with external service providers that process personal data in accordance with applicable privacy legislation and maintain appropriate security measures.
Article 9. International transfer of personal data
Certain external service providers of Idimota may process personal data outside the European Economic Area (EEA).
Where personal data is processed outside the EEA, Idimota ensures that appropriate safeguards are implemented in accordance with applicable privacy legislation.
Article 10. Retention periods
Idimota does not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is legally required.
Order and invoice data are retained for a maximum period of 7 years in accordance with fiscal retention obligations.
Data processed for marketing purposes will be retained until consent is withdrawn or the user unsubscribes.
Article 11. Cookies
Idimota uses cookies and similar technologies to ensure the webshop functions properly, to analyze performance, and to improve user experiences.
Cookies may be used for, among others:
- shopping cart functionality
- webshop security
- website analytics
- marketing and advertising purposes
- remembering preferences
More information regarding the use of cookies is included in the Cookie Policy of Idimota.
Article 12. Marketing and newsletters
Where you have given consent, Idimota may use your personal data for sending newsletters, offers, and marketing communications.
You may unsubscribe at any time via the unsubscribe link in e-mails or by contacting us via support@idimota.com.
Article 13. Security of personal data
Idimota takes appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, or other forms of unlawful processing.
The webshop uses secure connections (SSL).
Although Idimota takes appropriate security measures, no method of data transmission or storage can guarantee complete security.
Article 14. Rights of data subjects
Under the GDPR, you have the right to:
- request access to your personal data
- correct personal data
- request deletion of personal data
- object to processing
- restrict processing
- request data portability
- withdraw previously given consent
Requests regarding personal data may be submitted via:
Idimota may request additional information to verify the identity of the requester before processing a request.
Article 15. Complaints
If you have a complaint regarding the processing of personal data by Idimota, we kindly request that you first contact us so that we may attempt to find a solution together.
In addition, you have the right to file a complaint with the competent supervisory authority.
In the Netherlands, this is the:
Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
Article 16. Minors
The webshop and products of Idimota are not specifically directed at persons under the age of 16.
Idimota does not knowingly collect personal data from persons under the age of 16 without consent from a parent or legal guardian.
Article 17. External websites and services
The webshop may contain links to third-party websites or services.
Idimota is not responsible for the content, security, or privacy practices of third-party websites or services.
We recommend carefully reading the privacy policies of these third parties.
Article 18. Changes to this Privacy Policy
Idimota reserves the right to amend this Privacy Policy.
The most recent version of the Privacy Policy will always be published on the webshop. The date of the latest amendment is stated at the bottom of this document.
We recommend regularly reviewing this Privacy Policy.
Article 19. Contact
For questions regarding this Privacy Policy or the processing of personal data, you may contact us via:
Last updated on May 10, 2026.