Privacy Policy

1. Who We Are

Kelimshop.com is operated by Zargar Rugs, registered in the Netherlands under Chamber of Commerce (KVK) number 61416800.

Business address: Ambachtsweg 27, 2222 AJ, Katwijk aan Zee, Netherlands. Phone: +31 6 14545999. Email: kelimshop@gmail.com

We are a family-run business specialising in handmade oriental carpets and kilims, and we take the protection of your personal data seriously. This policy explains what information we collect, why we collect it, how we use it, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

2. Our Approach to Your Data

Providing personal data to us is generally voluntary. Where we do need certain information, for example to complete an order or open a customer account, this is made clear at the point of collection, and not providing it may mean we are unable to fulfil that specific request.

"Personal data" means any information that relates to an identified or identifiable individual.

3. Information We Collect

Depending on how you interact with our website, we may collect:

  • Contact details: name, email address, phone number, billing and delivery address
  • Order information: items purchased, order value, payment status, order history
  • Payment information: processed securely by our payment providers, we do not store full card numbers on our own servers
  • Account information: login details and preferences, if you create a customer account
  • Communications: messages you send us via our contact form, email, or phone
  • Technical data: IP address, browser type, device information, and pages visited, collected automatically as you browse
  • Marketing preferences: whether you have opted in to receive our newsletter or promotional emails

4. How and Why We Use Your Data

Purpose Legal basis
Processing and fulfilling your order, including payment, shipping, and customer service Performance of a contract
Creating and managing your customer account Your consent
Responding to enquiries sent via our contact form or by email Contract / legitimate interest
Sending you order and delivery status updates Performance of a contract
Sending marketing emails and newsletters Your consent
Preventing fraud and misuse of our services Legitimate interest
Website analytics and improving our services Legitimate interest or consent
Complying with legal obligations (e.g. bookkeeping, tax law) Legal obligation

Where our processing relies on legitimate interest, you have the right to object at any time for reasons connected to your particular situation. Where it relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

5. Server and Log Data

Each time you visit our website, certain technical data is automatically transmitted to us and our hosting provider and recorded in server logs, for example the page requested, date and time of the request, IP address, and browser or device details. This happens on the basis of our legitimate interest in keeping the website secure, stable, and functioning correctly.

6. Cookies

Our website uses cookies, small text files stored on your device, to make the site function properly and to understand how it is used.

  • Essential cookies are required for core functions such as the shopping cart, checkout, and account login, and cannot be switched off without affecting how the site works
  • Analytics cookies help us understand how visitors use the site so we can improve it
  • Marketing cookies may be used to show you relevant advertising and measure campaign performance, where you have given consent

You can manage or block cookies through your browser settings at any time. Blocking essential cookies may prevent parts of the site, such as checkout, from working correctly.

7. Payment Processing

When you place an order, your payment is handled directly by our payment service providers, and we do not store your full card details on our own servers. Depending on the option you choose at checkout, this may include Visa, Mastercard, American Express, Discover, JCB, UnionPay, WeChat Pay, PayPal, and Klarna. Each provider processes your payment data under its own privacy policy, and we recommend reviewing these where relevant, for example Klarna requires certain order and contact details to assess and offer its payment options.

8. Shipping

To deliver your order, we share the necessary contact and address details with our shipping and courier partners, strictly limited to what is needed to complete delivery and keep you informed of your order's status.

9. Analytics and Marketing Tools

We may use third-party tools to understand how our website is used and to run marketing campaigns, such as web analytics services and advertising pixels from platforms including Google and Meta (Facebook/Instagram). Where these tools set cookies or process personal data for advertising purposes, this is done only with your consent, collected via our cookie banner. You can withdraw this consent at any time through your cookie settings.

10. Sharing Your Data

We do not sell or trade your personal data. We only share it with:

  • Payment service providers, to process your transaction
  • Shipping and courier companies, to deliver your order
  • IT and hosting providers, who support our website infrastructure
  • Analytics and marketing partners, where you have consented
  • Authorities, where required by law

Any third party we work with is required to handle your data securely and only for the purpose for which it was shared.

11. International Data Transfers

Some of the service providers we use may process data outside the European Economic Area (EEA), including in the United States. Where this happens, we rely on appropriate safeguards recognised under GDPR, such as the European Commission's standard contractual clauses, to ensure your data remains protected.

12. How Long We Keep Your Data

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, for example for the duration of any warranty period, and afterwards for as long as required by law, such as Dutch tax and bookkeeping retention rules. Account data is kept until you ask us to delete your account, unless we are legally required to retain it longer.

13. Your Rights

Under the GDPR, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data, where we have no legal obligation to keep it
  • Restrict or object to certain processing
  • Request a portable copy of your data
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data has been processed unlawfully

To exercise any of these rights, contact us using the details in Section 1.

14. Children's Privacy

Our website is not directed at children, and we do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us so we can remove it.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last revised. We encourage you to review it periodically.

16. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Zargar Rugs / Kelimshop.com
Ambachtsweg 27, 2222 AJ, Katwijk aan Zee, Netherlands
Phone: +31 6 14545999
Email: kelimshop@gmail.com