Privacy policy

PRIVACY POLICY

Last updated: 12 August 2026

  1. WHO WE ARE

De Nieuwe Markt is a trading name of De Ploeg Retail B.V.

De Ploeg Retail B.V. is the controller responsible for the processing of personal data described in this Privacy Policy.

Our details are:

De Ploeg Retail B.V.
Trading as De Nieuwe Markt
Oude Kijk in ’t Jatstraat 43
9712 EC Groningen
The Netherlands

Dutch Chamber of Commerce number: 98165208
VAT identification number: NL868383338B01
Email: info@denieuwemarkt.com
Telephone: +31 6 27298787
Website: www.denieuwemarkt.com

  1. SCOPE OF THIS POLICY

This Privacy Policy explains how we collect, use, share and protect personal data when you:

  • visit or use our website and online store;

  • create or use a customer account;

  • place, collect, return or cancel an order;

  • subscribe to marketing communications;

  • contact our customer service;

  • interact with us through the website; or

  • provide personal data in connection with a purchase or return in our physical store.

Our online store is powered by Shopify.

  1. PERSONAL DATA WE COLLECT

Depending on how you interact with us, we may process the following categories of personal data:

Contact details

Your name, email address, telephone number, billing address, delivery address and other contact information.

Order and transaction information

Products viewed, placed in your basket or purchased, order history, payment status, discounts, delivery details, store-collection details, returns, refunds and cancellations.

Account information

Your login details, account preferences, saved addresses and account activity. Passwords and authentication data are managed through Shopify’s systems.

Payment information

Payment method, payment status, transaction reference and limited payment details. Complete card or bank details are generally processed directly by the relevant payment provider and are not stored by us in full.

Communications

Messages, questions, complaints, return requests and other information you provide when contacting us.

Marketing preferences

Newsletter subscriptions, consent choices, unsubscribe requests and cookie preferences.

Technical and usage information

IP address, browser type, device information, operating system, identifiers, pages visited, navigation behaviour, referral source and interactions with our website.

Security information

Information used to detect fraud, unauthorised access, abuse, suspicious transactions or other security risks.

We do not intentionally collect special categories of personal data, such as health information, religious beliefs or biometric data. Please do not provide such information unless it is strictly necessary and we have specifically requested it.

  1. HOW WE COLLECT PERSONAL DATA

We collect personal data:

  • directly from you when you place an order, create an account, subscribe to marketing or contact us;

  • automatically through our website, cookies and similar technologies;

  • from Shopify and service providers that support payments, delivery, hosting, security or customer service;

  • from carriers when they provide delivery updates;

  • from payment providers when they provide payment or fraud-prevention information; and

  • from partners or public sources where legally permitted and relevant.

  1. PURPOSES AND LEGAL BASES

We process personal data only when we have a valid legal basis.

Performance of a contract

We process personal data where necessary to:

  • accept and fulfil orders;

  • process payments;

  • arrange delivery or store collection;

  • provide order updates;

  • manage accounts;

  • process cancellations, returns and refunds; and

  • provide products and customer service.

Legal obligations

We process personal data where necessary to:

  • maintain tax and accounting records;

  • comply with consumer, product-safety and ecommerce laws;

  • respond to legally valid requests from authorities;

  • prevent money laundering or payment fraud where applicable; and

  • establish, exercise or defend legal claims.

Legitimate interests

We may process personal data where necessary for our legitimate business interests, provided that your rights and interests do not override those interests. These interests include:

  • securing our website and systems;

  • preventing fraud and abuse;

  • improving our products and customer service;

  • maintaining accurate stock and transaction records;

  • investigating complaints;

  • protecting our legal rights; and

  • communicating with existing customers about similar products where permitted by law.

Consent

We rely on consent where required, including for:

  • email marketing where no other lawful basis applies;

  • non-essential analytics cookies;

  • marketing or tracking cookies;

  • personalised advertising; and

  • other optional processing for which we specifically request permission.

You may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

  1. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies.

Necessary cookies

These cookies are required for functions such as the shopping basket, checkout, security, account login, language settings and payment processing. They may be used without consent where legally permitted.

Analytics cookies

Analytics cookies help us understand how visitors use our website. Where consent is legally required, these cookies are used only after you have given permission.

Marketing cookies

Marketing and tracking cookies may be used to measure campaigns or provide personalised advertising. Where legally required, these technologies are activated only after you have given consent.

You can accept, reject or adjust non-essential cookies through the cookie settings available on our website. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

You can also manage cookies through your browser, although blocking necessary cookies may prevent parts of the store from functioning correctly.

  1. PAYMENTS

Payments are processed by Shopify Payments or another payment provider selected during checkout.

Payment providers process personal and financial data according to their own privacy notices and security requirements. We generally receive only the information necessary to confirm and administer the transaction.

Payment providers may perform identity, security and fraud-prevention checks. A payment provider may refuse or suspend a transaction in accordance with its own legal obligations and terms.

  1. HOW WE SHARE PERSONAL DATA

We may share personal data with the following categories of recipients where necessary:

  • Shopify, which hosts and supports our online store;

  • payment providers and financial institutions;

  • carriers, fulfilment providers and collection services;

  • hosting, IT, cloud-storage and security providers;

  • customer-service and communication providers;

  • email-marketing, analytics and advertising providers, where enabled and legally permitted;

  • accountants, legal advisers, insurers and other professional advisers;

  • government bodies, regulators, courts or law-enforcement agencies where legally required; and

  • parties involved in a merger, restructuring, financing, sale or transfer of our business, subject to appropriate safeguards.

Service providers may process personal data only for agreed purposes and subject to applicable privacy and security obligations.

We do not sell personal data in exchange for money.

  1. SHOPIFY

Our online store is hosted by Shopify. Shopify processes personal data to provide, secure and improve the ecommerce services used by our store.

Information submitted through the store may be transmitted to Shopify and its service providers. Depending on the Shopify services enabled, Shopify may act as our processor or as an independent controller for certain processing activities.

Where Shopify Network Intelligence or other enhanced services are enabled, Shopify may use information about interactions with our store and other Shopify merchants for purposes described in Shopify’s own privacy information.

More information is available in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Requests relating specifically to processing for which Shopify is independently responsible may also be submitted through the Shopify Privacy Portal:

https://privacy.shopify.com/en

  1. INTERNATIONAL TRANSFERS

Shopify and other service providers may process personal data outside the European Economic Area.

Where personal data is transferred to a country without an adequacy decision from the European Commission, we or our service providers use recognised safeguards such as Standard Contractual Clauses or another legally permitted transfer mechanism.

Further information about safeguards used by a particular provider can be found in that provider’s privacy notice or requested from us.

  1. RETENTION

We do not retain personal data longer than necessary for the purpose for which it was collected, unless a longer period is required by law.

In general:

  • order, payment, invoice and accounting records are retained for at least seven years to comply with Dutch tax obligations;

  • records covered by the EU One Stop Shop or Import One Stop Shop may be retained for ten years where applicable;

  • customer-account data is retained while the account remains active and afterwards only where necessary for legal, security or administrative purposes;

  • customer-service correspondence is generally retained for up to two years after the matter is resolved, unless it relates to an order, dispute or legal obligation requiring longer retention;

  • marketing data is retained until you unsubscribe, withdraw consent or the data is no longer needed;

  • a limited suppression record may be retained after unsubscribing to ensure that your preference continues to be respected;

  • cookie data is retained according to the duration stated in our cookie settings; and

  • security and fraud-prevention information is retained for as long as reasonably necessary to investigate incidents and protect our systems.

After the applicable period, data is deleted or anonymised unless continued retention is legally required.

  1. SECURITY

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

These measures may include access controls, encrypted connections, account security, fraud monitoring and the security measures provided by Shopify and our payment providers.

No system or method of transmission is completely secure. Please do not send sensitive information through unsecured communication channels.

  1. YOUR PRIVACY RIGHTS

If the General Data Protection Regulation applies to you, you may have the following rights:

  • access to the personal data we process about you;

  • correction of inaccurate or incomplete data;

  • deletion of personal data where applicable;

  • restriction of processing;

  • data portability in a structured, commonly used and machine-readable format;

  • objection to processing based on legitimate interests;

  • objection to direct marketing at any time;

  • withdrawal of consent at any time; and

  • the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.

These rights are not absolute. We may need to retain or continue processing certain data where required by law or where another legal exception applies.

Send requests to info@denieuwemarkt.com. We may request information necessary to verify your identity.

We will respond in principle within one month. This period may be extended by up to two further months for complex or multiple requests, as permitted by law. If extended, we will inform you within the initial month.

  1. MARKETING COMMUNICATIONS

You may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting info@denieuwemarkt.com.

After unsubscribing, you may still receive non-marketing communications relating to orders, payments, returns, security or your customer account.

You may object to the use of your personal data for direct marketing at any time.

  1. CHILDREN

Our services are not specifically directed at children under 16.

We do not knowingly collect personal data from children under 16 without valid permission from a parent or legal guardian where this is required by law.

If you believe that a child has provided personal data without appropriate permission, contact us at info@denieuwemarkt.com.

  1. THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, content or security of independent third-party websites. Review their privacy policies before providing personal data.

  1. COMPLAINTS

Contact us first if you have a complaint about how we process personal data. We will try to resolve the matter with you.

You also have the right to submit a complaint to the Dutch supervisory authority:

Autoriteit Persoonsgegevens
https://www.autoriteitpersoonsgegevens.nl/

If you live in another European Economic Area country, you may also contact the supervisory authority in your country of residence.

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy when our services, systems, suppliers, legal obligations or processing activities change.

The latest version will be published on our website with an updated revision date. Where required by law, we will provide additional notice of material changes.

  1. CONTACT

For questions, privacy requests or complaints, contact:

De Ploeg Retail B.V.
Trading as De Nieuwe Markt
Oude Kijk in ’t Jatstraat 43
9712 EC Groningen
The Netherlands

Email: info@denieuwemarkt.com
Telephone: +31 6 27298787
Website: www.denieuwemarkt.com