Privacy policy

Who we are

The DnD3D online store is operated by BJX Business Group B.V., Herengracht 449 A, 1017 BR Amsterdam, Netherlands (KvK 81194560, VAT NL861980669B01), which acts as the data controller for the purposes of this policy. This privacy policy explains how we collect, use and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR).

Data we collect

We collect the information you provide when placing an order or contacting us (name, address, email, phone, date of birth for card payments, billing region for Visa and Mastercard, and payment details) and technical data such as your IP address and cookies necessary to run the store, process card payments, and understand how it is used.

How we use your data

Your data is used to process orders, arrange delivery, provide support, and — with your consent — to send you marketing communications. We never sell your personal data.

Legal basis for processing

We only process your personal data where we have a valid legal basis to do so:

• Contract performance — processing your order, payment and delivery details to fulfil a purchase or instalment agreement
• Legal obligation — retaining invoicing and tax records as required by Dutch and EU law
• Legitimate interest — preventing fraud, securing our systems, and running essential store functionality
• Consent — sending marketing communications and using non-essential analytics cookies, which you can withdraw at any time

Service providers we use

We share personal data with a limited number of service providers who process it on our behalf, strictly to operate the store:

• Vercel — application hosting and infrastructure
• Neon — database hosting for order and account records
• Vercel Blob — storage of product images and uploaded files
• Zoho Mail / Titan Email — sending transactional emails such as order confirmations and support replies

Each provider is bound by a data processing agreement and may only use your data to provide the service we have engaged them for.

Data retention

We keep order and invoicing data for as long as required by tax and commercial law (generally up to 10 years), account data for as long as your account is active, and marketing data until you withdraw your consent. Data no longer needed for these purposes is securely deleted or anonymised.

International transfers

Your data is primarily processed within the European Economic Area. Where a service provider we use (such as a payment or logistics partner) is located outside the EEA, we rely on adequacy decisions or standard contractual clauses to ensure your data remains protected to EU standards.

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (“right to be forgotten”)
• Port your data to another provider in a machine-readable format
• Object to or restrict certain processing, including direct marketing
• Opt out of marketing communications at any time
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at info@dnd3d.com.

As our company is established in the Netherlands, you also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ The Hague, Netherlands — autoriteitpersoonsgegevens.nl

Cookies

We use essential cookies to run the store and, with your consent, analytics cookies to improve it. You can manage your preferences at any time in our cookie policy.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Material changes will be reflected on this page with an updated “last updated” date.

Contact us

For any question about this policy or your data, contact BJX Business Group B.V. at info@dnd3d.com, by phone at +31 970 102 675 78, or by post at Herengracht 449 A, 1017 BR Amsterdam, Netherlands.