This page explains what personal data Pepsup.eu collects, why, who else sees it and what you can do about it. It applies to everything on this website.
Pepsup.eu, Getsewoudweg, 2151 MS Nieuw-Vennep, Netherlands, is the controller for the data described here. For any question or request about your data, email [email protected] and we will answer within 30 days.
| Order details | Name, email, delivery address, what you ordered, and the payment status. Needed to perform the contract when you place an order. |
|---|---|
| Invoice records | The same details, kept as part of our bookkeeping. Required by Dutch tax law. |
| Marketing email | Your email address, only if you tick the box at checkout or sign up. Based on your consent, which you can withdraw at any time. |
| Abandoned baskets | If you enter your email at checkout but do not finish, we may send you one reminder. Based on our legitimate interest in recovering the sale; you can object at any time and every message has an unsubscribe link. |
| Website analytics | How pages are used, and session recordings that capture clicks, scrolling and mouse movement. See the section below. |
| Server logs | IP address and request details, kept briefly to keep the site secure and working. |
We ask for nothing beyond this. We do not ask what you intend to do with a product, and we do not build profiles about you.
We use a small number of specialist providers. They act on our instructions and may not use your data for their own purposes.
Stripe, Resend, Google and Microsoft are established in or transfer data to the United States. Those transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and on standard contractual clauses.
We want to be straightforward about this, because it is the part of our data use that goes furthest. Google Analytics 4 records which pages are visited and how people arrive. Microsoft Clarity additionally records anonymised sessions: the movement of the cursor, what is clicked and how far a page is scrolled. Both set cookies, but only after you accept them: by default analytics consent is denied and Microsoft Clarity is not loaded at all.
You choose in the cookie banner: “Accept” turns them on, “Essential only” keeps them off. You can change your choice at any time via the “Cookie settings” link in the footer, and you can always email us to ask that any recording associated with you is deleted.
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it to another provider, or stop processing it. Where we rely on your consent you can withdraw it at any time, which does not affect anything done before that. Email [email protected] — we do not charge for this and we do not require a special form.
Deleting an order record is the one request we may have to refuse in part, because tax law obliges us to keep invoices for 7 years. In that case we remove everything not covered by that obligation.
Tell us first — most things are quicker to fix directly. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the EU country where you live.
The site runs over an encrypted connection, payment details never touch our servers, and access to the order database is limited to the people who need it. No system is perfect; if a breach ever affects your data we will notify you and the regulator as the law requires.
Last updated 6 August 2026.