Privacy Policy
APELLOX — Punche • Version January 2026
1. Data Controller
APELLOX, Keurenplein 41 A8153, 1069CD Amsterdam
CoC: 91123399 • VAT: NL004867457B03
Contact: contact form
2. Data We Collect
- Name, email address, delivery address (for orders)
- Payment information (processed via Stripe — we do not store payment data)
- IP address and cookie data (for website analytics)
3. Purpose of Processing
- Fulfillment of the purchase agreement (delivery, invoicing)
- Legal obligations (bookkeeping, taxes)
- Improvement of our website and services
4. Retention Period
Order data is retained for the statutory period of 7 years. Other data is deleted when no longer necessary.
5. Third Parties
We only share your data with:
- Stripe — payment processing
- PostNL — delivery (name and address)
- Xserver — web hosting
We do not sell your data to third parties.
6. Your Rights (GDPR)
You have the right to access, rectification, erasure, objection and data portability. Send your request to contact form. We respond within 30 days.
7. Cookies
We use functional cookies (language preference, shopping cart) and analytical cookies. On your first visit we request consent for non-functional cookies.
8. Security
Our website uses HTTPS. Payments are processed entirely via Stripe (PCI-DSS certified). We do not store payment data on our servers.
9. Complaints
You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.