Privacy statement

Ferrygraphy, based at Balsa 167, 3315 NK Dordrecht, the Netherlands, is responsible for the personal data processed through this website. Questions can be sent to info@ferrygraphy.com.

When you contact Ferrygraphy or place an order, the website may process your name, email address, telephone number, message, billing and delivery details, order information and payment status. Payment card details are handled by Stripe and are not stored by Ferrygraphy.

This information is used to answer enquiries, process and deliver orders, send transactional messages, provide customer service, prevent misuse and meet legal and administrative obligations. The applicable grounds include performing an agreement, legitimate interests and compliance with legal obligations.

An account is optional. We use your verified email address and account identifier to provide access to your own orders. Supabase Auth manages password authentication. You can link earlier guest orders using their order number and the same verified email address. We do not use account registration as newsletter consent.

Account access supports our customer service agreement. We process necessary order data to fulfil purchases, keep legally required records to meet legal obligations, and use limited security data to protect accounts based on our legitimate interest in preventing misuse.

Ferrygraphy uses service providers including Stripe for payments, Supabase for the shop database and authentication, Resend for email and the website hosting provider. They receive only the information needed to provide their services and may process data outside the European Economic Area subject to appropriate safeguards.

We retain account details while the account is in use or needed to provide the requested service. You can request account deletion at info@ferrygraphy.com. We assess inactive accounts after two years of inactivity. Dutch tax records, including invoices, are generally retained for seven years; deleting an account does not automatically delete these records. Our application rate-limit records contain hashed identifiers and are removed on the next rate-limit check once they are more than one day old. Provider security logs and backups have separate retention periods that you can request from us.

You may request access, correction, deletion, restriction or, where applicable, data portability, and object to processing based on legitimate interests. Email info@ferrygraphy.com. We normally respond within one month and verify identity proportionately. You may complain to the Dutch Data Protection Authority.

The shop uses essential browser storage for the cart and checkout. Customer accounts use necessary authentication cookies to keep you signed in and refresh your session. These are not advertising cookies and do not require cookie consent. Signing out ends the session on this device. No advertising or marketing cookies are currently configured by Ferrygraphy.