Privacy

This policy describes how we handle personal data under the General Data Protection Regulation (EU) 2016/679. It is written to be read, not to be survived. Last updated 25 September 2026.

Who controls your data

Origo Standard. Nijverheidsweg 18-a, 3481 MB Harmelen, the Netherlands. KvK 42086087. Questions, copies and corrections: joep@origostandard.com.

We have not appointed a data protection officer. We are not required to, and at our size it would be theatre. Email the address above and a person answers.

What we keep, why we keep it, and for how long

• Order data — name, delivery address, email address and what you bought. We need it to perform the contract you entered into when you ordered (Article 6(1)(b)). Dutch tax law then requires us to keep the record for seven years, which is a legal obligation (Article 6(1)(c)).
• Email list — your email address only, and only if you asked for it. That is consent (Article 6(1)(a)). Unsubscribe in one click; we delete you on unsubscribe.
• Correspondence — if you email us, we keep the thread so the next person to read it knows what was said. Legitimate interest in answering you properly (Article 6(1)(f)). Deleted after two years unless it relates to an order.
• Payment data — handled entirely by Shopify and its payment providers. We never see or store your card details.

We do not sell personal data, we do not share it with other brands, and we do not profile you. No decision affecting you is made automatically.

Who else touches it

Three companies process data on our instructions. Each is bound by a data processing agreement.

• Shopify — checkout, payment and order records.
• Klaviyo — the email list and the messages we send to it.
• Netlify — hosting of these pages. Server logs, including IP addresses, are kept briefly for security and availability.

Shopify, Klaviyo and Netlify are established in the United States. Transfers of personal data to them rest on the European Commission's Standard Contractual Clauses, and where applicable on the EU–US Data Privacy Framework. You can ask us for the details.

Cookies and tracking

These pages set no analytics cookies, no advertising pixels and no third-party trackers. Your cart lives in your own browser's local storage. Shopify sets the cookies it needs once you reach checkout. The full account is on the cookies page, and if that ever changes, that page changes before anything is set — not after.

Your rights

Under the GDPR you can ask us for a copy of what we hold about you, a correction, deletion where we are not legally required to keep it, a restriction on how we use it, your data in a portable file, or an objection to processing we base on legitimate interest. Where we rely on your consent, you can withdraw it at any time; that does not affect what we did before you withdrew it.

Email us and you get an answer within a month, usually the same week. It is free. If you are not satisfied, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or to the supervisory authority in the country where you live.

The Field Test

If you apply to The Field Test, we keep your name, address, email address, platform handles, your discount code and the turnover attributed to it, for as long as the agreement runs and for seven years after it ends, because Dutch tax law requires us to keep that record. We do not sell it, we do not share it with other creators, and we do not use it to advertise to you unless you have separately subscribed. You can ask for a copy or a correction at joep@origostandard.com.

Children

Our products are not aimed at children and we do not knowingly collect data from anyone under sixteen. If you believe we have, email us and we will delete it.

Changes

If this policy changes we update the date at the top. If a change materially affects you, we say so on the site rather than leaving you to notice.