This page explains what personal data Pepsup.eu collects, why we collect it, who else sees it, and what you can do about it. It covers everything on this website.
Pepsup.eu, Getsewoudweg, 2151 MS Nieuw-Vennep, Netherlands, is the controller for the data described here. For any question or request about your data, email [email protected]. We answer within 30 days.
| Order details | Name, email, delivery address, what you ordered, and the payment status. We need this to perform our contract with you when you place an order. |
|---|---|
| Invoice records | The same details, kept as part of our bookkeeping. Dutch tax law requires this. |
| Marketing email | Your email address, only if you tick the box at checkout or sign up. Based on your consent, which you can withdraw at any time. |
| Abandoned baskets | If you enter your email at checkout but do not finish, we may send you one reminder. Based on our legitimate interest in recovering the sale. You can object at any time, and every message has an unsubscribe link. |
| Website analytics | How pages are used, plus session recordings that capture clicks, scrolling, and mouse movement. See the section below. |
| Server logs | IP address and request details, kept briefly to keep the site secure and working. |
We ask for nothing beyond this. We never ask what you intend to do with a product, and we do not build profiles about you.
We work with a small number of specialist providers. They act on our instructions and may not use your data for their own purposes.
Stripe, Resend, Google, and Microsoft are established in or transfer data to the United States. Those transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework and on standard contractual clauses.
We want to be clear about this part, since it goes furthest in how we use data. Google Analytics 4 records which pages are visited and how people arrive. Microsoft Clarity also records anonymised sessions: cursor movement, clicks, and how far a page is scrolled. Both set cookies, but only after you accept them. By default, analytics consent is denied and Microsoft Clarity is not loaded at all.
You choose in the cookie banner: "Accept" turns them on, "Essential only" keeps them off. You can change your choice at any time via the "Cookie settings" link in the footer, and you can always email us to ask that any recording linked to you is deleted.
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it to another provider, or stop processing it. Where we rely on your consent, you can withdraw it at any time, which does not affect anything done before that. Email [email protected]. We do not charge for this, and we do not require a special form.
Deleting an order record is the one request we may have to refuse in part, because tax law obliges us to keep invoices for 7 years. In that case, we remove everything not covered by that obligation.
Tell us first. Most things are quicker to fix directly. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the EU country where you live.
The site runs over an encrypted connection, payment details never touch our servers, and access to the order database is limited to the people who need it. No system is perfect. If a breach ever affects your data, we will notify you and the regulator as the law requires.
Last updated 6 August 2026.