Privacy and cookie statement

Salome Publish B.V., trading as Heritage Prints, Redactiestraat 13, 1321 NL Almere, the Netherlands, Chamber of Commerce 94586462, is responsible for the processing of your personal data as described in this statement (the “controller” under the General Data Protection Regulation, the GDPR).

For questions about your data, write to info@heritage-prints.com or to the address above.

When you order: your name, delivery address, email address, your phone number if you give it (only for the courier), your billing address if it differs, the prints you order and the amounts paid, and the payment method and its status. We never receive your card details. We use these details to make, ship and deliver your order, to keep you informed about it, and to handle returns and complaints. The legal basis is the contract with you.

For our accounts: the details of your order and invoice, because Dutch tax law requires us to keep them (a legal obligation).

When you write to us or use one of our forms (contact, a quote for Custom coloring, a complete set or your own collection, the Trade program): your name, email address, country, your message and the details you give us, such as your company and website. We use them to answer you and to prepare a quote or offer. The legal basis is taking steps at your request before a contract, or our legitimate interest in answering your questions.

When you sign up for our letter: your email address, when and where you signed up and confirmed it, the text you agreed to, your personal welcome code and whether you have used it. We use these to send you our letter, with new prints, the stories behind the originals and the occasional offer. We only write to you after you have confirmed your address with the link in our first email. The legal basis is your consent, which you can withdraw at any time with the unsubscribe link in every email or by writing to us.

When you visit our website: Cloudflare, which hosts and protects our website, processes technical data such as your IP address, your browser and the pages you request, to deliver the pages and to protect the website against attacks and misuse. The legal basis is our legitimate interest in a secure website. We do not use these data to follow you or to build a profile of you. We also keep our own visitor statistics, without your IP address; see Cookies and storage in your browser.

You do not need an account: you check out as a guest.

We do not use advertising or tracking cookies, and no cookies from social media or other companies. That is why you do not see a cookie banner.

To make the shop work, your browser stores a few things itself (local storage): your cart and discount code, whether you see prices in dollars or euros, the plates you choose for your own collection, a note that the thank-you page of your order has been shown, and which notices you have already seen (such as the invitation to our letter), so that we do not show them again. These stay on your device and only reach us when you place an order or send a request. You can delete them at any time in your browser settings.

We also keep our own visitor statistics, to see how our website is used and to improve it. For this your browser stores a random visitor number for 13 months and a visit number for 30 minutes. With these we count, for example, how many people visit us, which pages and prints they look at, what they search for on our website, which website or search engine they came from (only its name), their country, region and city (which Cloudflare derives from the connection; we do not keep the address itself), how quickly our pages load for them, and whether they use a phone, tablet or computer. When a visit ends in an order, we note that and the amount, but not your name or any other details. We do not store your IP address or your browser details, we do not build a profile of you, and we do not share these statistics with anyone: they stay in our own database at Cloudflare. If your browser asks websites not to track you (Global Privacy Control or Do Not Track), we count your visit without a visitor number. Under Dutch law, statistics like these, which have little or no effect on your privacy, do not need your consent; the legal basis is our legitimate interest in a website that works well.

Cloudflare may place a strictly necessary security cookie to tell people from automated traffic. Our staff use a login cookie for our management system; visitors do not.

The film on The making of comes from YouTube. It loads only when you click play, in YouTube’s privacy-enhanced mode. From that moment Google, which owns YouTube, receives data such as your IP address and may place cookies; see Google’s privacy policy. Instagram is only a link: we do not embed a feed.

Only those who need your data to do their work for us:

• the carrier that delivers your parcel: your name, delivery address, and your phone number and email address where needed for the delivery;
• Mollie B.V. in Amsterdam, our payment provider. For its own legal obligations, such as preventing fraud and money laundering, Mollie is itself responsible. If you pay with PayPal or a card, PayPal and the card issuers also process your payment under their own responsibility;
• Cloudflare, which hosts our website, database and images and sends our emails;
• the provider of our email inbox, for the messages you send us;
• our accountant, for our accounts and tax returns;
• authorities, when the law requires us to provide data.

Where they process data on our behalf, we have agreed with them that they protect your data and use it only for us. We never sell your data, and we do not share it for marketing.

Cloudflare is an American company and may process data outside the European Economic Area. These transfers are covered by the EU-US Data Privacy Framework, for which Cloudflare is certified, and by the standard contractual clauses of the European Commission.

If we deliver your order outside Europe, your delivery details necessarily go to the carrier and the customs authorities of the destination country, because that is needed to deliver your order.

• Orders and invoices: 7 years, because Dutch tax law requires this.
• Messages and requests that do not lead to an order: up to 2 years after our last contact.
• Applications and correspondence for the Trade program: for as long as you are a trade customer, and up to 2 years after that.
• Your email address for our letter: until you unsubscribe or ask us to delete it. An address that is never confirmed is deleted after 30 days.
• Our visitor statistics: 13 months, after which they are deleted automatically.
• What your browser stores: until you delete it.
• Technical data at Cloudflare: for a short period, to secure the website.

Our website uses an encrypted connection (HTTPS). Only authorised staff can open our management system, each with a personal account. Your payment details never reach us, and we limit who can see your data to the people who need it for their work.

You have the right to see the data we have about you, to have it corrected or deleted, to restrict or object to its use, and to receive it in a form you can pass on (data portability). Write to info@heritage-prints.com. We reply within one month, and may ask you to confirm who you are. Data that the law requires us to keep, such as invoices, we can only delete once that period has ended.

If you think we do not handle your data properly, please tell us first. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the data protection authority in the country where you live.

We do not make decisions about you by automated means, and we do not build profiles. Our website is not intended for children under 16.

We change this statement when our way of working changes. The version on this page always applies. This version is dated 9 November 2026.