Privacy policy

When you place an order, we collect identity, contact, delivery, order and invoice data. If you create an account, we securely store the data needed to sign you in. Mollie processes the payment data independently; we normally receive only the payment status, reference, amount and method.

We use your data to perform the agreement, manage your account, deliver your order, send order confirmations and invoices, provide support and meet legal obligations. Mollie independently processes payments; we disclose only the data needed to initiate and reconcile a payment.

We process personal data to perform the contract and to meet statutory accounting and invoicing duties. For security, abuse prevention and reliable service, we may rely on our legitimate interests after balancing them against your interests.

Data marked as required is needed to process your order, payment, delivery or account. Without it, we cannot provide that service.

We receive most data directly from you. For order handling, Mollie generally provides us with the payment status, reference, amount and payment method; we do not routinely receive full card or bank-account details.

We share only the data needed for the relevant task. Mollie receives the necessary order and payment data to process the payment. Providers of hosting, email, administration and security services may process personal data on our behalf where necessary. Legally authorised bodies receive data only where we are required to provide it.

If a service provider processes personal data outside the European Economic Area, this happens only under a valid transfer mechanism, such as an adequacy decision or approved standard contractual clauses, with supplementary measures where necessary. You may request further information through our contact address.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Mollie may carry out its own payment security and fraud-prevention checks under its privacy notice.

We use only necessary cookies and browser storage for sessions, logging in, language and country selection, and the shopping cart. We do not use advertising cookies or optional visitor tracking. You do not need to make a cookie choice.

We protect your data with appropriate technical and organisational measures. Passwords are stored only as Argon2id hashes and cannot be recovered as readable text. Access to personal data is limited to authorised people and systems that need it.

When you create or change a password, we use Pwned Passwords (Have I Been Pwned) to check whether it appears in known data breaches. Our server sends only the first five characters of a cryptographic fingerprint of the password. It does not send the password itself, the complete fingerprint, your email address or the reset link. The service does receive our server’s IP address and technical request information. Our server compares the results. If there is a match, we ask you to choose another password; if the service is unavailable, you can try again later.

We retain invoice and tax records for up to 7 years. We retain account, order, download and support data for as long as needed to provide the service, comply with legal obligations and establish, exercise or defend legal claims. Security data is retained no longer than needed for security and reliable service, taking account of the provider’s configured retention. The local cart remains until it is emptied, checkout is completed or browser data is cleared.

Where the GDPR provides these rights in your situation, you may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Send a request to info@numberchords.com. We normally respond within one month; if a statutory extension is needed, we will inform you within that first month.

You may lodge a complaint with the Dutch Data Protection Authority or with the supervisory authority in the EU or EEA country where you usually live, work or where the alleged infringement took place.

For questions about your personal data or this privacy policy, please contact us at info@numberchords.com. Complaints about how we handle your personal data can be submitted to the Dutch Data Protection Authority, but we hope to resolve them amicably with you.

Do you have questions about our privacy policy or would you like to view, modify or delete your data? Contact us at info@numberchords.com.

• NumberChords — Cijferakkoorden
• Dutch Chamber of Commerce (KVK) number: 97035017
• VAT ID: NL005245020B40
• Email: info@numberchords.com
• Full business details