Privacy and Cookie Policy
Who is responsible for your data
The controller is Cedar Planters Inc., 529 Great Lakes Boulevard, Suite 200, Oakville, Ontario L6L 6X9, Canada, info@cedarplanters.nl. We also trade as Earth Elevated, and several of the tools used to run this shop are built and operated by us under that name.
Our representative in the European Union under Article 27 GDPR is [NAME, ADDRESS, EMAIL]. You may contact either of us about anything in this policy.
What we collect, why, and on what basis
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Processing and delivering your order | Name, email, delivery and billing address, phone, order contents, payment confirmation | Performance of a contract (Art. 6(1)(b)) | Duration of the contract, then 7 years for tax records |
| Payment processing and fraud prevention | Payment details handled by our payment provider, transaction data, IP address | Contract; legitimate interests in preventing fraud (Art. 6(1)(f)) | 7 years, as part of our transaction records |
| Customer service | Correspondence, order history | Contract; legitimate interests (Art. 6(1)(f)) | 2 years after your last contact with us |
| Legal obligations — invoicing, VAT, product safety, accounting | Invoice and transaction data | Legal obligation (Art. 6(1)(c)) | 7 years, as required by Article 52 of the Dutch General Tax Act |
| Email marketing | Email address, name, engagement data | Consent (Art. 6(1)(a)); or the soft opt-in for our own similar products to existing customers | Until you unsubscribe. We then keep your address on a suppression list indefinitely, so that we do not contact you again. |
| Analytics and advertising, including profiling for personalised ads | Device and usage data, identifiers, browsing behaviour, purchase events | Consent (Art. 6(1)(a)), given through our cookie banner | See the cookie section below |
| Showing the shop in your country and currency | IP address, approximate location | Legitimate interests in showing you the right store (Art. 6(1)(f)) | Not stored beyond your visit |
| Reviews | Name, review content, order reference | Consent; legitimate interests | Until you ask us to remove it |
Who we share it with
Running the shop
- Shopify — the platform this shop runs on, and our order and customer database.
- Expandly — order management and fulfilment, together with our warehouse in Hoofddorp and our carriers, usually UPS or GLS, to deliver your order and handle returns.
- Shopify Payments, PayPal and Shop Pay — to take and secure payment. Shop Pay stores your details with Shopify so you can check out faster; PayPal processes under its own privacy notice.
- Zipify — post-purchase offers shown after you place an order.
- Spice Gems — detects your country from your IP address so we can show you the right store.
Customer service and reviews
- Kustomer — our customer service platform. Messages you send us, and your order history, are handled there.
- Loox — product reviews.
- Sunnyside Apps — helps us manage comments on our social media posts.
Marketing, analytics and advertising — only where you have consented
- Klaviyo — email marketing and on-site tracking.
- Elevar — measures which visits lead to purchases and passes that information to the advertising platforms below. Some of this happens on our servers rather than in your browser, but it only happens where you have given consent.
- Meta, Google and TikTok — to measure our advertising and show you relevant ads.
Our own tools
We build and run several tools ourselves under the Earth Elevated name, including our internal data warehouse, our content and translation tools, and checkout features. These are operated by us rather than by an outside supplier, and the data held in them is covered by this policy.
Others
Our accountants, advisers and fiscal representative, and public authorities where we are required to disclose.
Transfers outside the EEA
We are established in Canada, and several of the providers above process data in the United States and elsewhere. Where personal data leaves the EEA we rely on: the European Commission's adequacy decision for Canada in respect of commercial organisations subject to PIPEDA; the EU-US Data Privacy Framework where the recipient is certified; and otherwise the European Commission's Standard Contractual Clauses together with supplementary measures. You can request a copy of the safeguards from info@cedarplanters.nl.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out. You have an absolute right to object to direct marketing at any time.
To exercise any of these, email info@cedarplanters.nl. We respond within one month. We do not charge, and we do not treat you differently for asking.
If you are unhappy with how we handle your data you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the EU country where you live or work.
Automated decision-making
We do not make decisions producing legal or similarly significant effects about you by automated means. We do use profiling for advertising where you have consented; you can withdraw that consent at any time through the cookie settings.
Children
This shop is not intended for children. We do not knowingly collect data from anyone under 16.
Security and changes
We take appropriate technical and organisational measures to protect your data, and will notify you and the supervisory authority of a breach where the law requires it. If we change this policy we will update the date below and, where the change is significant, tell you directly.
Cookie policy
What we use
We place cookies and similar technologies on your device. Only strictly necessary cookies are placed automatically. Everything else — analytics, advertising and personalisation — is placed only after you have given consent through our cookie banner.
| Category | Examples | Purpose | Consent needed | Retention |
|---|---|---|---|---|
| Strictly necessary | Shopify session and cart, checkout, Shop Pay (shop.app), security and bot protection | Make the shop work and keep it secure | No | From the end of your visit up to 12 months |
| Preferences | Country, language and currency | Remember your settings | Yes | Up to 12 months |
| Analytics | Shopify analytics, Elevar | Understand how the shop is used and which visits lead to purchases | Yes | Up to 24 months |
| Marketing | Meta, Google Ads, TikTok, Klaviyo on-site tracking, and Elevar, which passes purchase events to those platforms | Measure campaigns and show relevant ads | Yes | Up to 13 months |
| Reviews | Loox | Display and collect product reviews | Yes | Up to 12 months |
| Customer service | Kustomer | Run the chat and support widget | Yes | Up to 12 months |
Managing your choices
You can change or withdraw your consent at any time via Cookie settings in the footer. Withdrawing is as easy as giving consent. You can also delete cookies through your browser, though this may stop parts of the shop working.
Placing non-essential cookies requires your consent under Article 11.7 of the Dutch Telecommunications Act and Article 5(3) of the ePrivacy Directive.
Last updated: 31 August 2026.