Last updated: 9 September 2026.
This policy explains how Boutique Shop Modules ("we", "us"), a sole proprietorship (eenmanszaak) established in the Netherlands, handles personal data on boutiqueshop-modules.com and in our support and business operations. We are the data controller for that data.
Contact / controller: Boutique Shop Modules · Fluitekruidweide 35, 3448 JA Woerden, The Netherlands · KvK 42150526 · BTW NL005536013B06 · info@boutiqueshop-modules.com.
1. Scope — and what this policy does NOT cover
This policy covers our website, our purchases, and our support. It does not cover the data processed inside your own PrestaShop store by our modules once you install them — there, you are the data controller. How each module handles data is described in its own documentation/README.
2. What we collect, why, and our legal basis (GDPR Art. 6)
| Data | When | Purpose | Legal basis |
|---|---|---|---|
| Email, name | You email support or buy a module | Answer you; deliver licence/support | Contract / legitimate interest |
| Order + licence data (via Lemon Squeezy) | You buy a module | Provide the product, updates, support | Contract |
| Newsletter email (if offered) | You subscribe | Send updates you asked for | Consent |
We do not collect payment/card details — Lemon Squeezy (our merchant of record) processes all payments; we never see your card data.
3. Who we share data with (processors & partners)
- Lemon Squeezy — merchant of record: payment, invoicing, VAT, order + licence records.
- Namecheap — website hosting and our business email (info@boutiqueshop-modules.com).
- We use no analytics, no tracking and no advertising partners.
- Each acts as a processor or independent controller under its own terms. We do not sell your personal data.
About our AI Copywriter module: when you run it in your shop, it sends your product information to Anthropic (Claude) using your own API key, under Anthropic's terms. We do not receive or store that data.
4. International transfers
Some of the parties above (Lemon Squeezy, Namecheap, and Anthropic where you run our AI module with your own key) are based outside the EEA, principally in the United States. Those transfers rely on EU Standard Contractual Clauses or equivalent safeguards under GDPR Chapter V, as set out in each provider's own data-processing terms.
5. Retention
We keep support and business records only as long as necessary, and order/invoice records for the 7-year period Dutch tax law requires. We hold no analytics data, because we collect none.
6. Your rights (GDPR)
You may request access, rectification, erasure, restriction, portability, and object to processing. Email info@boutiqueshop-modules.com. You may also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
7. Visitors from the United States (CCPA/CPRA)
California residents have the right to know, delete, and correct personal information, and to opt out of "sale"/"sharing" — we do not sell or share personal information as defined there. To exercise these rights, contact us at the address above.
8. Cookies
See our Cookie Policy.
9. Children
The site and products are not directed at children under 16.
10. Changes
We may update this policy; the effective date above shows the latest version.