Updated: March 4, 2026

This Privacy Policy explains how we collect, use, store, and share your personal data when you visit or make a purchase from our website. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1 Data Controller

The data controller responsible for your personal data is:

  • Writing From Nowhere
  • Groningen, Netherlands
  • KVK Number: 91860660
  • Email: [email protected]

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at the email address above.

2 Data We Collect

a. Information You Provide Directly

  • Name and email address (e.g., for orders, account creation, or newsletter sign-up)
  • Shipping and billing addresses
  • Payment information (processed securely by our third-party payment provider; we do not store full card details)
  • Comments, reviews, or other content you submit on our website

b. Information Collected Automatically

  • When you visit our website, we and our third-party partners automatically collect:
  • IP address and approximate location
  • Browser type, device type, and operating system
  • Pages visited, time spent on pages, and referring URLs
  • Cookies and similar tracking technologies (see Section 4)

3 Legal Basis for Processing

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

  • Contract (Article 6(1)(b)): Processing your name, address, and payment information is necessary to fulfill your orders and provide our services.
  • Legitimate Interests (Article 6(1)(f)): We use analytics data to understand how our website is used and to improve its performance. We have assessed that this does not override your rights and freedoms.
  • Consent (Article 6(1)(a)): We rely on your consent for advertising cookies (via Mediavine) and for sending marketing emails. You may withdraw your consent at any time.
  • Legal Obligation (Article 6(1)(c)): We may process data where required to comply with applicable laws (e.g., tax and financial record-keeping obligations).

4 Cookies

Our website uses cookies and similar tracking technologies. We use the following categories of cookies:

  • Strictly Necessary: Essential for the website to function. These cannot be disabled.
  • Analytics (Google Analytics): Help us understand how visitors interact with our site. These are only set with your consent.
  • Advertising (Mediavine): Used to serve personalized advertisements. These are only set with your consent.

When you first visit our site, you will be asked to provide consent for non-essential cookies via our cookie banner. You can manage or withdraw your cookie preferences at any time through the cookie settings on our website or through your browser settings.

5 Third-Party Services and International Data Transfers

a. Google Analytics

We use Google Analytics (provided by Google LLC, USA) to analyze website traffic. Google Analytics may transfer and process data in the United States. Google participates in the EU-US Data Privacy Framework, which provides a lawful transfer mechanism under the GDPR.

You can opt out of Google Analytics tracking by installing the browser add-on at: https://tools.google.com/dlpage/gaoptout

b. Mediavine Advertising

We partner with Mediavine (USA) to display advertisements on our website. Mediavine and its advertising partners may use cookies and similar technologies to collect data about your visits to serve relevant ads. This may involve the transfer of data to the United States under appropriate safeguards.

To learn more or opt out, please visit Mediavine’s Privacy Policy at https://www.mediavine.com/privacy-policy/ or use the opt-out links below:

c. Payment Processors and Other Service Providers

We share your data with trusted third-party service providers (such as payment processors and shipping carriers) only to the extent necessary to fulfill your orders and operate our business. These providers are bound by data processing agreements and are not permitted to use your data for their own purposes.

6 How We Use Your Data

We use the personal data we collect to:

  • Process and fulfill your orders
  • Communicate with you about your orders, account, or inquiries
  • Send marketing emails or newsletters (where you have opted in)
  • Display personalized advertisements
  • Analyze and improve our website and user experience
  • Comply with legal and financial obligations
  • Detect and prevent fraud or misuse of our services

7 Data Retention

We retain your personal data for no longer than necessary for the purposes described in this policy:

  • Order and transaction data: 7 years (to comply with Dutch tax and financial recordkeeping obligations)
  • Account information: For the duration of your account, plus 2 years after your last interaction
  • Marketing data: Until you withdraw consent or unsubscribe
  • Analytics data: As configured in Google Analytics (default: 26 months)
  • Cookie consent records: 1 year

8 Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights:

  • Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete data.
  • Right to Erasure (Art. 17): You may request deletion of your personal data, subject to certain legal limitations.
  • Right to Restriction (Art. 18): You may request that we restrict processing of your data in certain circumstances.
  • Right to Data Portability (Art. 20): You may request a copy of data you provided to us in a structured, machine-readable format.
  • Right to Object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You will not be charged for making a request.

9 Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Autoriteit Persoonsgegevens
Website: https://www.autoriteitpersoonsgegevens.nl
Phone: +31 (0)88 1805 250

10 Children’s Privacy

Our website is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

11 Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. However, no online transmission or storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform you directly.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will indicate the effective date of the latest version at the top of this page. Where changes are material, we will notify you by email or a prominent notice on our website prior to the changes taking effect.

13 Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us: