Who is responsible?
Warmpi is responsible for processing personal data through Warmpi.com. You can contact us via info@warmpi.com or through the contact details at the bottom of this page.
Privacy
Privacy policy
Warmpi treats personal data with care. This page explains which data we process, why we process it and which rights you have.Which data do we process?
When you place an order or contact us, we may process your name, email address, phone number, billing address, delivery address, order details, payment status, messages and technical data needed to keep the website secure.
Why do we use data?
We use data to process orders, handle payments through Stripe, deliver products, provide customer service, keep invoices and administration, prevent fraud, run the chat and keep the webshop working properly.
Legal bases
We mainly process data because it is needed for your order, for legal administration duties, for legitimate interests such as fraud prevention and security, or because you give consent, for example for analytics cookies.
Who do we share data with?
We only share data when needed, for example with Stripe for payments, DHL/DPD and other carriers for delivery, email services for order emails, hosting providers, Google Analytics if you consent, chat/support services and parties required for administration or legal obligations.
Analytics, cookies and chat
Warmpi.com uses Google Analytics only after consent to measure visitors, page views and conversions. The chat may process details you provide, such as name, email address, order number and your message, so we can answer your question.
How long do we keep data?
We do not keep data longer than needed. Administration data is usually kept for 7 years because of tax rules. Customer service, return and warranty data is kept as long as reasonably needed to help you or record rights and obligations.
Your rights
You can request access, correction, deletion, restriction or transfer of your personal data. Email info@warmpi.com. You may also file a complaint with the Dutch Data Protection Authority.
Google Ads API and Warmpi Marketplace Hub
After OAuth authorization, Warmpi Marketplace Hub uses the Google Ads API only for Warmpi's and LED-Tafellamp.nl's own advertising accounts. The Hub may read account, campaign, budget, location, ad, keyword, search-term, conversion and performance data and helps authorized Warmpi users manage campaigns and create reports. This data is not sold, is not shared for third-party advertising and is only available to authorized Warmpi staff and necessary technical service providers. We retain only what is required for business reporting, security and legal administration and delete or anonymize data when it is no longer needed. OAuth access can be revoked at any time in the Google account; access or deletion requests can be sent to info@warmpi.com.
Advertising measurement with Google Analytics
Google Analytics measures visits and purchases only with your consent. Only if you also choose advertising measurement do we share measurement data and ad-click identifiers with Google Ads to attribute purchases to ads. We do not send names, email addresses or postal addresses from your order, or enable personalised advertising. Necessary order processing and limited campaign data for our own reporting are separate. With advertising measurement consent, we store the Google click identifier and its campaign details in this browser. The link is valid for up to 30 days to attribute purchases on a later visit. Expired data is deleted on the next visit. Withdrawing that consent deletes these details.
Verified Warmpi product reviews
To invite you to review a purchased product, we use the order number and email address to verify the purchase and send the invitation. The personal invitation link contains a secure token; we retain only its cryptographic hash, not the raw token. To prevent abuse, the web function temporarily converts the client IP into a non-reversible technical key for rate limiting; the raw IP is not sent to the Hub. If you submit a review, your chosen display name, star rating and any title or review text become public after content-neutral moderation for matters such as spam, personal data or abusive content. Positive, neutral and critical reviews are treated equally. To support eligibility for Google Product Ratings, approved review data such as display name, stars, title or text, language, date, product identifier, and review and product URLs may be supplied to Google in a complete product review feed. Google processes that data under its own privacy policy; corrections and removals are passed on in a subsequent complete feed. The order number, email address and invitation token are not included in this feed. Every invitation provides a simple way to unsubscribe from further review invitations.
Google Customer Reviews
After a confirmed paid order, the confirmation page may show the voluntary Google Customer Reviews opt-in. To offer this choice and, if you opt in, the later survey, Google receives the Stripe session order number, your email address, delivery country, estimated delivery date and only the valid GTINs of purchased products. We do not share your name, street address or phone number for this purpose. Google Analytics consent is separate: Customer Reviews is not used for visitor analytics and survey participation remains voluntary. Google processes this data under its own privacy policy.
Meta advertising measurement
Only after your separate Meta consent, we store a random browser identifier and, where present, the genuine Facebook/Instagram click identifier on this device for up to 90 days. For a purchase, our server sends the amount, currency, payment time, a unique purchase code, hashed browser identifier, click identifier and browser type to Meta Platforms Ireland to measure and improve advertising. We do not send your order's name, email address, postal address or IP address. Google consent does not cover Meta. You can separately disable Meta in Cookie settings; local Meta identifiers are then deleted and later checkouts carry no Meta permission. Your choice at checkout governs that purchase. Meta may process data outside the EEA under its privacy policy.
ChatGPT advertising measurement (OpenAI)
Only after your separate OpenAI consent do we retain an existing ChatGPT click identifier on this device for up to 30 days. We retain your choice for up to 180 days. For a purchase confirmed by our payment provider after that consent, we send the amount, currency, an opaque unique measurement code and the click identifier to OpenAI only when a valid click identifier is present. The measurement code contains no readable order or session number. The direct browser connection also reveals your IP address and browser type to OpenAI; the referrer is limited to the website domain. We do not send names, email addresses, postal addresses or form contents. No automatic form-matching script is loaded. OpenAI may use measurement data to provide, measure and improve advertising and services under its terms and privacy policy, including outside the EEA. Google and Meta choices do not grant OpenAI permission. You can disable OpenAI separately in Cookie settings; local click and measurement codes are removed and new measurement requests stop. Past or denied purchases are not replayed. Blocked requests or browser restrictions can cause missing measurements.