Privacy
Privacy Policy (EU/EEA/UK)
Last updated: 14/10/2026
1. Who we are. The Last Reformation shop is run by The Last Reformation, 6671 W. Indiantown Road, Jupiter Florida (“we”), the data controller for your data. Privacy contact: [shop@thelastreformation.com].
2. What we collect
- Orders: name, delivery and billing address, email, phone, order details. Card payments are handled by Stripe – Paypal; we don’t store full card numbers.
- Newsletter: email, first and last name, country, and the date and source of your consent.
- Messages to us: whatever you send.
- Website data: IP address, device and browser, pages viewed, via cookies and similar technologies (see section 9).
- Security: Google reCAPTCHA checks to stop spam on our forms.
3. Why we use it, and our legal basis
- To process and ship your order and handle returns (contract).
- To keep tax and accounting records (legal obligation).
- To send our newsletter (your consent, which you can withdraw at any time).
- To answer your questions (legitimate interest, or contract).
- To keep the website secure and prevent fraud (legitimate interest).
- To measure and improve the website, if you accept analytics cookies (consent).
4. Information that may reveal religious beliefs. Because of what we do, your subscription or purchases may suggest your religious beliefs. We only use such information with your explicit consent, which you give when you tick the box on our forms. You can withdraw it at any time.
5. Who we share it with. Only service providers who process data for us: [website hosting], [payment providers], [shipping and fulfilment partners / printers], EverReach (email platform), Google (reCAPTCHA, [analytics/ads]), and our accountant. We don’t sell your data.
6. Transfers outside the EEA. Some providers are in the US or elsewhere. We rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the provider participates) or Standard Contractual Clauses.
7. How long we keep it. Order and accounting data: [7 years, the usual period under Dutch tax law, so confirm]. Newsletter data: until you unsubscribe. Messages: [period].
8. Your rights. You can ask for access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. Write to [privacy email]. We reply within one month. You can also complain to your data protection authority; in the Netherlands, that’s the Autoriteit Persoonsgegevens.
9. Cookies. We use necessary cookies, and [analytics/advertising cookies] only if you accept them in the cookie banner. You can change your choice at any time via “Cookie settings.”
10. Children. Our site isn’t directed at children under 16.
11. Security and changes. We use reasonable technical and organisational measures. We’ll update this page when things change.
Privacy Notice (United States)
Last updated: 14/10/2026
1. Who we are. The Last reformation, 6671 W. Indiantown Road, Jupiter Florida Contact: shop@thelastreformation.com.
2. Information we collect
- Identifiers: name, email, phone, delivery and billing address, IP address.
- Commercial information: orders and purchases.
- Internet activity: pages viewed, device and browser, from cookies.
- What you send us: messages and form entries (for example newsletter country and name).
We collect this from you directly, from your browser, and from our service providers. Payment details go to [payment providers].
3. How we use it. To fulfil orders, provide support, send the newsletter, keep records, secure the website, and understand how it’s used.
4. Who we share it with. Service providers who work for us ([hosting], [payments], [shipping and fulfilment], EverReach, Google). [We do not sell your personal information.] [We do not share it for cross-context behavioral advertising.] Keep these two sentences only if they’re true, since cookies, pixels and Google Ads remarketing can count as “sharing.” Your cookie banner currently shows “Do not sell my personal information,” so these statements and the banner must agree.
5. Cookies and signals. Our cookie banner lets you choose. [We respond to Global Privacy Control signals.] Confirm this is configured before you say it.
6. Your state privacy rights. If you live in California or another state with a privacy law, you can ask us to tell you what we collect and share, access it, correct it, delete it, and opt out of sale, sharing, or targeted advertising. We won’t treat you differently for using these rights. Email [privacy email]. We’ll verify your identity and reply within 45 days. If we deny a request, you may appeal by replying within [x] days. An authorized agent can submit a request for you.
7. Email. Our emails include an unsubscribe link and our mailing address: [address].
8. Children. Our site isn’t directed to children under 13, and we don’t knowingly collect their information.
9. Retention, security, changes. We keep data only as long as needed. We use reasonable security measures. We’ll post changes here.
Before you publish
- Fill in every bracket with facts only you know: the legal entity, address, payment providers, hosting, shipping partners, retention periods. I didn’t invent any of these.
- Check every tool is real and listed. I saw Google reCAPTCHA and EverReach. Add any analytics or advertising tools you use.
- Religious beliefs: for a ministry, EU law treats this information as sensitive, and some US states do too. Ask a lawyer whether it changes your consent wording or notice.
- Decide the page layout. I’d publish one “Privacy Policy” page with both parts, because visitors are global, then link it from the footer, the newsletter form, and the checkout.
- Make the footer label a real link, and put the same link on your consent checkbox.
