Privacy Policy

Last updated: October 23, 2026

1. Who is responsible for your information?

Exploding Colors VOF, trading as Maybell Corven, is responsible for the personal information described in this policy.

Business address: Irisstraat 34, 3434Hn NIeuwegein, the Netherlands
Email: info@maybellcorven.com
Website: https://maybellcorven.com/
KVK number: 82557713

2. Information we process

Depending on how you use our website, we process:

• Contact information, such as your name and email address.
• Billing information and information needed to determine applicable taxes.
• Order details, purchased products, transaction references and payment status.
• Shipping details where you order physical goods.
• Messages, support requests and complaint correspondence.
• Technical information, such as IP addresses, browser information, security logs and website activity.
• Download records and records of your checkout or cookie choices, where recorded by our systems.

3. Why we use your information

Orders and customer support

We use information to process orders, arrange payment, supply downloads, deliver physical products where available and answer order-related questions.

Legal basis: taking steps at your request before entering a contract and performing our contract with you.

Accounting and legal obligations

We use and retain relevant records for accounting, tax, regulatory and other legal obligations.

Legal basis: compliance with legal obligations.

Security and legal claims

We use proportionate information to protect the website, investigate suspected misuse, prevent fraud and establish, exercise or defend legal claims.

Legal basis: our legitimate interests in operating a secure business and protecting our legal position, balanced against your rights.

General enquiries

We use your message and contact details to answer enquiries. The legal basis is taking pre-contractual steps where your enquiry concerns a prospective purchase, or our legitimate interest in responding to other correspondence.

Optional analytics and advertising

Google Analytics and Meta Pixel are under consideration. This statement does not mean that either service is active.

Before enabling either service, we will update this policy and our Cookie Policy with the actual processing, providers, retention periods and international transfer arrangements. Where consent is required, the service will remain disabled until you consent.

Optional newsletters and accounts

4. Who receives information?

We disclose information only where needed for the purposes described above, including to:

• Our hosting provider, Mijndomein, for website hosting and related services actually used.
• Mollie and the relevant payment providers for payment processing, verification and associated legal obligations.
• Technical service providers involved in running the shop, delivering transactional emails, storing files or maintaining security, where engaged.
• Accounting or professional advisers, where needed.
• Public authorities where disclosure is legally required.
• Production partners and carriers where needed to fulfil physical merchandise orders.

WordPress and WooCommerce are the software used for our shop. Additional plugins or hosted services may receive information depending on their configuration.

Provider details and privacy information:

• Mijndomein: Privacy Policy MijnDomein.
• Mollie: Privacy Policy Mollie.

Some providers process information on our instructions. Others, including payment providers for certain activities, determine their own processing purposes and have their own privacy responsibilities.

5. International transfers

[COMPLETE BEFORE PUBLICATION: identify which providers, if any, process personal information outside the European Economic Area.]

Where information is transferred outside the EEA, we use a lawful transfer mechanism where required, such as an applicable adequacy decision or appropriate contractual safeguards, together with supplementary measures where necessary.

Details of the actual destinations, safeguards and how to obtain a copy or further information are: [COMPLETE].

6. How long we keep information

We retain personal information only for as long as needed for the relevant purpose, taking account of legal obligations and legitimate claims.

• Accounting and tax records: generally seven years where Dutch retention rules require this. Records covered by applicable One Stop Shop VAT rules are retained for ten years. The statutory rules determine when the period starts.
• Enquiries and support correspondence: [COMPLETE: period or sufficiently specific criteria].
• Order fulfilment and download records beyond mandatory accounting records: [COMPLETE].
• Security and server logs: [COMPLETE].
• Checkout consent evidence: [COMPLETE: justified period or criteria].
• Cookie preferences and optional analytics data: as specified in our Cookie Policy.
• Backups: [COMPLETE: backup cycle and final deletion period].
• Account or newsletter information, if offered: [COMPLETE].

Where necessary, relevant information may be retained longer for a specific legal obligation or dispute. Other information is deleted or anonymised when no longer needed.

7. Your rights

Subject to the conditions in applicable data protection law, you may request access, correction, deletion, restriction of processing or portability of your personal information.

You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Send requests to info@maybellcorven.com. We may request information reasonably necessary to verify your identity. We normally respond within one month. If a lawful extension is needed, we will tell you within that month.

You may complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at https://autoriteitpersoonsgegevens.nl/, or to another competent supervisory authority.

8. Required and optional information

Information needed to process payment, deliver an order or comply with tax rules is necessary for those purposes. If you do not provide it, we may be unable to complete your purchase.

Optional marketing and cookie choices are voluntary.

9. Automated decisions

[COMPLETE: confirm whether we make any solely automated decisions producing legal or similarly significant effects. If none, state this. If any exist, describe the relevant logic, significance, consequences and safeguards.]

Payment providers may conduct their own fraud and compliance checks under their own privacy policies.

10. Cookies and security

Our Cookie Policy explains cookies and similar technologies and how to manage optional choices.

We apply appropriate technical and organisational measures to protect personal information. Access is limited according to operational need.

11. Changes

We update this policy when our processing changes. The date above identifies the latest version. Where required, we will provide additional notice of material changes.