✦ Plain language
Privacy Policy
This is the privacy policy for milas.gift. We've kept it short and plain because nobody enjoys reading legal text — least of all an eight-year-old.
Who runs this site
Mila's Gift is a small handmade-ribbon shop run by Mila and her parents. Mila makes the bows and tweaks on the website; her parents handle all the grown-up things — including this policy.
It's a family-run project officially based in the Netherlands: payments via a Dutch IBAN through bunq, the domain milas.gift registered with TransIP (NL), and hosting through Netlify. Dutch consumer law applies.
It is a hobby and learning project, not commercial child labour. Mila's involvement is voluntary, age-appropriate, and intended to teach her about craft, customer care, and earning. Any income is held for Mila to save or spend as she chooses.
Contact for any privacy question: info@milas.gift
What data we collect
When you place an order through the form on milas.gift, we collect:
- Your name
- Your email address
- Your phone number
- Your shipping address (street, postal code, city, country)
- If you're sending a gift to someone else: the recipient's name and address, plus the optional message you'd like on the card
- Any notes you add to the order
- The contents of your cart (which bows, how many)
We do not collect anything else. No tracking pixels, no advertising cookies, no analytics scripts.
Why we collect it
- Name + address: so we can ship the bow to the right place.
- Email + phone: so we can confirm your order, send a bunq.me payment link, and answer questions.
- Recipient details + message: so we can ship gifts directly to the recipient with a hand-written card.
Legal basis under GDPR: processing is necessary to perform the contract (your order) at your request.
Where your data lives
We use a small number of trusted services to run the shop:
- Netlify hosts the website and stores form submissions (USA-based, GDPR-compliant via Standard Contractual Clauses).
- Resend sends order-confirmation emails to you (USA-based, GDPR-compliant).
- bunq handles payments via the bunq.me link we send you (Netherlands).
- Mila and her parents receive order notifications by email.
Your data is never sold, shared with advertisers, or used for any purpose other than fulfilling your order.
How long we keep it
Order details are kept for up to 7 years in case of tax-record obligations under Dutch law, then deleted. You can request earlier deletion at any time (see "Your rights" below) and we'll honour it unless we're legally required to retain a record.
Cookies and local storage
We don't use tracking or advertising cookies. The shopping cart on milas.gift uses your browser's localStorage to remember what you've added between page reloads — this never leaves your device.
Your rights (GDPR)
You have the right to:
- See what data we hold about you
- Correct anything that's wrong
- Have your data deleted ("right to be forgotten")
- Receive a copy of your data in a portable format
- Object to or restrict processing
- Lodge a complaint with the Dutch Autoriteit Persoonsgegevens
To use any of these rights, just email info@milas.gift. We'll reply within a few days.
Children
Mila is 8 — but she doesn't run this site. Her parent does. We don't knowingly collect data from anyone under 16. If you're under 16 and want to order, please ask a parent to do it for you.
Changes to this policy
If we update this policy, the date at the top will change. For meaningful changes (e.g. a new third-party service), we'll mention it in your next order confirmation email.