Privacy

STEPS FOOTSOCKS B.V., Oranjestraat 47, 5091 BK Middelbeers, Netherlands. Questions about privacy go to support@stepsfootsocks.quest. Full statutory details are on the legal information page.

We have not appointed a data protection officer; we are not required to. Privacy questions are handled by the same people who answer everything else.

We ask for a phone number because carriers sometimes need one. It is optional and an order goes through without it.

Consent to process your details for the order and consent to receive marketing email are asked for separately, in two different checkboxes. The marketing one is never pre-ticked and never required.

Every marketing email carries a one-click unsubscribe link, and unsubscribing takes effect immediately. There is no account to close and no confirmation step.

• The carrier that delivers your parcel, which needs your name and address.
• The payment services provider, which handles the card details we never see and confirms to us only that payment succeeded.
• Our hosting and database providers, which store the site and the order records under a processing agreement.
• The email provider that sends order confirmations and replies.
• Our accountant and, where legally required, the Dutch tax authority.

Each of these acts as a processor on our instructions under a data processing agreement, except where they are independent controllers by law, as a payment provider and a tax authority are. None of them is permitted to use your data for their own marketing.

Where data is transferred outside the European Economic Area, it is covered by an adequacy decision or by the European Commission’s standard contractual clauses.

Write to support@stepsfootsocks.quest and we will answer within one month. There is no charge, and we do not ask for identity documents unless the request is genuinely ambiguous.

Withdrawing consent stops the processing that relies on it from that point on; it does not undo processing that already happened lawfully. Order records we are required to keep for tax purposes cannot be deleted on request until that period expires, but we will restrict them so they are used for nothing else.

The site is served over HTTPS. Order data is stored on managed infrastructure with access limited to the people who fulfil and support orders. Card numbers are entered on the payment provider’s encrypted page and are never transmitted to, logged by or stored on our systems.

If a breach ever occurs that is likely to pose a risk to you, we notify the Autoriteit Persoonsgegevens within 72 hours and tell you directly where the law requires it.

We do not knowingly collect personal data from children under 13. Customers aged 13 to 17 need the consent of a parent or guardian to buy. If you believe a child has given us personal data, write to us and we will delete it.

The full detail is on the cookie page. In short: your basket is kept in your own browser’s local storage, there is no analytics, no advertising pixel and no third-party tracker on this site.