Last updated: 15 September 2025
This Privacy Policy explains how Bokaja (“we”, “us”, “our”) handles personal data on this website and in connection with our digital products, newsletter, and contact forms.
1) Who we are (Controller)
- Controller: Bokaja
- Location: Netherlands
- Contact (privacy): info@bokaja.com
If you choose to purchase via external marketplaces (e.g., Etsy), those platforms act as independent controllers for that transaction. Please refer to their privacy notices.
2) What we collect
Depending on how you use the site, we may process:
- Usage data: IP address, device/browser type, pages viewed, referring URLs (for security, performance, and analytics).
- Account & orders: name, email, billing details, purchased items, download history (to fulfill your order and provide access).
- Payments: processed by our payment provider(s). We do not store full card details.
- Newsletter: email address and your consent/preferences.
- Support/contact: the information you include when you message us.
- Votes/polls (if enabled): your vote and, where applicable, an email to prevent spam/duplicate voting.
3) Why we use your data (lawful bases)
- Contract: to create your account, process orders, deliver downloads, and provide support.
- Consent: to send marketing emails and place non-essential cookies. You can withdraw consent at any time.
- Legal obligation: to keep tax and accounting records (generally retained for 7 years in the Netherlands).
- Legitimate interests: to keep our services secure, prevent abuse, measure performance, and improve products.
4) Cookies & analytics
We use essential cookies for core site functions (e.g., cart, checkout). With your consent, we may use analytics/marketing cookies to understand site usage and improve the experience. You can manage preferences via our cookie banner or your browser settings.
5) Sharing & recipients
We share data only as necessary to run the site:
- Service providers (processors): site hosting, security/CDN, payment processing, email delivery, analytics (where enabled).
- Marketplaces/embeds (independent controllers): if you follow links or interact with embedded content, those services handle data under their own policies.
We do not sell your personal data.
6) International transfers
Some providers may process data outside the EEA. Where applicable, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) provided by those services.
7) Retention
- Orders & invoices: retained as required by law (typically 7 years).
- Support messages: up to 24 months after last contact.
- Newsletter data: until you unsubscribe or withdraw consent.
- Analytics data: for the period needed to analyze trends and ensure security.
8) Your rights (EU/EEA)
You may have the right to request access, rectification, erasure, restriction, portability, and to object to certain processing, as well as the right to withdraw consent at any time (without affecting prior processing).
To exercise rights, contact info@bokaja.com. You can also lodge a complaint with your local supervisory authority.
9) Children
Our site and products are not intended for children under 16. We do not knowingly collect data from children.
10) Security
We use reasonable technical and organizational measures (HTTPS, access controls, least-privilege accounts, backups). No system is 100% secure.
11) Changes
We may update this Privacy Policy. Updates will be posted here with a new “Last updated” date.
12) Contact
Questions or requests about this policy or your data?
Email: info@bokaja.com