Privacy Policy

WITH JEEJ

Privacy Policy & Cookie Policy

Effective date: 1 June 2026 | Jurisdiction: Netherlands / EU | GDPR & ePrivacy compliant | Version 1.0

This Privacy Policy explains how With Jeej collects, uses, and protects personal data in connection with the use of withjeej.com, including the member portal, shop, inner circle registration, and any related communications.

It also contains the Cookie Policy, explaining what cookies and tracking technologies are used and how preferences can be managed.

Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR), the Dutch UAVG, and the Telecommunications Act (Telecommunicatiewet) implementing the ePrivacy Directive.

01 DATA CONTROLLER

The data controller responsible for processing your personal data is:

With Jeej

Trading name of Jeroen van der Knaap

Vijverhofstraat 122, 3032 SP Rotterdam, The Netherlands

KvK-nummer: 61154113

Email: hello@withjeej.com

Website: withjeej.com

For all privacy-related inquiries, contact us at hello@withjeej.com. We aim to respond within five business days.

02 DATA WE COLLECT

DATA YOU PROVIDE DIRECTLY

We collect personal data you actively provide when you:

Register for the Inner Circle or member portal (name, email address, country)
Submit an artwork inquiry (name, email, message content)
Place an order in the shop (name, email, billing address, shipping address)
Contact us via the inquiry form or by email
Request a catalogue download (name, email)
Schedule a studio visit (name, email, preferred date)

DATA COLLECTED AUTOMATICALLY

When you visit withjeej.com, we or our service providers may automatically collect:

IP address and approximate location derived from it
Browser type, device type, and operating system
Pages visited, time on site, referral source, and click interactions
Session data via cookies and similar technologies (see Cookie Policy below)

DATA FROM THIRD PARTIES

We may receive data from third-party platforms in connection with advertising and analytics, including Meta Platforms (Instagram and Facebook) where you have interacted with our content or have been part of a custom or lookalike audience. This data is processed under separate terms between you and Meta, in addition to this Policy.

SPECIAL CATEGORIES OF DATA

We do not intentionally collect special categories of personal data (such as health data, racial or ethnic origin, political opinions, biometric data, or data concerning sexual orientation) and ask that you refrain from submitting such data through our forms or communications.

03 LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases under Article 6 GDPR:

Contract (Art. 6(1)(b)): To process and fulfil orders, respond to artwork inquiries, and manage member portal accounts.
Legitimate interest (Art. 6(1)(f)): To protect against fraud, maintain platform security, send service-related communications, and conduct aggregated analytics to improve the website.
Consent (Art. 6(1)(a)): To send marketing communications (Inner Circle emails, availability updates, event invitations) and to place non-essential cookies. Consent can be withdrawn at any time.
Legal obligation (Art. 6(1)(c)): To comply with applicable tax, accounting, and financial record-keeping obligations.

Withdrawing consent: Consent-based processing can be withdrawn at any time without affecting the lawfulness of prior processing. To unsubscribe from Inner Circle emails, use the unsubscribe link in any email or contact hello@withjeej.com. To withdraw cookie consent, use the cookie preference centre or adjust browser settings.

04 HOW WE USE YOUR DATA

We use the personal data we collect for the following purposes:

To manage accounts and provide access to the member portal and catalogue
To process and fulfil purchases, including order confirmation and shipping communication
To respond to artwork inquiries, studio visit requests, or collaboration requests
To send Inner Circle communications — studio updates, availability notifications, event invitations, and early access releases — when subscribed or consented
To send transactional and service-related emails necessary to fulfil a purchase or request
To serve targeted advertising on Meta platforms (Instagram), including custom audiences based on email lists and retargeting based on website visits, where applicable consent exists or legitimate interest applies
To analyse website usage in aggregate form for the purpose of improving the website and communications
To comply with legal obligations, including financial and tax records
To detect and prevent fraud or misuse of the platform

We do not use your data for automated decision-making that produces legal or similarly significant effects on you.

05 SHARING OF PERSONAL DATA

We do not sell your personal data. We share data only where necessary with the following categories of processors and recipients, each acting under appropriate data processing agreements:

Email marketing platform (Mailchimp / Intuit Inc.): Name and email for Inner Circle mailing list management. Data processed in the US under Standard Contractual Clauses.
E-commerce platform (Shopify Inc.): Order and customer data for shop transactions. Processed under Standard Contractual Clauses.
Payment processors (e.g. Stripe, PayPal): Billing and payment data required to complete transactions. These providers process payment data under their own privacy policies as independent controllers.
Shipping and logistics partners (e.g. DHL, UPS): Name and shipping address necessary to deliver physical orders.
Meta Platforms (Facebook/Instagram): Hashed email addresses and pixel data for custom audience targeting and advertising analytics, subject to Meta’s own data policies and applicable consent.
Analytics tools (e.g. Google Analytics): Pseudonymised usage data for website performance analysis, subject to applicable consent.
Financial administration (One Accountants): Invoice and transaction data shared for accounting and tax compliance purposes.

We may also disclose personal data when required by law, court order, or a competent authority.

06 RETENTION

We retain personal data for no longer than necessary, in accordance with applicable legal retention obligations:

Inner Circle subscriber data: Until you unsubscribe or request deletion. Removed within 30 days of request.
Order and customer data: Retained for 7 years from the transaction date, in compliance with Dutch accounting and tax law.
Artwork inquiry and contact form data: Retained for 2 years from the date of last contact.
Member portal account data: Retained for the duration of your active account, plus 12 months after account closure or last login.
Website analytics and log data: Retained in anonymised or aggregated form; identifiable session data retained for a maximum of 14 months.
Cookie consent records: Retained for 3 years to demonstrate compliance.

07 YOUR RIGHTS

Under the GDPR, you have the following rights. To exercise any of these rights, contact us at hello@withjeej.com. We will respond within one month. In complex cases we may extend by a further two months, in which case we will inform you.

Right of access

Request a copy of the personal data we hold about you and information on how we process it.

Right to rectification

Request correction of inaccurate or incomplete personal data.

Right to erasure

Request deletion of your personal data where there is no longer a lawful basis for processing. Certain legal retention obligations may limit this right.

Right to restriction

Request restriction of processing in specific circumstances, including while we verify a dispute about data accuracy.

Right to data portability

Where processing is based on consent or contract and carried out by automated means, receive your data in a structured, machine-readable format.

Right to object

Object to processing based on legitimate interest, including profiling for direct marketing. We will cease such processing unless we demonstrate compelling legitimate grounds.

Right to withdraw consent

Withdraw consent at any time without affecting the lawfulness of prior processing.

Right to lodge a complaint

Lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) if you believe we process your data unlawfully.

We may need to verify your identity before processing your request. No fee is charged unless requests are manifestly unfounded or excessive.

08 COOKIE POLICY

WHAT COOKIES ARE

Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as pixel tags, web beacons, and local storage. This Cookie Policy covers all such technologies collectively.

LEGAL REQUIREMENT FOR CONSENT

Under the Dutch Telecommunicatiewet (implementing the EU ePrivacy Directive), prior consent is required before placing any non-essential cookies. Strictly necessary cookies do not require consent.

We use a consent management platform (CMP) to obtain, record, and manage cookie preferences. Consent is recorded with a timestamp and version reference and stored for compliance purposes.

Cookie preferences can be reviewed and changed at any time by clicking the “Cookie Settings” link in the footer of this website, or by adjusting browser settings.

COOKIES WE USE

CATEGORY	NAME / PROVIDER	PURPOSE	DURATION	LEGAL BASIS
Strictly necessary	Session cookie (WordPress / Shopify)	Maintains logged-in session, shopping cart state, and security tokens. Essential for website and shop functionality.	Session	Not required
Strictly necessary	CSRF / security tokens	Protects against cross-site request forgery. Required for secure form submissions and transactions.	Session	Not required
Strictly necessary	Cookie consent record (CMP)	Stores your cookie preferences so they are respected across sessions.	12 months	Not required
Functional	Language / region preference	Remembers language or region preference to improve browsing experience.	12 months	Consent
Analytics	Google Analytics (_ga, _gid)	Measures traffic and behaviour in pseudonymised, aggregated form. IP anonymisation enabled.	Up to 14 months	Consent
Marketing	Meta Pixel (Facebook / Instagram) — ID: 583560074776670	Tracks website actions to enable retargeting on Instagram and Facebook and to build custom/lookalike audiences.	Up to 90 days	Consent
Marketing	Shopify analytics cookies	Tracks purchase events and cart behaviour for e-commerce attribution.	Up to 2 years	Consent

We do not use third-party advertising networks beyond Meta. We do not use cookies for cross-site tracking outside of the Meta Pixel as described above.

HOW TO MANAGE OR DELETE COOKIES

Cookie preference centre: Click “Cookie Settings” in the footer at any time to update preferences.
Browser settings: All major browsers allow blocking, restricting, or deleting cookies. Note that blocking strictly necessary cookies will prevent the website from functioning properly.
Meta opt-out: Opt out of interest-based advertising by Meta via the Meta Ad Preferences page (facebook.com/ads/preferences).
Google Analytics opt-out: Install the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).

09 INTERNATIONAL DATA TRANSFERS

Some service providers are based outside the EEA, including in the United States. Where personal data is transferred outside the EEA, appropriate safeguards are in place in accordance with Chapter V GDPR:

Mailchimp (Intuit Inc., USA): Data transferred under Standard Contractual Clauses.
Shopify Inc. (Canada/USA): Canada benefits from an adequacy decision. For US-based processing, SCCs apply.
Meta Platforms Inc. (USA): Data transferred under SCCs. Meta operates an EU-US Data Privacy Framework certification.
Google LLC (USA): Data transferred under SCCs. Google operates an EU-US Data Privacy Framework certification.

A copy of the relevant safeguards can be requested by contacting hello@withjeej.com.

10 SECURITY

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, access controls limited to authorised personnel, regular security updates, and contractual data security obligations with all processors.

In the event of a personal data breach likely to result in a risk to rights and freedoms, the Autoriteit Persoonsgegevens will be notified within 72 hours and, where required, affected individuals informed without undue delay.

11 CHILDREN

This website is not directed at children under the age of 16 and we do not knowingly collect personal data from individuals under 16 without verifiable parental consent as required under GDPR (Article 8) and the Dutch UAVG. If you believe we have inadvertently collected data from a person under 16, contact us at hello@withjeej.com and we will delete it promptly.

12 CHANGES TO THIS POLICY

This Privacy Policy and Cookie Policy may be updated periodically to reflect changes in data practices, legal requirements, or services. The effective date at the top of this document will be updated accordingly.

Where changes are material, Inner Circle subscribers will be notified by email and a prominent notice will be displayed on the website prior to the changes taking effect.

Previous versions of this Policy are available upon request.

13 CONTACT

For any questions, requests, or complaints regarding this Policy or the processing of your personal data:

With Jeej

Vijverhofstraat 122, 3032 SP Rotterdam, The Netherlands

Email: hello@withjeej.com

If not satisfied with our response, a complaint may be lodged with the Dutch supervisory authority:

Autoriteit Persoonsgegevens

Postbus 93374, 2509 AJ Den Haag

Website: autoriteitpersoonsgegevens.nl

Tel: +31 (0)70 888 85 00