9.5/10 (500+ reviews)
Cart
Empty cart
There are no products in your cart yet.

Privacy Statement – J.H. Machining V.O.F.

Last updated: 14-8-2026

J.H. Machining V.O.F. attaches great importance to the protection of personal data. This Privacy Statement explains which personal data we collect, why we process it, with whom we share it and what rights you have.

This Privacy Statement applies when you visit our website, place an order or request a quotation, provide files, contact us or otherwise use our services.

1. Who is responsible for your personal data?

The controller responsible for the processing described in this Privacy Statement is:

J.H. Machining V.O.F.
Trading name: JH Machining
Rouaanstraat 21-F
9723 CB Groningen
The Netherlands

Dutch Chamber of Commerce number: 93516967
VAT number: NL866434355B01
Email: info@jhmachining.com
Telephone: +31 (0)85 080 5901

JH Machining has not appointed a Data Protection Officer. If you have any questions or requests concerning personal data, please contact us at info@jhmachining.com.

2. Which personal data do we process?

The personal data we process depends on how you use our website and services.

2.1 Order and customer details

When you place an order, we may process the following data:

  • your first name and surname;
  • company name;
  • billing and delivery address;
  • country;
  • email address;
  • telephone number;
  • VAT number;
  • products ordered and selected product options;
  • order number, order date and order status;
  • comments included with your order;
  • correspondence concerning your order;
  • information concerning delivery, returns, warranties and complaints.

It is not possible to create a customer account. All orders are placed as a guest.

2.2 Logos, designs and production files

To enable us to produce a personalised product, you may provide files and information including:

  • logos;
  • names and initials;
  • signatures;
  • drawings and illustrations;
  • photographs;
  • PDF, Word and design files;
  • instructions and comments concerning the desired design.

A business logo is not necessarily personal data. However, a file may contain personal data, for example where it includes a name, signature, portrait or personal maker’s mark.

We process these files solely to assess, prepare, produce and, where applicable, reproduce the product ordered, unless another use has been agreed with you.

If you provide files containing the personal data of another person, you are responsible for ensuring that you are lawfully entitled to provide that data to us and to have it processed by us.

2.3 Contact and communication details

When you contact us through our contact form, by email, telephone or WhatsApp Business, we may process:

  • your name;
  • company name;
  • email address;
  • telephone number;
  • the contents of your message;
  • files sent with your message;
  • the date and time of the communication;
  • any other information you choose to provide during the communication.

Messages submitted through our contact form are delivered to our business Outlook environment.

2.4 Payment and invoice details

When you make a payment, we process information such as:

  • the selected payment method;
  • the amount payable and the amount paid;
  • payment status;
  • transaction number or payment reference;
  • invoice details;
  • information concerning refunds and failed payments.

Online payments are processed through PAY. Depending on the payment method selected, personal data may also be processed by parties such as PayPal, Klarna, banks and card schemes.

JH Machining does not generally receive the full payment card or bank details you enter with a payment provider. We receive only the information necessary to establish whether payment has been completed and to process the order administratively.

We use Exact for invoicing and financial administration. Where payment by invoice is offered, data may be used to assess the payment and, where applicable, the customer’s creditworthiness. If a separate external assessment or automated decision is involved, the customer will be informed before the assessment takes place.

2.5 Delivery details

To dispatch and deliver orders, we may process:

  • the recipient’s name or company name;
  • delivery address;
  • email address;
  • telephone number;
  • order and parcel numbers;
  • delivery-status information.

We use Innosend to process and manage shipments. Depending on the destination, an order may be delivered by PostNL, DHL or GLS.

2.6 Reviews

Following an order, we may provide the following data to Feedback Company so that it can send you an invitation to leave a review:

  • your name;
  • email address;
  • order number;
  • order date.

Leaving a review is voluntary. You are not required to respond to a review invitation.

If you leave a review, Feedback Company processes the information you provide. Depending on the choices you make, your review may be publicly visible.

2.7 Website, device and cookie data

When you visit our website, we and our service providers may automatically collect information including:

  • IP address;
  • cookie and advertising identifiers;
  • browser type and browser settings;
  • device type and operating system;
  • screen resolution;
  • approximate location based on your IP address;
  • pages visited;
  • products viewed;
  • search queries and click behaviour;
  • the time and duration of your visit;
  • products added to your shopping basket;
  • steps completed during the ordering process;
  • purchase and conversion information;
  • interactions with pages, forms and embedded videos;
  • session information, mouse movements, scrolling behaviour and technical error information.

We process data through non-essential analytics, advertising and tracking technologies only after you have given your consent through our cookie settings.

We use services including Google Analytics 4, Google Tag Manager, Google Ads, Meta Pixel, Microsoft Ads, Microsoft Clarity, Hotjar, Contentsquare, Pinterest, ClickCease, ProfitMetrics and embedded YouTube videos. Cookiebot is used to record your cookie preferences and to block non-essential technologies until you have given your consent.

Further information about individual cookies, providers, purposes and lifetimes is available in our Cookie Statement and through the cookie settings on our website.

3. How do we obtain personal data?

We obtain personal data:

  • directly from you, for example when you place an order, upload a file, request a quotation, write a review or contact us;
  • automatically when you use our website, insofar as this is necessary or you have given your consent;
  • from payment providers, delivery companies and other service providers where this is necessary to process your order;
  • from business contacts or organisations on whose behalf you contact us or place an order.

Where we do not obtain personal data directly from you, we use it only for the purpose for which it was provided to us or where another valid legal basis applies.

4. For what purposes and on which legal bases do we process personal data?

We process personal data only where there is a valid legal basis for doing so.

4.1 Performance of a contract

We process personal data where this is necessary to:

  • assess an order or request for a quotation;
  • enter into a contract with you;
  • check a design or prepare it for production;
  • produce a personalised product;
  • process payments and invoices;
  • dispatch an order;
  • communicate with you about the performance of your order;
  • deal with returns, complaints and warranty requests.

If you contact us before placing an order, we may process your data in order to take steps at your request before entering into a contract.

4.2 Compliance with a legal obligation

We process and retain certain personal data in order to comply with legal obligations, including tax and accounting retention requirements.

4.3 Legitimate interests

We may process personal data where this is necessary for a legitimate business interest and your interests or fundamental rights do not override that interest.

Our legitimate interests include:

  • responding to enquiries and maintaining business communications;
  • providing customer service and after-sales support;
  • retaining production files to enable repeat orders, repairs and replacement products;
  • inviting customers to review their experience;
  • securing our website and systems;
  • preventing and investigating fraud, misuse and invalid advertising clicks;
  • establishing, exercising or defending legal claims;
  • improving our internal business operations.

Where we rely on a legitimate interest, we balance our interest against the possible impact on your privacy.

4.4 Consent

We request your consent for activities including:

  • non-essential analytics cookies;
  • session analysis and similar analytics technologies;
  • advertising cookies and pixels;
  • conversion measurement;
  • dynamic remarketing and personalised advertising;
  • loading embedded content that may transmit data to external providers.

You can withdraw or change your consent at any time through the cookie settings on our website. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Which data must you provide?

If you wish to place an order, you must provide the information necessary to enter into and perform the contract. This includes your name, contact details, billing and delivery details, payment information and the files or instructions required to produce the product ordered.

If you do not provide this information, we may be unable to accept, produce, invoice or deliver your order.

Providing data for non-essential cookies, analytics, advertising measurement and reviews is not mandatory. If you do not consent to these technologies or do not leave a review, you can continue to use our website and ordering process. Some external or embedded functions, such as a YouTube video, may not load.

6. How long do we retain personal data?

We do not retain personal data for longer than is necessary for the purpose for which it was collected, unless we are required to retain it for longer to comply with a legal obligation or deal with a legal dispute.

As a rule, we apply the following retention periods:

  • order, payment and invoice data: seven years after the end of the financial year to which the data relates;
  • logos, designs and production files: ten years after the most recent order for which the relevant file or design was used;
  • general emails, contact-form messages and WhatsApp conversations: two years after the most recent substantive communication;
  • quotations that do not result in an order: two years after the most recent substantive communication;
  • complaints, disputes and legal files: up to five years after final resolution, unless longer retention is necessary for ongoing proceedings or to comply with a legal obligation;
  • completed payment details: seven years as part of our financial records;
  • failed or abandoned payment details: no more than one year, unless longer retention is necessary for a fraud investigation, dispute or legal obligation;
  • data provided to Feedback Company for a review invitation: only for the purpose of sending and processing the review invitation and in accordance with our arrangements with Feedback Company;
  • cookie preferences: for as long as necessary to remember your preferences and demonstrate that consent was requested;
  • analytics and advertising data: in accordance with the retention periods stated in our Cookie Statement and the settings of the relevant service.

Where data is subject to more than one retention period, the longest applicable period will apply. At the end of the retention period, we delete or anonymise the personal data unless continued retention is permitted or required by law.

You may request earlier deletion of your personal data. We will then assess whether the data can be deleted or whether we must continue to retain it because of a contract, legal obligation or legitimate interest.

7. With whom do we share personal data?

We do not sell personal data to third parties. We disclose personal data only where this is necessary to provide our services, where you have given your consent or where we are legally required to do so.

Depending on the services you use, we may disclose personal data to the following categories of recipients.

7.1 Payment providers and financial service providers

To process payments, we provide the necessary order, contact and transaction details to PAY. Depending on the payment method selected, data may also be processed by:

  • PayPal;
  • Klarna;
  • the payer’s bank;
  • card schemes such as Visa, Mastercard and American Express;
  • the providers of iDEAL/Wero and Bancontact.

These parties may act as independent controllers for certain parts of the payment process. For example, they may process personal data in order to execute a payment, prevent fraud, comply with statutory identification requirements or assess a customer’s creditworthiness. Their own privacy statements also apply to these processing activities.

7.2 Administration and payment by invoice

We use Exact for our financial administration, invoicing and support with payment by invoice. Information required for our accounts and any credit assessment may be processed in Exact.

Our accounts are also managed by Gremmer Administratie- en Belastingadviseur. This firm may access order, invoice, payment and company data in order to perform accounting, tax and advisory services.

7.3 Dispatch and delivery

We provide the necessary delivery and contact details to Innosend and, depending on the selected or available delivery service, to PostNL, DHL or GLS.

These parties use the data to create shipping labels, transport parcels, provide delivery updates and deal with delivery problems.

7.4 Review invitations

Following an order, we provide your name, email address, order number and order date to Feedback Company so that it can send you a review invitation.

Feedback Company processes this data to send and administer the invitation. If you subsequently publish a review, Feedback Company also determines how the information provided with the review is processed and published.

7.5 Website management, hosting and business storage

Our website is technically managed or supported by Beyond Code and hosted using infrastructure provided by DigitalOcean, LLC. These parties may have access to data processed through our website for hosting, maintenance, security, troubleshooting and backup purposes.

We use Microsoft Outlook for business email and Microsoft OneDrive for cloud storage. Customer communications, files sent to us, logos, designs and other business documents may therefore be stored in Microsoft’s environment.

7.6 Analytics, advertising and website optimisation

Where you have given your consent, website, device, cookie, purchase and interaction data may be disclosed to or processed by:

  • Google, for Google Analytics 4, Google Tag Manager, Google Ads and YouTube;
  • Meta, for Meta Pixel and WhatsApp Business;
  • Microsoft, for Microsoft Ads and Microsoft Clarity;
  • Hotjar;
  • Contentsquare;
  • Pinterest;
  • ClickCease;
  • ProfitMetrics.

These services are used for website analytics, session analysis, conversion measurement, advertising optimisation, remarketing, revenue and profit measurement and the prevention of invalid or fraudulent advertising clicks.

Some providers may combine the data received with information obtained through other websites, apps or services. Where a provider processes personal data for its own purposes, that provider is an independent controller in respect of that processing. Further information is available in the relevant provider’s privacy statement and in our Cookie Statement.

7.7 Public authorities and professional advisers

We may disclose personal data to public authorities, regulatory bodies, bailiffs, legal advisers, insurers or other professional service providers where:

  • we are legally required to do so;
  • this is necessary for an investigation into fraud or misuse;
  • this is necessary to protect our rights or those of another person;
  • this is necessary to establish, exercise or defend a legal claim.

7.8 Data processing agreements

Where a service provider processes personal data solely on behalf of and in accordance with the instructions of JH Machining, we enter into a data processing agreement or data protection agreement where required.

The service provider may then process the data only for the agreed activities, unless it is legally required to act otherwise.

8. Is personal data processed outside the EEA?

Where reasonably possible, we seek to have personal data processed within the European Economic Area. However, some of our technical, cloud, payment, analytics and advertising service providers form part of an international organisation or are based in the United States or another country outside the European Economic Area.

As a result, personal data may be stored, remotely accessed or otherwise processed outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, we ensure that a valid transfer mechanism is in place. Depending on the recipient, a transfer may be based on:

  • an adequacy decision adopted by the European Commission;
  • the recipient’s certification under the EU–US Data Privacy Framework;
  • Standard Contractual Clauses approved by the European Commission;
  • supplementary technical and organisational safeguards;
  • another transfer mechanism permitted by law.

If a US recipient is not, or is no longer, validly certified under the EU–US Data Privacy Framework, we will, where possible, base the transfer on Standard Contractual Clauses and supplementary safeguards.

You can contact us at info@jhmachining.com if you would like further information about the safeguards used for a particular transfer or wish to obtain an available copy of them.

9. Cookies and similar technologies

Our website uses cookies and similar technologies, including pixels, tags, scripts, local storage and server-side measurement.

9.1 Essential technologies

Essential cookies and technologies are required for the website and ordering process to function correctly and securely. They may be used to:

  • remember the contents of your shopping basket;
  • enable pages and forms to work correctly;
  • remember your language preference;
  • support website security;
  • store your cookie preferences;
  • make payments and orders technically possible.

We do not request consent for strictly essential cookies.

9.2 Preference cookies

Preference cookies may be used to remember choices and settings that are not strictly necessary but make the website easier to use. We use these cookies only where consent is required and you have given that consent.

9.3 Analytics cookies

Analytics cookies and similar technologies allow us to measure how visitors use our website. For example, they may show us which pages are visited, how long a visit lasts, where visitors leave the website and which technical errors occur.

Where analytics technologies process personal data and no legal exemption applies, they are activated only after you have given your consent.

9.4 Marketing and advertising cookies

Marketing cookies and pixels are used for purposes including:

  • conversion measurement;
  • measuring advertising performance;
  • dynamic remarketing;
  • creating audiences;
  • displaying or optimising personalised advertisements;
  • measuring revenue and profit by advertisement or campaign;
  • identifying and preventing invalid advertising clicks.

These technologies are activated only after you have given your consent.

9.5 Session recording and website optimisation

Following your consent, services such as Hotjar, Microsoft Clarity and Contentsquare may allow us to analyse interactions with the website. This may include recording mouse movements, clicks, scrolling behaviour, page changes and technical events.

Where possible, we configure these services so that sensitive input fields and directly identifying information are not visible in session recordings. Please do not enter sensitive personal data in free-text fields unless this is necessary for your order or enquiry.

9.6 Embedded content

Pages may contain embedded third-party content, such as YouTube videos. When you activate this content, the external provider may receive information about your device and website visit.

Embedded content for which consent is required is blocked until you accept the relevant cookie category.

9.7 Changing your cookie preferences

We use Cookiebot to record your cookie preferences and block non-essential technologies until you have given your consent.

You may withdraw your consent or change your preferences at any time through the cookie settings on our website. Refusing or withdrawing consent does not prevent you from placing an order, although certain videos or other external functions may not work.

An up-to-date overview of the cookies used, their providers, purposes and lifetimes is available in our separate Cookie Statement.

10. How do we protect personal data?

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised alteration, disclosure and other unlawful use.

Where appropriate to the relevant processing, these measures include:

  • secure connections for the website and data transfers;
  • access restrictions for systems and files;
  • individual user accounts and access rights;
  • security and maintenance of the website and the systems we use;
  • restricting access to employees and service providers who need the data for their work;
  • confidentiality and data-protection arrangements with service providers;
  • secure payment processing through specialised payment providers;
  • procedures for backups, recovery and the handling of security incidents;
  • periodic reviews of the systems used and access permissions.

Although we take appropriate measures, no electronic storage or data-transfer method can guarantee complete security.

If a personal data breach occurs, we assess whether it must be reported to the Dutch Data Protection Authority and the individuals concerned. Where affected individuals must be notified, we will do so without undue delay.

11. What data protection rights do you have?

Depending on the circumstances, you have the following rights.

11.1 Right of access

You may ask whether we process personal data relating to you and, if so, request access to and a copy of that data.

11.2 Right to rectification

You may ask us to correct inaccurate personal data or complete incomplete personal data.

11.3 Right to erasure

You may ask us to erase personal data where it is no longer necessary, is being processed unlawfully or another statutory ground for erasure applies.

The right to erasure is not absolute. For example, we may be required to retain data because of a tax retention requirement, an ongoing contract or a legal claim.

11.4 Right to restriction of processing

In certain circumstances, you may ask us to restrict the processing of your personal data temporarily, for example where you dispute the accuracy of the data or have objected to the processing.

11.5 Right to data portability

Where we process data by automated means on the basis of your consent or a contract, you may ask to receive the data you have provided to us in a structured, commonly used and machine-readable format. Where technically feasible, you may also ask us to transfer the data directly to another organisation.

11.6 Right to object

You may object to processing based on our legitimate interests. We will then stop the processing unless we have compelling legitimate grounds to continue or require the data for a legal claim.

You may object to the use of your personal data for direct marketing at any time. We will then stop using it for that purpose.

11.7 Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time. For cookies and similar technologies, you can do so through the cookie settings.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

11.8 Automated decision-making

In certain circumstances, you have the right not to be subject to a decision based solely on automated processing where that decision produces legal effects concerning you or similarly significantly affects you.

Where a decision made by JH Machining is based wholly or to a significant extent on an automated credit or risk assessment, you may request human intervention, explain your position and ask for the decision to be reviewed.

Payment providers such as Klarna and PAY. may carry out automated fraud, payment or credit assessments for their own services. Insofar as these providers independently determine the purposes and means of such an assessment, you may also exercise your rights directly with the relevant payment provider.

12. How can you exercise your rights?

You can send a data protection request to:

J.H. Machining V.O.F.
Email: info@jhmachining.com
Subject: Data protection request

Please state clearly which right your request concerns and which data or processing activity it relates to.

We will generally respond within one month of receiving your request. If a request is complex or we receive several requests at the same time, we may extend this period by up to two further months. We will inform you within the first month if we need to use this extension.

To prevent personal data from being disclosed to the wrong person, we may request additional information to verify your identity. We will not request more information than is necessary for that purpose.

You will not generally be charged for exercising your data protection rights. Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse the request to the extent permitted by law.

13. Making a complaint

If you have a complaint about the way in which we process your personal data, please contact us first at info@jhmachining.com so that we can investigate and try to resolve your complaint.

You also have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Website: https://www.autoriteitpersoonsgegevens.nl

If you live in another country within the European Economic Area, you may also contact the data protection supervisory authority in your own country.

14. Third-party links and services

Our website may contain links to and embedded services from other websites or providers. When you visit an external website or activate an external service, that provider’s privacy statement may apply.

We recommend that you read the relevant provider’s privacy statement. JH Machining is not responsible for the content or privacy practices of third-party websites, except where we are jointly responsible for a specific processing activity under applicable law.

15. Changes to this Privacy Statement

We may amend this Privacy Statement when our services, systems, processing activities or applicable laws change.

The most recent version will be published on our website. The date on which the Privacy Statement was last updated is shown at the top of this page.

Where a change has a significant effect on how we use personal data, we will, where reasonably possible or legally required, inform the individuals concerned before the new processing begins.

16. Contact

If you have any questions about this Privacy Statement or the processing of your personal data, please contact us:

J.H. Machining V.O.F.
Rouaanstraat 21-F
9723 CB Groningen
The Netherlands

Email: info@jhmachining.com
Telephone: +31 (0)85 080 5901