Privacy Policy

Last updated: 1 November 2026

Yiiland (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit https://www.hiyiiland.com (the “Website”) or buy from us, in accordance with data protection laws, including the European General Data Protection Regulation (GDPR) and other applicable EU, Member State and UK laws. Please read this Privacy Policy carefully. By using our Website or doing business with us, you confirm you have read and understood it.

Yiiland is based in the Netherlands (KVK: 99136937). For any questions about your data, contact us at info@hiyiiland.com.

Personal Data We Collect and Process

“Personal data” means any information relating to an identified or identifiable person. Depending on how you interact with us, this may include:

Data you give us directly

• Contact information: name, postal address, billing address, shipping address, email address and phone number

• Account information: email, password and preferences, if you create a customer account

• Transaction information: items viewed, items in your cart, order history, returns and withdrawal requests

• Financial information: payment details, processed securely by our payment provider. We do not see or store your full card details.

• Communications: messages you send us by email or through forms

• Newsletter sign-up: your email address, if you choose to subscribe

• Any other information you choose to give us

Data collected automatically
When you visit our Website, we may automatically collect your IP address, cookie identifiers, other online identifiers, approximate location, device and browser information, and how you interact with the Website (for example pages viewed and clicks).

How We Handle Specific Features

Online store and customer accounts
When you place an order or create an account, we collect the personal data needed to process your order and give you access to your account. We may email you about your transaction or account activity, for example to confirm your order, tell you that it has shipped, or confirm a password reset. These are transactional messages, so it is not possible to unsubscribe from them.

Payments
We use Squarespace Payments, a payment solution provided to us by Squarespace. Squarespace Payments uses the following third-party providers, who also receive and process your personal data under their own privacy policies:

• Stripe, for payment processing (https://stripe.com/privacy)

• Sift, for fraud monitoring and detection (https://sift.com/legal-and-compliance/website-privacy-notice)

Address suggestions at checkout
As you type your address at checkout, what you type may be shared with the Google Places API to suggest addresses and improve your checkout experience.

Shipping
When you buy a physical product, we use your name, address, email address and phone number, together with details of your purchase such as the weight of the parcel, to ship your order. We share the data needed for delivery with our carriers, such as PostNL, DHL and DPD.

Withdrawals and returns
If you withdraw from a purchase or return an item, we collect your name, email address, order number and the items concerned, so we can handle your request and issue a refund.

Forms
When you submit information through a form on our Website, we collect the data requested in the form in order to respond to you. This data is stored in our Website platform, provided by Squarespace, and we use it only for the purpose of your request.

Newsletter and marketing emails
If you subscribe to our newsletter, we use your email address to send you news about new pieces and stories from Yiiland. We only do this with your consent. You can unsubscribe at any time using the link at the bottom of every email.

Abandoned cart emails
You will receive an automated email within 24 hours if you enter your email address at checkout, add an in-stock item to your cart and then leave without completing your purchase. The email links back to the Website so you can pick up where you left off. You can unsubscribe from these messages at the bottom of the email.

Special categories of personal data
We do not intentionally collect personal data that reveals racial or ethnic origin, political opinions, religious beliefs, health or other special categories of data. Please do not send us this kind of information.

How We Use Your Personal Data

• To operate and maintain our Website

• To process payments, fulfil your orders and arrange shipping

• To handle invoices, returns, withdrawals and customer support

• To communicate with you about your orders and answer your questions

• To send marketing messages, only where you have given consent

• To remember your preferences and improve your experience

• To analyse Website traffic and usage so we can improve our Website and services

• To prevent fraud and keep our Website and services secure

• To meet legal requirements, such as tax and accounting rules

Legal Basis For Processing

• Performance of a contract: processing is necessary to fulfil your order or to take steps at your request before an order, for example to provide the goods you have bought.

• Compliance with a legal obligation: for example, tax and accounting rules that require us to keep certain records.

• Your consent: for example, newsletters and non-essential cookies. You may withdraw consent at any time. Withdrawing consent does not affect processing carried out before you withdrew it.

• Legitimate interests: to improve our Website and services, prevent fraud, keep our network secure and carry out internal administration, except where your interests or fundamental rights override ours.

How We Disclose Your Information

We only share your information with service providers who help us run our business, and only as needed:

• Squarespace, which hosts our Website and provides our online store, forms, email and customer accounts

• Payment providers, Squarespace Payments, Stripe and Sift, as described above

• Shipping carriers, such as PostNL, DHL and DPD, who receive your name, address and contact details to deliver your order

• Email and communication providers, who help us send order messages and newsletters

• Authorities, when we are required to do so by law, or to protect our rights, prevent fraud or prevent illegal activity

We do not sell your personal data.

Data Retention and Security

We keep personal data only as long as necessary for the purposes for which it was collected. Order and invoice records are kept for the period required by Dutch tax and accounting law. Newsletter data is kept until you unsubscribe. After that, data is deleted or anonymised.

We use appropriate technical and organisational measures to protect your personal data, including HTTPS encryption between your browser and our Website, strong passwords for administrative accounts, and collecting only the data we need. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

Your Data Protection Rights

Under data protection laws in the European Economic Area and the UK, you have the following rights:

• Right to be informed: to receive clear information about how we use your data

• Right of access: to obtain confirmation of whether we process your data and to receive a copy

• Right to rectification: to have inaccurate or incomplete data corrected

• Right to erasure: to ask us to delete your data in certain circumstances

• Right to restriction: to ask us to limit how we use your data in certain situations

• Right to data portability: to receive your data in a structured, commonly used format and transfer it to another provider

• Right to object: to object to processing based on legitimate interests, and at any time to direct marketing

• Right to withdraw consent: at any time, as easily as you gave it

• Right to lodge a complaint: with a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl). You may also contact the authority in the EEA Member State or the UK where you live or work.

To use any of these rights, email us at info@hiyiiland.com. We may need to verify your identity before we process your request.

Squarespace Platform

Our Website and certain services are hosted by Squarespace. Squarespace acts as our processor and collects and processes personal data to provide its services to us and to improve them. Squarespace may also act as an independent controller for some personal data about your use of the services. Please see the Squarespace Privacy Policy (https://www.squarespace.com/privacy) for details.

International Data Transfers

Because our Website is hosted by Squarespace, a company based in the United States, your personal data may be transferred to and stored outside the European Economic Area or the UK. These transfers rely on:

• Adequacy decisions: where the European Commission or the relevant UK authority has confirmed that a country offers an adequate level of data protection

• Data Privacy Frameworks: transfers to Squarespace, Inc. in the US under the EU-U.S., Swiss-U.S. and UK Extension Data Privacy Frameworks

• Standard contractual clauses: approved transfer contracts for countries without an adequacy decision

Children’s Privacy

Our Website is not directed at individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will remove it.

Cookies and Analytics

We use cookies and similar technologies. You can read more about them in our Cookie Policy: https://www.hiyiiland.com/cookie-policy

In short, functional and required cookies are always used so that Squarespace can securely serve the Website to you. Analytics and performance cookies are used only after you accept our cookie banner. They help us understand Website traffic and activity, and may collect information about your browser, network and device, the pages you visited before arriving, your IP address, and details of your use of the Website such as clicks, internal links, pages visited, scrolling, searches and timestamps. For more information about the cookies used by Squarespace, visit https://support.squarespace.com/hc/articles/360001264507

Third-Party Services and External Links

Our Website may link to third-party websites or services, such as Instagram and Pinterest, which have their own privacy policies. We are not responsible for their privacy practices and encourage you to read their policies before giving them any personal data.

Fonts

Our Website uses fonts served by Google Fonts and Adobe Fonts. To display the Website properly, these providers may receive information about your browser, network or device, the page you are viewing and your IP address.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. The latest version is always on this page, with the date of the last update. Changes take effect when they are posted.

Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

Yiiland, the Netherlands
Email: info@hiyiiland.com
Website: https://www.hiyiiland.com
KVK: 99136937