Privacy statement

Who we are

WinkelWise (winkelwise.com and app.winkelwise.com) is a trade name of Casa Colonio, a one-person business in The Netherlands (Casa Colonio, KvK 42197856, btw-id NL005575934B05). For anything about your data, email hello@winkelwise.com.

This website

The website sets no cookies and uses no advertising or tracking tools. Our host, Cloudflare, processes technical data such as your IP address and browser to deliver the pages and keep them secure. Fonts load from our own site, not from a third party.

If we count visits, we use Cloudflare Web Analytics, which sets no cookies and does not identify you.

When you request a Store Check

• What: your name, email address, company, number of stores, city, till system and message.
• Why: to answer your request and plan a call. You ask us to, before any agreement (GDPR article 6(1)(b)).
• Where: in our database at Cloudflare in the EU. A copy is emailed to our inbox, which runs on Google Gmail.
• How long: up to 12 months if you don’t become a client. If you do, it becomes part of your client file.
• Against spam we keep a scrambled, daily-changing code made from your IP address, never the address itself. It is deleted with the request.

In the WinkelWise app

For clients we process user accounts (name, email address, role and a protected password), store figures (sales, visitors, transactions, items, hourly figures and notes), first names and shifts of the store team, floor plans and visual merchandising photos, the daily focus and answers to it, and, when a client connects Lightspeed, sales read from that till system.

For this store data the client decides why it is processed; WinkelWise processes it on the client’s behalf. We agree this in a data processing agreement (verwerkersovereenkomst) with every client.

App data is stored at Cloudflare in the EU. For the weather we send only the location of the store’s city to Open-Meteo, never personal data. The app uses one strictly necessary cookie to keep you signed in.

Who else handles data

• Cloudflare: hosting, database, file storage and email forwarding.
• Google: our email inbox.
• Lightspeed: only when a client connects it. WinkelWise reads sales from it and changes nothing there.

We never sell data or use it for advertising. Cloudflare and Google are American companies; transfers outside the EU are covered by the EU–US Data Privacy Framework and standard contractual clauses.

Security

Everything runs over HTTPS. Passwords are stored as a one-way hash, Lightspeed access is stored encrypted, and every user sees only their own company or store.

Your rights

You can ask to see, correct or delete your data, to limit or object to its use, or to receive it in a usable format. Email hello@winkelwise.com; we answer within one month. If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes

When this statement changes, we update this page and the date at the top.