Privacy Policy
Last updated: April 2026
Who we are
This website, kalkora.nl, is operated by KALKORA, based in Amsterdam, the Netherlands.
For any privacy-related questions, contact us at: privacy@kalkora.nl
What data we collect
We collect only the data required to deliver the service you requested. The table below lists every category of personal data we process.
| Data | When collected | Purpose |
|---|---|---|
| Email address | When you submit the guide download form | Deliver the PDF guide and send follow-up emails you have opted into |
| Espresso machine brand | When you select your machine on the thank-you page (optional) | Provide machine-specific product recommendations at launch |
| Product interest (DESCALE, CLEAN, PURGE, or Box Set) | When you select products on the thank-you page (optional) | Send a one-time launch notification for the products you selected |
| IP address | Automatically on each page visit | Website hosting, security, and analytics (aggregated) |
| Browser and device type | Automatically on each page visit | Analytics (aggregated) to understand how visitors use the site |
| Online activity (pages visited, actions taken on site) | Automatically via the Meta Pixel when you visit the site | Measure advertising performance, attribute conversions to specific ads, and build audiences for ad targeting on Facebook and Instagram |
We do not collect names, phone numbers, payment details, or any other personal data beyond what is listed above.
How we use your data
Your email address is used to deliver the descaling guide you requested and, if you remain subscribed, to send occasional emails related to espresso machine maintenance. Every email includes an unsubscribe link. We do not sell, rent, or share your email address with third parties for their marketing purposes.
Aggregated analytics data (page views, device types, traffic sources) is used to understand how visitors interact with the site. This data is not linked to your identity.
Cookies
This site uses a limited number of cookies. We do not use cookies for advertising or cross-site tracking.
| Cookie | Type | Purpose |
|---|---|---|
| Shopify session cookies (_s, _shopify_s, _shopify_y, cart, secure_customer_sig) | Essential | Required for the site to function. These handle session management, security, and basic site operations. They cannot be disabled. |
| Shopify analytics (_landing_page, _orig_referrer, _s, _shopify_sa_p, _shopify_sa_t, _y) | Analytics (first-party) | Shopify's built-in analytics. Tracks page views and referral sources in aggregate to help us understand site traffic. |
| Meta Pixel (_fbp, _fbc) | Advertising (third-party) | Placed by Meta (Facebook/Instagram) to measure advertising performance, attribute guide downloads to specific ads, and build audiences for ad targeting. Data is sent to Meta Platforms, Inc. and processed under their Data Policy. You can opt out of Meta's tracking via your Facebook Ad Settings or by using the Off-Facebook Activity tool. |
Where your data is stored
Your data is processed by the following services, each operating under their own data processing agreements with us:
| Service | Data stored | Location |
|---|---|---|
| Shopify | Site analytics, session data | Canada and the United States (Shopify Inc.). Transfers governed by Standard Contractual Clauses. |
| MailerLite | Email address, machine brand, product interest, subscription status, email engagement data (opens, clicks) | European Union (MailerLite is headquartered in Lithuania). Data processed within the EU. |
| Meta Platforms, Inc. | Page views, conversion events (guide downloads), browser and device identifiers via the Meta Pixel | United States (Meta Platforms, Inc.). Transfers governed by Meta's Data Policy and EU-U.S. Data Privacy Framework. |
Legal basis for processing
Under the GDPR, we process your personal data on the following bases:
- Consent (Article 6(1)(a)): When you submit your email address to receive the guide, you consent to us processing that address for delivery and follow-up communication. You may withdraw consent at any time by clicking the unsubscribe link in any email or by contacting us.
- Consent (Article 6(1)(a)): We use the Meta Pixel to measure advertising performance on Facebook and Instagram. This cookie is set when you visit the site via a Meta ad. You can withdraw consent at any time by adjusting your Facebook Ad Settings or using the Off-Facebook Activity tool.
- Legitimate interest (Article 6(1)(f)): We use essential cookies and collect aggregated analytics data to operate and improve the website. This processing is minimal, does not involve sensitive data, and does not override your rights.
Data retention
Your email address is retained in MailerLite for as long as you remain subscribed. When you unsubscribe, your email is removed from active mailing lists. MailerLite may retain a suppression record (email address only) to ensure we do not contact you again.
Shopify analytics data is retained in aggregated form and is not linked to individual visitors.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability: receive your data in a machine-readable format
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl
To exercise any of these rights, email us at privacy@kalkora.nl. We will respond within 30 days.
Security
All connections to kalkora.nl are encrypted via SSL/TLS. Data transmitted between your browser and our servers cannot be read in transit. MailerLite and Shopify both encrypt stored data at rest and maintain SOC 2-compliant infrastructure. No method of electronic transmission or storage is 100% secure, but we select processors that meet recognised industry standards.
Disclosure
We do not sell or share your personal data with third parties for their own purposes. We may disclose your personal data if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights, or respond to a lawful request from a public authority.
Business transfer
If KALKORA or its assets are acquired by or merged with another company, your personal data may be transferred to the new owner. We will notify you via email before your data is transferred and becomes subject to a different privacy policy.
Third-party links
This site may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing any personal data.
Children
This site is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. If we make material changes to how we process your data, we will notify you via email before the changes take effect.