Last updated: August 13, 2026
Dutch Garden Tools sells hand-forged Dutch garden tools to customers across the United States. This policy explains what personal information we collect when you visit dutchgardentools.com or place an order, why we collect it, who we share it with, and what you can ask us to do with it.
Who we are
Dutch Garden Tools
Website: https://dutchgardentools.com
Email: [email protected]
We are the controller of the personal information described below. If you have a question about this policy or about your data, email us at the address above and a person will answer you.
What we collect and why
When you place an order
To process an order we collect your name, billing address, shipping address, email address, phone number and the contents of your order. We need this information to take payment, ship your tools, calculate sales tax, send you order confirmations and shipping updates, and handle returns or warranty questions afterwards.
Payment details
Card payments are processed by Authorize.Net, a Visa solution. Your full card number is sent directly to Authorize.Net over an encrypted connection and is never stored on our website. What we keep on the order is the card brand, the expiration month and year, and the last four digits, so that we and you can recognize the payment later. Authorize.Net processes that data as our payment processor and under its own privacy policy at authorize.net/about-us/privacy.html.
Shipping
We share your name, shipping address, phone number and the weight and dimensions of your parcel with FedEx so that shipping rates can be quoted at checkout and your order can be delivered and tracked.
When you create an account
An account is optional. If you create one, we store the name, email address, password (encrypted, never in readable form) and addresses you enter, together with your order history, so that you do not have to type your details again. You can view and edit all of it under My Account, and you can ask us to delete it.
When you contact us or sign up for the newsletter
Our contact and newsletter forms run on Gravity Forms. We receive the name, email address and message you send us, and we use them only to answer you. If you subscribe to our newsletter, your name and email address are stored in Constant Contact and used to send you occasional emails about new tools, seasonal advice and offers. Every newsletter has an unsubscribe link, and unsubscribing takes effect immediately.
Product reviews
If you leave a review, we publish the name you enter and the text of your review. Your email address is not published. We also store the IP address the review was submitted from, to help us filter out spam.
Information collected automatically
Like almost every website, our server records your IP address, your browser and device type, the pages you visit, and the page that referred you. We use this to keep the store running, to see which products and articles people are looking for, and to detect fraudulent or automated traffic.
Cookies
Cookies are small files a website stores in your browser. We use them for three things:
- Necessary cookies keep your cart filled, keep you logged in, and protect the checkout against fraud. The store cannot work without them.
- Analytics cookies tell us, in aggregate, how visitors find and use the site.
- Advertising cookies let us measure which Google ads lead to a sale, so we do not waste money on ads that do not help anyone.
You can delete or block cookies in your browser settings. If you block the necessary ones, the cart and checkout will stop working.
Analytics and advertising
We use Google Analytics 4 to understand how the site is used, and Google Ads to advertise our tools and to measure which advertisements result in orders. For this purpose Google receives your IP address, a randomly generated identifier and information about the pages you view. Advertising and analytics cookies are only set after you accept them in the cookie banner. Google’s privacy policy is at policies.google.com/privacy.
Our customer list at Google
We also upload a list of our customers to Google Ads. Its purpose is to show our own ads to people who already bought from us, to leave out people who just ordered, and to let Google find new gardeners who resemble our customers.
The list is built from the email address, phone number and name on your orders. Those are scrambled into an unreadable code on our own server before they are sent, so Google never receives them in readable form. Your postal code and country travel with them so that Google can tell two people with the same name apart. We never send your street address, your order contents or your payment details.
Google may only use this list for our own advertising. It is not shared with other advertisers and Google is not allowed to add it to its own profiles. We keep customers on the list for at most seven years after their last order, the same period we keep the order itself.
You can ask us to leave you off this list at any time, whether or not you live in California, by emailing [email protected] with the subject “Do not share my information”. We will remove you within thirty days and you will keep exactly the same prices, products and service.
Security and fraud prevention
Our site sits behind Cloudflare, which filters out attacks and automated traffic before it reaches us. When an order is placed we also score it automatically for signs of card fraud, using the IP address, the network it belongs to, and whether the billing and shipping details are consistent. An order that scores as high risk is held for manual review by a member of our team. No order is refused purely by an automated decision without a person being able to look at it, and you can always email us if you believe an order was held in error.
Who we share your data with
We share personal information only with the companies that help us run the store, and only with what they need to do their job:
- Authorize.Net, for processing card payments
- FedEx, for shipping rates, delivery and tracking
- Google, for website analytics, advertising measurement and our customer list
- Constant Contact, for our newsletter
- Cloudflare, for security and site delivery
- Our web host and our web agency, for hosting, maintenance and technical support
We do not sell or rent your personal information to anyone, and we never share it so that another company can advertise its own products to you. The customer list described above is used for our own advertising only. We will disclose information if the law requires it, for instance in response to a valid subpoena, or where we need it to establish or defend a legal claim.
How long we keep your data
- Orders and invoices: seven years, because tax and accounting rules require it.
- Account details: until you ask us to delete your account.
- Newsletter subscription: until you unsubscribe.
- Contact form messages: up to two years after we have answered you.
- Server and security logs: up to twelve months.
- Our customer list at Google: up to seven years after your last order.
Your rights
You can ask us to give you a copy of the personal information we hold about you, to correct it if it is wrong, or to delete it. You can also ask us to stop sending you marketing email at any time. Email [email protected] and we will respond within thirty days. We may need to confirm who you are before we act on a request, and we cannot delete order records we are legally required to keep.
If you live in California, the CCPA gives you the right to know what personal information we collect, to have it deleted, to correct it, to opt out of sharing, and not to be discriminated against for exercising those rights. Use the same email address above to make a request.
We do not sell personal information for money and we never have. We do share personal information for cross-context behavioral advertising in the sense the CCPA uses: the customer list described under Analytics and advertising, and the advertising cookies you accept in the cookie banner. You can opt out of both. Email [email protected] with the subject “Do not share my information” to be left off the customer list, and decline advertising cookies in the banner, or withdraw that acceptance later through the cookie settings on any page.
We do not knowingly share the personal information of anyone under sixteen for advertising.
Children
Our store is meant for adults. We do not knowingly collect personal information from children under thirteen. If you believe a child has given us their details, email us and we will remove them.
How we protect your data
The whole site runs over an encrypted HTTPS connection. Card data goes straight to our payment processor and is never stored on our servers. Access to the store’s administration is limited to the few people who need it, and the site is monitored, backed up daily and kept up to date. If a data breach ever affects your personal information, we will notify you and the relevant authorities as required by law.
Changes to this policy
If we change how we handle personal information, we will update this page and change the date at the top. Significant changes will be announced on the website.
Contact
Questions about this policy, or about the information we hold about you? Email [email protected] and a person will answer you.