Privacy Policy | The Urban Architect

Last updated: 16 May 2026

The Urban Architect ("we", "our", "us") is a project operated by Layered Lines 3D, registered in the Netherlands.

Chamber of Commerce (KvK): 95447024
VAT: NL005154011B53
Contact: info@theurbanarchitect.com

This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, place an order, or sign up for our newsletter.

This site uses SSL/TLS encryption to protect data in transit. You can recognize an encrypted connection by the https://prefix and the lock icon in your browser.

1. Information we collect

Server log files (automatically collected when you visit):

IP address (anonymized where possible)
Date and time of access
Pages visited, time on site
Referrer URL
Browser type and operating system
Device type

This data is processed under Art. 6(1)(f) GDPR (legitimate interest) for security, stability, and improvement of the site.

Information you provide:

Name, billing and shipping address, email address, phone number (at order or account creation)
Order information (items, amount, transaction date)
Account credentials (if you create an account)
Communications you send us (support requests, emails)

Payment card details are handled directly by our payment providers. We do not store full card numbers.

2. How we use your information

Process and ship your orders
Send order confirmations and shipping updates
Respond to support inquiries
Send our newsletter, only if you have subscribed
Improve our website and product offering
Detect and prevent fraud
Comply with legal obligations (tax, accounting)

3. Legal basis (GDPR)

Performance of a contract (Art. 6(1)(b)): to fulfill your order
Consent (Art. 6(1)(a)): for marketing, newsletters, and non-essential cookies
Legitimate interest (Art. 6(1)(f)): for fraud prevention, analytics, security
Legal obligation (Art. 6(1)(c)): for tax and accounting records

4. Hosting

Our website is hosted by Shopify International Limited (Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, which is covered by an adequacy decision of the European Commission. We have a data processing agreement with Shopify.

5. Payment providers

Shopify Payments (Shopify International Limited, Ireland) When you pay via Shopify Payments, your payment data (name, address, card and bank information, currency, transaction number) and order details are passed to Shopify for the purpose of processing the payment, under Art. 6(1)(b) GDPR.

PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) If you pay via PayPal, your payment data and order details are passed to PayPal for the purpose of processing the payment, under Art. 6(1)(b) GDPR. PayPal may also carry out credit checks under Art. 6(1)(f) GDPR for certain payment methods.

6. Shipping providers

PostNL (Prinses Beatrixlaan 23, 2595 AK Den Haag, Netherlands) MyParcel (Antareslaan 31, 2132 JE Hoofddorp, Netherlands)

We share your name and delivery address with our shipping providers to fulfill your order, under Art. 6(1)(b) GDPR. With your consent under Art. 6(1)(a) GDPR, we also share your email address and phone number to enable delivery notifications and track & trace.

You can withdraw consent for delivery notifications at any time.

7. Email marketing

Klaviyo (Klaviyo Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA) Shopify Email (Shopify International Limited, Ireland)

If you subscribe to our newsletter, we send emails via these providers. We use a double opt-in process: after you enter your email, you receive a confirmation email and only subscribe once you confirm.

Our newsletters use tracking pixels (web beacons) to measure open rates and clicks, so we can understand which content resonates and improve future emails. End device information (time of view, IP address, browser, OS) is collected but not combined with other datasets.

You can unsubscribe at any time via the link in any newsletter, or by emailing us. After unsubscribing your email is removed from our list.

For data transfers to the USA, Klaviyo participates in the EU-US Data Privacy Framework, which ensures an adequate level of data protection on the basis of an adequacy decision by the European Commission.

8. Cookies and tracking

We use cookies to operate our website and to understand how visitors use it. There are two types:

Session cookies are deleted when you close your browser
Persistent cookies remain on your device for a defined period

Cookie categories:

Essential cookies: required for the site to function (cart, checkout, login). No consent needed.
Analytics cookies: Google Analytics, Google Tag Manager, Shopify Analytics. Used to understand site usage and improve the experience. Consent required.
Marketing cookies: Meta Pixel, TikTok Pixel. Used for advertising and conversion tracking. Consent required.

We use the cookie consent banner provided by Shopify Customer Privacy to manage your preferences. Only cookies you have consented to are loaded. You can update your preferences at any time via the banner, or block cookies through your browser settings, though parts of the site may not work properly.

9. Analytics and tracking services

Google Analytics (GA4) (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) We use Google Analytics 4 to understand how visitors use our site. It collects anonymized data, including a shortened IP address, pages visited, time on site, and device information. The data is processed on Google's servers and may be transferred to Google LLC in the USA.

This processing only takes place if you have given consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie banner.

Google participates in the EU-US Data Privacy Framework.

Google Tag Manager (Google Ireland Limited) We use Google Tag Manager as a container to manage our tracking tags. Google Tag Manager itself does not store cookies or analyze data, but enables other services (like the pixels below) to function. It transmits your IP address to Google when you visit the site.

Meta Pixel (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) We use Meta Pixel for advertising and conversion tracking on Facebook and Instagram. When you visit our site, Meta Pixel may collect information about your visit and link it to your Meta account, so we can show you relevant ads and measure their effectiveness. Information may be transferred to Meta Platforms Inc. in the USA.

This processing only takes place if you have given consent under Art. 6(1)(a) GDPR. Meta participates in the EU-US Data Privacy Framework.

TikTok Pixel (TikTok Information Technologies UK Limited, Dublin and TikTok Inc., USA) We use TikTok Pixel for advertising and conversion tracking on TikTok. When you visit our site, TikTok Pixel may collect information about your visit and link it to your TikTok account, so we can show you relevant ads and measure their effectiveness. Information may be transferred to TikTok Inc. in the USA.

This processing only takes place if you have given consent under Art. 6(1)(a) GDPR. For data transfers outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission.

10. Data retention

Order data: 7 years, as required by Dutch tax law
Account data: until you delete your account
Newsletter data: until you unsubscribe
Analytics data: typically 14 months
Support emails: deleted once the inquiry is resolved, unless legal obligations apply

11. Your rights under the GDPR

You have the right to:

Access the personal data we hold about you (Art. 15 GDPR)
Rectify inaccurate or incomplete data (Art. 16 GDPR)
Erase your data, the "right to be forgotten" (Art. 17 GDPR)
Restrict processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Withdraw consent at any time (Art. 7(3) GDPR)
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl)

To exercise any of these rights, contact us at info@theurbanarchitect.com. We respond within 30 days.

Right to object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTEREST (ART. 6(1)(F) GDPR), YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THIS PROCESSING. ONCE YOU OBJECT, WE WILL STOP PROCESSING YOUR DATA FOR THESE PURPOSES.

You can exercise these rights by contacting us at info@theurbanarchitect.com.

12. International transfers

We ship and sell worldwide. Some of our service providers (Shopify, Google, Meta, TikTok, Klaviyo) are based outside the European Union. When your data is transferred outside the EU, we rely on:

Adequacy decisions of the European Commission (e.g., for Canada)
EU-US Data Privacy Framework participation (Google, Meta, Klaviyo)
Standard Contractual Clauses approved by the European Commission

13. Security

We take reasonable measures to protect your data, including SSL/TLS encryption, access controls, and working with reputable providers (Shopify, PayPal) that meet industry security standards. No system is fully secure, but we work to minimize risk.

14. Children

Our store is not directed at children under 16. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "last updated" date. Significant changes will be communicated by email if you are subscribed to our newsletter.

16. Contact

Questions about this policy or how we handle your data? Email info@theurbanarchitect.com.

Layered Lines 3D Chamber of Commerce (KvK): 95447024 VAT: NL005154011B53