MyBestToolsMyBestTools

Privacy Statement

Last updated: 29 October 2026

This privacy statement explains what personal data My Best Tools ("we", "us") collects when you use www.mybesttools.com, why we collect it and what your rights are. We are based in Amsterdam, the Netherlands, and process personal data in line with the General Data Protection Regulation (GDPR).

Who is responsible

My Best Tools, Amsterdam, the Netherlands, is the controller of the personal data described here. For any privacy question or request, use our contact form.

What we collect and why

  • Analytics. With your consent, we use Google Analytics to understand how visitors use the site, such as which pages are viewed. Visitors from the EU, the UK and Switzerland are asked for consent first, and analytics cookies are only set if you accept. The legal basis is your consent, which you can withdraw at any time.
  • Accounts and sign-in. If you have an account, we store your name, email address, role and sign-in details (a hashed password or your Microsoft account identity, and two-factor authentication settings if enabled). If you sign in with Microsoft, Microsoft shares your name and email address with us. We use this only to let you sign in and to control access. The legal basis is the performance of our agreement with you.
  • Booking requests. When you request a stay at the Ghiffa apartment, we store your name, email address, the requested dates, any notes you add and your preferred language. We use this to handle your request and email you about it. The legal basis is taking steps at your request before entering into an agreement.
  • Comments. Comments on blog posts are provided by giscus and stored as GitHub Discussions. To comment you sign in with GitHub, and your comment and GitHub profile are public. GitHub's privacy statement applies to that data.
  • Shop. Products in the shop are provided by Shopify. When you buy something, you are sent to Shopify's checkout, and Shopify processes your order, payment and delivery details. We receive the order details we need to fulfil your order. The legal basis is the performance of the purchase agreement.
  • Contact form. When you send us a message, we receive your name, email address and message by email, and use them only to reply to you. To block spam, the form uses Cloudflare Turnstile, which checks your browser and connection without setting tracking cookies. The legal basis is our legitimate interest in answering your message and keeping the form free of spam.
  • Server logs. Our hosting provider keeps technical logs, such as IP addresses and request times, to keep the site secure and running. The legal basis is our legitimate interest in operating a secure website.

Cookies and local storage

We store your cookie choice and, on the booking page, your language preference in your browser's local storage. These are needed for the site to work and are not used for tracking. Google Analytics cookies are only placed after you accept them. Signing in places a session cookie that keeps you signed in.

Who we share data with

We do not sell your personal data. We use these service providers to run the site:

  • Microsoft Azure, for hosting the website
  • MongoDB Atlas, for storing account and booking data
  • Microsoft 365, for sending emails and for Microsoft sign-in
  • Google, for analytics (only with your consent)
  • GitHub, for blog comments
  • Shopify, for the shop and checkout
  • Cloudflare, for spam protection on the contact form

Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep data

We keep personal data only as long as needed for the purpose it was collected for. Account data is kept while your account exists. Booking requests are kept while they are relevant to the booking and then deleted. You can ask us to delete your data sooner.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability and to withdraw your consent at any time. To use these rights, use our contact form. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this statement when the site changes. The date at the top shows when it was last updated.