Privacy Policy
We are committed to protecting your privacy. This statement explains which personal data we collect when you visit our website, order from us or contact us, why we do so, how long we keep it, with whom we share it, and what rights you have.
Who we are
Lock Works is a trade name of Distri Works BV, the data controller for the processing described here.
Distri Works BV
Hollandse Hout 196
8244 GH Lelystad
The Netherlands
Chamber of Commerce (KvK) number: 92297986
Email: info@lock.works
Telephone: +31 85 743 0152
What we process, why, and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling and delivering your order, payment, invoicing | Name, address, email, telephone, order details, payment status, and the IP address and browser details recorded with the order | Performance of the contract; legal obligation (bookkeeping); legitimate interest in preventing and handling fraud and payment disputes | 7 years after the end of the financial year, as required by Dutch tax law. Orders placed without an account are anonymised after 7 years; orders associated with an account are kept for as long as the account exists. |
| Your customer account | Account details, order history, saved addresses | Performance of the contract | Until you delete your account, or 7 years after your last visit, order or key registration, whichever comes first. Our products are used for many years, so we keep accounts that long. |
| Key registration (linking a key code to your account, ordering replacement keys, transferring a registration) | Email address, key code, serial number, notes you add; for a transfer, the email address of the new owner | Performance of the contract (the service you request) | Until you delete the registration or your account; deleted registrations cannot be restored. Transfer invitations are deleted 30 days after they were sent. See also our Key Registration Terms. |
| Returns, warranty and customer service | Contact details, order and product details, correspondence | Performance of the contract; legitimate interest in providing good service | With an account: as long as the account exists. Without an account: 2 years after the last update to the case. |
| Contact form and email | Name, email address, your message and anything you attach | Legitimate interest in answering you; steps taken at your request before entering into a contract | Enquiries: as long as needed to handle your request and any follow-up, and no longer than 2 years after the last contact. Correspondence about an order or return: as long as the records of that order are kept, 7 years. |
| Product reviews | Name, review text, rating | Legitimate interest in publishing genuine reviews | Until you ask us to remove it |
| Newsletter | Email address, name | Your consent | Until you unsubscribe |
| Account security (IP addresses used with your account, failed login attempts) | IP addresses, the email address entered, number and time of attempts | Legitimate interest in protecting accounts and detecting misuse | IP addresses used with your account: 12 months. Failed login attempts: 30 days. |
| Security and spam prevention (an automatic check on the registration, review, return, contact and password reset forms; server logs) | IP address, browser and device data | Legitimate interest in protecting the website and our customers | Server logs are kept by our hosting provider only as long as needed for security and troubleshooting. |
| Website statistics (Google Analytics) | Pages visited, device and browser type, approximate location, an anonymous visitor ID | Your consent | Cookies remain valid for up to 2 years. In Google Analytics, event data and data linked to your cookie ID are kept for 2 months. |
| Suggesting your language and currency | IP address, compared against a database on our own server to determine your country | Legitimate interest in a relevant shopping experience | Not shared with anyone; the result is kept in your session only |
We only collect what we need. If you do not give us the data required for an order, we cannot deliver it. We do not make decisions about you based solely on automated processing.
Who we share your data with
We only share personal data with companies that help us deliver our service, and we make data protection arrangements with each of them where required by law:
| Recipient | Why |
|---|---|
| Mollie B.V. | Processing payments |
| DHL Express, MyParcel and other carriers we use for your shipment | Delivering your order (name, address, telephone, email) |
| The manufacturer of replacement keys (we make keys ourselves or have them made by a manufacturer, which may be located outside the EU) | Only when you order a replacement key: the key code needed to make it, without your name or any other customer details. Registered key codes are not disclosed to anyone else, as stated in the Key Registration Terms |
| SnelStart | Our bookkeeping software |
| Shock Media BV (the Netherlands) | Hosting of our website and database |
| Google Workspace (Google Ireland Ltd. / Google LLC) | Our email: sending order confirmations and handling the messages you send us |
| Google (Google Ireland Ltd. / Google LLC) | Analytics (with your consent), and maps and location search on our event pages (loaded only after you choose to) |
| Mapbox, Inc. | The Where to buy map (loaded only after you choose to) |
| Authorities, advisers and the tax authorities | When the law requires it |
We do not sell your personal data.
Transfers outside the EU
Google and Mapbox are based in the United States. When your data is transferred to them, it is protected by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
Cookies and similar technologies
Cookies are small files stored on your device. We use the following cookies.
| Name | Purpose | Duration |
|---|---|---|
| Functional cookies (needed for the website to work; no consent required) | ||
| OCSESSID | Maintains your shopping cart and login session during your visit | Until you close your browser |
| language, currency | Remember your chosen language and currency | 30 days |
| qw_cookie_consent | Remembers your cookie choice | 180 days |
| geoip_banner_dismissed | Remembers that you closed the country and currency notice | 1 year |
| Analytical cookies (Google Analytics; only with your consent) | ||
| _ga, _ga_* | Count visitors and see which pages are used, so we can improve the website | 2 years |
Third-party content. Our maps (Mapbox on the Where to buy page, Google Maps on event pages) and the Google location search on the event list are not loaded until you click Load content or accept all cookies. Loading them sends your IP address to the provider, who may store data in your browser.
Your choice. You can change or withdraw your cookie choice at any time with the Cookie settings link at the bottom of every page. You can also delete cookies in your browser settings.
Your rights
You have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data erased, where we have no legal reason to keep it;
- restrict the processing of your data;
- receive your data in a portable format;
- object to processing based on our legitimate interest;
- withdraw any consent you gave, at any time, without affecting the processing that took place before you withdrew it.
To exercise these rights, log in to your account or email info@lock.works. We will answer within one month. We may ask you to identify yourself first.
If you are not satisfied with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the authority in your own country.
Key registration
The key registration service has its own Key Registration Terms. This privacy statement applies to the personal data processed for that service. A key code is security-sensitive information, so we handle it with extra care and only use it to manage your registration, assist with replacement key requests, handle related support questions and carry out a transfer you request.
Security
We protect your data with technical and organisational measures, including encrypted connections (HTTPS) and hosting on secured servers in the Netherlands. Payments are handled by Mollie; we do not store your payment card details. No transmission over the internet is completely secure, so please keep your account login details secure and log out on shared computers.
Changes
We may update this statement, for example when our website or the law changes. The current version is always on this page. Last updated: 12 October 2026.
Contact
Questions about privacy? Email info@lock.works or call +31 85 743 0152.