Privacy statement
Last updated: October 14, 2026
StepFox, a sole proprietorship located at Bosven 314, 5464 ND Veghel, the Netherlands (KvK 18067248), is responsible for processing your personal data on easymoza.com; EasyMoza is a trade name of StepFox. Email questions about privacy to info@easymoza.com. Below you can read what data we process and why, how long we keep it, who we share it with and what rights you have.
What data and why
We only use your data for the purposes in this statement and never sell it.
If you have bought something from us, we may occasionally email you about our own, similar products, for example with a discount code. If you do not want this, tick the box when ordering; in addition, every email has an unsubscribe link. We only send you other newsletters if you have given your consent in advance.
- Your photos: your mosaic is made in your own browser; your main photo and small photos stay on your own device until you order something. Only when you order do we receive them, to make and deliver your order.
- Other people in your photos: if others appear in them, we only process their image to make and deliver your order, and for no longer than stated below. So only use photos you are allowed to use for this.
- Your email address: for the confirmation and the status of your order and, if you log in, for your login code.
- Your name and address: only for a print, to deliver it.
- The texts you put in a video: to make your video.
- Order details (what, when, amount): for delivery, customer service and our accounts.
- Your emails to our customer service: to answer your question.
On what legal basis
Your email address is needed to confirm and deliver your order, and for a print also your name and address. Without this data we cannot carry out your order.
- Making and delivering your order, and answering your questions about it: the performance of the contract with you.
- Our accounts: a legal obligation (the statutory obligation to keep tax records).
- Preventing misuse of codes and gift cards and securing the site: our legitimate interest in a secure web shop.
- Emails about our own products to customers: our legitimate interest, within the rules of the Dutch Telecommunications Act (see above). Other newsletters and 'Save in my account': your consent, which you can always withdraw.
How long we keep data
- Photos you do not order: they never reach us, they stay on your own device only. Unless you choose 'Save in my account' yourself: then we keep them with your account for 14 days, so you can continue where you were, and delete them automatically afterwards (or sooner, if you delete the mosaic yourself).
- The photos of an order: 90 days (14 days for a free video or an order that is not paid). After that they are deleted automatically.
- Your digital file: 3 months, as long as your download link works.
- Your video: a paid video for a year, the free video for 3 months.
- Your name and address: until 60 days after shipping, for delivery and any questions about it. After that they are deleted; only the country stays with the order, for VAT.
- Orders (what, when, amount, country and email address): 7 years, because the law requires this for our accounts.
- Emails to our customer service: 2 years.
Who we share data with
Only with parties we need to carry out your order, with agreements on security and confidentiality:
- Amazon Web Services (storage and processing, and sending confirmations and login codes, in the EU – Frankfurt);
- Adyen (payments);
- Print API and the carrier (printing and delivering your print);
- Brevo (sending newsletters and emails about our products, in the EU);
- Anthropic (Claude, an AI assistant that helps us answer your emails; Bram reads and sends every reply himself). Anthropic processes the text of your email in the United States, under the European Commission's standard contractual clauses; you can request a copy of these safeguards from us. Anthropic does not use this data to train its AI, and we do not share attachments such as photos.
Cookies
We only use functional cookies: one to link your orders to your browser and, if you log in, one to keep you logged in. We do not use advertising or tracking cookies.
To improve the site we count anonymously how often the site is visited and how often the steps in the maker are used. We only keep numbers per day: no cookie, no IP address and nothing that could identify you. We do not use Google Analytics.
Security
Your photos are stored securely and can only be seen through temporary, personal links. All connections are encrypted. We do not store IP addresses with your photos.
To prevent guessing of codes and gift cards, we count how often a wrong code is entered from an internet address. We only keep that address encrypted and for no more than 2 days.
A video has its own viewing page with a link that is hard to guess. Anyone who has that link can watch the video, so only share it with people you want to.
Your rights
You may view your data, have incorrect data corrected, have your data deleted or its processing restricted, and request a copy in a common file format. You may object to processing based on our legitimate interest, and to emails about our products at any time. You can always withdraw your consent.
Email info@easymoza.com for this. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your country.
We do not make decisions about you that are made solely by a computer. Bram also reads the replies the AI assistant suggests before they are sent.