Privacy Policy

Last updated: 8 July 2026

This Privacy Policy explains how Que Pasa ("we", "us", "our") collects, uses, shares and protects your personal information when you visit our website get-quepasa.com (the "Site"), buy our products, or otherwise interact with us. Que Pasa is a trade name of DCT Ecom, established in the Netherlands, which acts as the data controller for your personal information under the EU General Data Protection Regulation (GDPR) and applicable Dutch law.

Please read this policy carefully. By using the Site you acknowledge that you have read and understood it.

1. Who we are

DCT Ecom, trading as Que Pasa, is the controller responsible for your personal information.

  • Registered name: DCT Ecom (trading as "Que Pasa")
  • Chamber of Commerce (KvK) number: 86063154
  • VAT number: NL004185599B20
  • Address: Paxtonstraat 3-N, 8013 RP Zwolle, Netherlands (correspondence address only — not a visiting or return address)
  • Email: support@get-quepasa.com

2. Who this policy applies to

This policy applies to: visitors who browse our Site; customers who order, buy or receive our products; and anyone who contacts us by form, email or otherwise.

3. Personal information we collect

Depending on how you interact with us, we may collect:

  • Contact details: name, email address, billing address, shipping address, phone number.
  • Account information: username, password and account preferences (if you create an account).
  • Order and transaction information: products viewed, added to cart or purchased, order history, returns and exchanges.
  • Payment information: payment method and confirmation of payment. Full card details are processed by our payment providers, not stored by us.
  • Communications: the information you share when you contact us, for example a support request.
  • Device and usage information: IP address, device and browser type, and how you navigate and interact with the Site, collected through cookies and similar technologies.

Fields marked as required at the point of collection are necessary to provide the Site, deliver products or respond to you. Without them we may be unable to complete your order or answer your request.

4. How we collect your information

We collect personal information: directly from you (when you order, create an account, or contact us); automatically through the Site (via cookies and similar technologies); and from our service providers and partners (for example payment, analytics and advertising providers acting on our behalf).

5. Why we use your information, and our legal basis

  • To provide our products and services — to process and deliver your orders, manage your account, handle returns and exchanges, and provide customer support. Legal basis: performance of our contract with you.
  • To communicate with you — order confirmations, shipping updates and service messages. Legal basis: performance of our contract, and our legitimate interest in servicing you.
  • Marketing and advertising — to send you promotional emails and to show you personalised advertising on other websites and platforms (for example via Meta). Legal basis: your consent, which you can withdraw at any time.
  • To improve and secure the Site — analytics, product development, fraud prevention and keeping the Site safe. Legal basis: our legitimate interest in running and protecting our business (and, for non-essential analytics cookies, your consent).
  • To comply with the law — accounting, tax and other legal obligations, and responding to lawful requests. Legal basis: compliance with a legal obligation.

6. Who we share your information with

We may share your personal information with:

  • Shopify, which hosts our Site and provides our e-commerce platform.
  • Payment providers to process your payments securely.
  • Suppliers and fulfilment/shipping partners to pick, pack and deliver your order.
  • Analytics and advertising partners (such as Meta) to measure Site performance and, with your consent, deliver personalised advertising.
  • IT, cloud and other service providers who process data on our behalf under our instructions.
  • Professional advisers such as legal, accounting and financial advisers.
  • Public authorities where required by law.
  • A successor entity in the context of a merger, acquisition or similar business transaction.

We require our providers to process your data only as instructed and to keep it secure.

7. International transfers

Some of our providers and partners may be located outside the European Economic Area (EEA), including our fulfilment partner. Where we transfer your personal information outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or transfer only to countries recognised as providing an adequate level of protection.

8. Cookies and similar technologies

We use cookies and similar technologies on our Site. You can manage your preferences at any time via the "Cookie settings" link on our Site. We use the following categories:

  • Strictly necessary cookies — required to run the Site and its core functions such as the cart and checkout. These do not require consent.
  • Functional cookies — remember your choices and preferences (such as language and region) to improve your experience.
  • Analytics cookies — help us understand how the Site is used so we can improve it.
  • Advertising and tracking cookies — record your browsing so we, and third parties such as advertising networks, can show you relevant ads and measure their effectiveness. These may share information with those third parties.

Non-essential cookies (functional, analytics and advertising) are placed only after you give consent through our cookie banner, and you can withdraw that consent at any time. You can also block or delete cookies in your browser settings, though this may affect how the Site works. See our separate Cookie Policy for more detail.

To opt out of third-party targeted advertising you can also visit youronlinechoices.eu (EU) or the Network Advertising Initiative at networkadvertising.org/choices.

9. Marketing

Where you have consented, we may send you information about our products, offers and updates. You can unsubscribe at any time using the "unsubscribe" link in our emails or by contacting support@get-quepasa.com. Even if you opt out of marketing, we may still send you service messages about your account or orders.

10. How long we keep your information

We keep your personal information only for as long as necessary for the purposes described in this policy, including to provide our services, comply with legal, tax and accounting obligations (for example, invoicing data is kept for 7 years under Dutch tax law), resolve disputes and enforce our agreements. When it is no longer needed, we delete or anonymise it securely.

11. Security

We take reasonable technical and organisational measures to protect your personal information. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please avoid sending sensitive information through unsecured channels.

12. Your rights

Depending on where you live, you may have the following rights in relation to your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete information.
  • Erasure — ask us to delete your personal information.
  • Restriction and objection — ask us to restrict or stop certain processing, including objecting to direct marketing and profiling.
  • Portability — receive your information in a portable format or have it transferred to another provider.
  • Withdraw consent — where we rely on your consent, withdraw it at any time (this does not affect processing carried out before withdrawal).
  • Complain — lodge a complaint with your data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

To exercise any of these rights, contact us at support@get-quepasa.com. We may need to verify your identity before responding, and we will reply within the timeframes required by law.

13. Children

The Site is not intended for children, and we do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the updated version on this page and update the "Last updated" date.

15. Contact

If you have any questions about this Privacy Policy or how we handle your personal information, or if you want to exercise your rights, please contact:

DCT Ecom (Que Pasa), Paxtonstraat 3-N, 8013 RP Zwolle, the Netherlands (correspondence address only — not a visiting or return address). Email: support@get-quepasa.com