DRL SERVICES B.V. · THE SHROUD CODES
Privacy Statement & Disclaimer
This statement explains how DRL Services B.V. handles personal data in connection with The Shroud Codes, its books, digital content, documentary platform and related services, and sets out the principal conditions governing the use of our website and content.
Last updated: 7 October 2026We process personal data only where there is a defined purpose and a lawful basis. We do not sell personal data. Where third-party service providers are required to operate our website, fulfil orders, process payments or provide technical services, we limit the information shared to what is reasonably necessary for that purpose.
Who is responsible for your personal data?
DRL Services B.V. is the controller responsible for the processing described in this statement.
DRL Services B.V.The Netherlands
Chamber of Commerce (KvK): 96236299
Email: info@theshroudcodes.com
What personal data may we process?
The personal data we process depends on how you use our website and services. It may include:
- name, email address and other contact details;
- billing and delivery details when you order a physical product;
- order, payment-status and transaction information;
- account and access information for digital or documentary services;
- correspondence and customer-service communications;
- technical information relating to website use, security and analytics.
We do not intentionally request special-category personal data unless there is a specific and lawful reason to do so.
Why do we process personal data?
| Orders & access | To process purchases, deliver books or digital content, provide documentary access and administer customer accounts. The principal legal basis is performance of a contract. |
|---|---|
| Payments & records | To administer transactions, invoices and financial records and to comply with tax and accounting obligations. The legal bases are performance of a contract and compliance with legal obligations. |
| Customer service | To answer questions, provide support, resolve technical issues and communicate about an order or account. Depending on the situation, the legal basis is performance of a contract or our legitimate interest in providing effective support. |
| Security | To secure the website, prevent misuse, investigate technical incidents and protect our systems and users. We rely on our legitimate interests where permitted by law. |
| Marketing | To send newsletters or promotional messages only where a lawful basis exists. Where consent is required, it must be freely given and may be withdrawn at any time. Where applicable law permits communications to existing customers without separate consent, an easy opt-out will still be provided. |
| Analytics | To understand how the website is used and improve its performance. Where consent is legally required for non-essential analytics technologies, such processing should take place on the basis of that consent. |
Digital content and documentary access
When digital content or documentary access is purchased, we use the information needed to complete the transaction, create or maintain access and provide the purchased content.
Consumer withdrawal rights for digital content are governed by applicable consumer law. Where digital content is supplied immediately and the law requires it, we will ask the consumer to give prior express consent to performance beginning during the withdrawal period and to acknowledge that the right of withdrawal may be lost once performance has begun.
Physical books and delivery
When you order a physical book, we process the information reasonably necessary to fulfil the order, such as your name, delivery address, email address and relevant order information. Delivery details may be shared with fulfilment or delivery providers solely as needed to complete the shipment.
Service providers and other recipients
We do not sell personal data. We may disclose limited personal data to service providers acting for or with us where this is necessary to operate our services. Categories of recipients may include:
- website and hosting providers;
- e-commerce and payment service providers;
- email and customer-communication providers;
- video hosting and digital-content providers;
- analytics and technical-service providers;
- professional advisers where reasonably necessary;
- public authorities where disclosure is required by law.
Where a processor handles personal data on our behalf, we require appropriate contractual and security arrangements.
International transfers
Some service providers may process data outside the European Economic Area. Where personal data is transferred internationally, we use or rely on an appropriate transfer mechanism where required by law, such as an adequacy decision or approved contractual safeguards.
How long do we retain data?
We keep personal data no longer than reasonably necessary for the purpose for which it was collected, unless a longer period is required by law.
- financial and core business records are retained for the applicable statutory retention period;
- account information may be retained while an account remains active and for a reasonable period afterwards where necessary;
- customer-service correspondence is retained only as long as reasonably necessary to handle the matter and maintain appropriate records;
- marketing preferences are retained as needed to respect subscriptions, withdrawals and opt-outs.
Cookies, analytics and social media
Our website may use cookies or similar technologies for functionality, security and analytics. We use Google Analytics to obtain information about the use and performance of the website. Depending on the technical configuration, analytics services may use first-party cookies or similar identifiers.
Where applicable law requires consent before non-essential cookies or similar technologies are used, such processing must be based on valid consent. Browser settings may also allow you to block or delete cookies.
Links to social-media services lead to websites operated by third parties. If you follow those links, the relevant provider processes data under its own privacy terms.
Security
We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure. No online system can be guaranteed to be completely secure, but we review and adjust safeguards where reasonably necessary.
Your privacy rights
Subject to the conditions of the GDPR and other applicable law, you may have the right to:
- request access to your personal data;
- have inaccurate or incomplete data corrected;
- request deletion of personal data where the legal conditions are met;
- request restriction of processing;
- object to certain processing, including direct marketing;
- receive or transfer certain data in a portable format;
- withdraw consent at any time where processing is based on consent.
You may send a request to info@theshroudcodes.com. We may need to verify your identity before acting on a request. We will normally respond within one month. In legally permitted cases, that period may be extended by up to two additional months; if so, we will inform you within the initial one-month period.
Complaints
If you have a concern about our use of personal data, please contact us first so that we can investigate it. You also have the right to lodge a complaint with the competent supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
General website and research disclaimer
The Shroud Codes presents documentary, historical, scientific, archaeological, theological and other research-related material for general informational and educational purposes. The website and its content do not constitute legal, medical, financial or other professional advice.
We make reasonable efforts to present material carefully and to distinguish documented findings, interpretation and hypothesis. Nevertheless, research develops, sources may be disputed and information can become outdated. Except where the law does not permit exclusion or limitation, DRL Services B.V. does not guarantee that all website content will at all times be complete, error-free or current.
Copyright, video and other content
Unless stated otherwise, the texts, documentary material, graphics, design elements and other original content on this website are protected by intellectual-property rights. Access to content does not transfer ownership or grant a general right to reproduce, republish, distribute, broadcast, publicly display, modify or commercially exploit that content.
Documentary and video content is intended for the access and use expressly permitted by the relevant purchase, licence or page. Copying, recording, redistributing, rebroadcasting or commercially exploiting such content without prior written permission is prohibited, except where mandatory law provides otherwise.
Translations
We may provide translated versions of website content, books, legal information or other materials for accessibility and convenience. We take care in preparing translations, but differences in wording, nuance or interpretation may occur.
Unless expressly stated otherwise, the English version is the editorial source version. If a translated version differs materially from the English source, the English wording should be consulted to determine the intended meaning. Automatic browser translations are provided by third-party browser technology and are outside our control.
Changes to this statement
We may update this Privacy Statement and Disclaimer when our website, services, technology or legal obligations change. The date at the top of this page shows when this version was last updated. Material changes may also be communicated through the website where appropriate.