Privacy policy

Drippiez Room respects your privacy and handles personal data carefully. This Privacy Policy explains what information we collect, why we use it, who we may share it with and what rights you have under the General Data Protection Regulation (GDPR/AVG).

1. Who We Are

Drippiez Room is responsible for the processing of personal data described in this Privacy Policy.

2. What Personal Data We Collect

When you use our webshop, place an order or contact us, we may collect:

your name, email address, telephone number, billing address and delivery address;
order, payment, delivery, return and refund information;
customer account details and preferences;
messages and customer service requests;
marketing preferences and newsletter subscriptions; and
technical information such as your IP address, browser, device information, cookies and website usage.

Payment card details are generally processed directly by our payment providers and are not stored by Drippiez Room.

3. How and Why We Use Your Data

We use personal data to:

process payments, orders, deliveries, returns and refunds;
manage customer accounts and provide customer service;
comply with tax, accounting and other legal obligations;
protect our webshop and prevent fraud or misuse;
improve our website and shopping experience; and
send marketing or show personalised advertising where permitted by law.

Depending on the purpose, we process your data because it is necessary to perform our agreement with you, comply with a legal obligation, pursue a legitimate business interest or because you have given consent.

4. Who We Share Data With

We may share personal data where necessary with:

Shopify, which hosts and supports our online store;
payment providers and financial institutions;
shipping and logistics providers;
IT, hosting, analytics and technical service providers;
accounting or professional advisers;
marketing and advertising providers where legally permitted; and
public authorities where disclosure is legally required.

Our store is powered by Shopify. Shopify may process customer information on our behalf and, in some cases, for its own purposes. More information is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

5. Cookies and Marketing

Our website may use functional, analytical and marketing cookies or similar technologies.

Where consent is legally required, non-essential cookies and tracking technologies will only be used after you have made a choice through our cookie banner or privacy settings. You can change or withdraw your cookie choices at any time through the available privacy settings.

If you subscribe to marketing emails, you can unsubscribe at any time using the link in the email. You may still receive essential messages relating to orders, deliveries, returns or your account.

6. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purpose for which it was collected or for as long as required by law.

Financial and transaction records that form part of our administration are generally retained for 7 years in accordance with Dutch tax requirements. Other information is deleted or anonymised when it is no longer needed, unless a longer retention period is legally required.

7. International Data Transfers

Some service providers, including Shopify, may process personal data outside the European Economic Area (EEA).

Where required, appropriate safeguards are used for these transfers, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

8. Your Privacy Rights

Under the GDPR, you may have the right to:

access your personal data;
correct inaccurate information;
request deletion of your data;
restrict or object to certain processing;
request data portability; and
withdraw consent where processing is based on consent.

To exercise these rights, contact us at info.drippiezroom@gmail.com we may need to verify your identity before processing your request.

If you believe your personal data is being processed unlawfully, you also have the right to lodge a complaint with the Autoriteit Persoonsgegevens in the Netherlands.

9. Security, Children and Updates

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

Although Drippiez Room sells children's clothing, our webshop and purchasing services are intended for adults. We do not knowingly collect personal data directly from children for purchasing purposes.

We may update this Privacy Policy when our services, technology or legal requirements change. The latest version will always be published on our website.