Privacy Policy

Overview

This store is operated ByNouck B.V.

ByNouck B.V.
Grote Houtstraat 120A
2011 St Haarlem
The Netherlands

KVK: 75229455
BTW: NL860197931B01

In this privacy policy we explain what personal data we collect, how we process and secure it, and which cookies and third-party services we use to deliver our store services. This policy has been updated to meet the data protection standards of 2025 and reflects our commitment to safeguarding your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

Section 1 – What Information Do We Collect, and What Do We Use It For?

When you purchase something from our store, we collect the personal data you provide – such as your first name, last name, address, country, and email address – as part of the buying process. Additionally, when you browse our store, we automatically receive your device’s Internet Protocol (IP) address. This information helps us understand your browser and operating system, and we also store details of the items you add to your cart.

If you opt in for email marketing, with your permission we may send you emails about our store, new products, and other updates.

The personal data we process includes:

• First and last name

• Gender

• Date of birth

• Birthplace

• Address details

• Telephone number

• Email address

• Any other information you actively provide (for example, by creating a profile, corresponding with us, or via telephone)

• Location data

• Information about your activities on our website

• Details of your browsing behavior across different websites (where applicable)

• Internet browser and device type

• Bank account number

We process your personal data to:

• Handle your payments

• Send you our newsletter

• Contact you if necessary to provide our services

• Inform you about changes to our services and products

• Offer you the opportunity to create an account

• Deliver goods and services to you

• Analyze your behavior on our website to improve our site and tailor our products and services to your preferences

• Comply with legal obligations, such as those required for tax purposes

Section 2 – Legal Basis

When you provide us with personal data to complete a transaction, verify your payment method, place an order, arrange delivery, or return a purchase, we process your data solely for these purposes. Providing this information is not a statutory or contractual obligation, and you are not required to provide it. However, without a valid delivery address or email address, we cannot complete your order or keep you informed about its status.

Section 3 – Third-Party Services

In general, the third-party providers we use will collect, use, and disclose your information only to the extent necessary to perform their services. We have processor agreements in place to ensure that your data is handled securely and confidentially. Please note the following key third-party services:

Shopify

Our store is hosted on Shopify Inc., which provides the online e-commerce platform that allows us to sell our products and services. Your data is stored on Shopify’s secure servers behind a firewall. For more information, please review Shopify’s privacy statement.

Payment Providers

If you choose a direct payment gateway, Shopify stores your credit card data in compliance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is retained only as long as necessary to complete the transaction and is then deleted. All direct payment gateways adhere to PCI-DSS standards.

Mollie

Mollie processes some payments (except for Shopify Payments) on our website. They use your name, address, and email address for invoices and transaction processing.

Klaviyo

If you opt in for email marketing, your name and email address will be shared with Klaviyo solely for the purpose of sending newsletters and marketing communications.

Section 4 – How We Handle Your Information

Security

To protect your personal data, we implement state-of-the-art security measures and follow industry best practices. Sensitive information, such as your credit card details, is transmitted using Secure Socket Layer (SSL) technology and stored with strong encryption (AES-256 or equivalent). While no method of Internet transmission or electronic storage is 100% secure, we adhere to all PCI-DSS requirements and additional accepted industry standards.

Data Retention

We do not store your personal data longer than necessary to fulfill the purposes for which it was collected. Retention periods are determined by the nature of the data and our legal obligations. For instance:

• Data used for processing payments is retained only as long as necessary to complete the transaction.

• Data used for sending newsletters or notifications is kept only for the duration of your subscription.

• Account-related data is retained for as long as your account is active, or as required by law.

Sharing of Personal Data

We share your personal data with third parties only when necessary to execute our agreements with you or to comply with legal obligations. This may include transferring your data in the event of a merger or acquisition, but only with your explicit consent or as required by law. Rest assured, we do not publish or sell your customer data. For details on third-party data sharing, please refer to our detailed data sharing table available upon request.

Section 5 – Cookies

Shopify Cookies

Our store uses Shopify’s analytics and functional cookies. Only Shopify can store and read information based on these cookies. Examples include:

• _session_id: A unique number stored for the duration of your shopping session to capture session analytics (such as referrer and landing page).

• _shopify_visit: Used by Shopify’s internal stats tracker to record the number of visits; this cookie is deleted 30 minutes after your last visit.

• _shopify_uniq: Counts the number of visits from a single customer and expires at midnight (relative to the visitor) of the following day.

• cart: A functional cookie with a unique token that stores information about the contents of your cart for two weeks.

• _secure_session_id: Secures your shopping session and is stored for the duration of that session.

• storefront_digest: Checks whether the current visitor has access when the store is password protected; this cookie is stored indefinitely.

Section 6 – Your Rights

You have the right to request access to the personal data we process about you. Additionally, you have the right to:

• Rectify any incorrect personal data or erase it in certain circumstances.

• Restrict or object to the processing of your personal data.

• Receive your data in a structured, commonly used, and machine-readable format (data portability).

• Withdraw your consent at any time (this does not affect the lawfulness of processing based on your consent prior to withdrawal).

If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a supervisory authority.

Section 7 – Dutch Data Protection Authority

If you have any concerns or complaints regarding the processing of your personal data, you may contact the Dutch Data Protection Authority. If you are unsure who your supervisory authority is, please contact us and we will assist you.

How to Contact Us

If you have any questions or concerns about the processing of your personal data or our use of cookies, or if you wish to exercise any of your rights, please contact us at:

info@bynouck.com

Last Updated: 2025