Privacy Policy

01Who we are

THKR Detailhandel B.V., Hoogstraat 81a, 4251 CJ Werkendam, Netherlands, KvK 91133483. You can contact us about privacy at support@deficlothing-store.com or +31 183 505 010. We have not appointed a data protection officer, as this is not required for our business.

02What data we collect

• Order data: name, delivery and billing address, email address, phone number, the products you order, order number, amounts paid and order status.
• Payment data: card payments are handled by Stripe. We receive the payment status, card brand, the last four digits and expiry date of the card, but never the full card number or security code.
• Contact data: the name, email address, order number and message you send us through the contact form, by email or by phone.
• Technical data: IP address, browser type and the pages you request, which our hosting provider records in server logs for security.

We do not collect special categories of personal data, and we do not knowingly collect data from children under 16.

03Why we use your data and our legal basis

We do not send newsletters or marketing emails, and we do not use your data for profiling or automated decision-making.

04Who receives your data

We share personal data only with the service providers we need to run the shop. They process it on our behalf or as independent controllers for their own legal duties:

• Stripe (Stripe Payments Europe, Ltd., Ireland): payment processing and fraud prevention.
• PostNL (PostNL Pakketten Benelux B.V., Netherlands): delivery and returns. PostNL receives your name, delivery address, email address and, if you provide it, your phone number, so it can deliver your parcel and send track-and-trace updates.
• Hostinger (Hostinger International Ltd.): hosting of this website and our email.
• WooCommerce (WordPress software on our own hosting): our order system. Your order data is stored in our own database.

We never sell your personal data. We may share data with authorities when the law requires it.

05International transfers

Some providers, such as Stripe, may process data outside the European Economic Area. When that happens, the transfer is protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or by the European Commission’s standard contractual clauses.

06Cookies

This website only uses cookies that are strictly necessary for it to work, so we do not ask for consent and do not show a cookie banner:

• WooCommerce cookies (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*): remember the contents of your cart. They expire after your session or within 2 days.
• Stripe cookies (__stripe_mid, __stripe_sid): set on the checkout page to process payments securely and prevent fraud.

We do not use analytics, advertising or social media cookies or tracking pixels. Our fonts are stored on our own server, so no data is sent to font services. If we ever add non-essential cookies, we will ask for your consent first and update this policy.

07External links

Our website links to Trustpilot, where customers can read and write reviews, and to PostNL track-and-trace. When you follow these links, the privacy policy of that website applies.

08How long we keep your data

• Order, payment and invoice records: 7 years, as required by Dutch tax law (Article 52 of the General Tax Act).
• Contact messages that are not part of an order: up to 12 months after the matter is resolved.
• Server logs: up to 30 days, unless needed to investigate a security incident.

09How we protect your data

The whole website uses an encrypted HTTPS connection. Card details are entered on Stripe’s secure payment fields and never reach our server. Access to order data is limited to the people who handle orders, and our systems are kept up to date.

10Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on legitimate interest, you may object at any time. To use these rights, email support@deficlothing-store.com. We reply within one month. We may ask you to confirm your identity.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

11Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last updated.

12Seller and contact information

This policy is issued by the seller below. Questions about it can be sent to us by email or phone during opening hours. We reply to emails within 1 business day.