Privacy & GDPR
Privacy policy
How Trip Shave Club processes personal data: what data, legal basis, retention period and your rights under the GDPR.
1. Data controller
The controller for the processing of personal data via this website is [seller legal name], trading as Trip Shave Club. For privacy questions, please contact us via our contact form.
2. What data & legal basis
We only process the data you provide yourself and that is necessary to help you:
- Contact and request forms: name, email address, phone number, company and your message. Legal basis: your consent and/or pre-contractual measures.
- Orders: name, delivery address, email address, phone number and order details. Legal basis: performance of the agreement.
- Payment: the payment service provider processes your payment details; we only receive the status of the payment. Legal basis: performance of the agreement.
- Invoicing & administration: Legal basis: legal obligation (tax retention requirement).
3. Purposes
We use your data solely to handle your request or order, deliver and invoice your order, contact you and comply with legal obligations. We never sell your data and do not use it for profiling or automated decision-making.
4. Retention periods
- Requests via contact forms: up to a maximum of 24 months after the last contact, then deleted.
- Order and customer data: for as long as necessary for performance and warranty.
- Invoices and accounting: 7 years (statutory tax retention requirement).
5. Sharing with third parties
We only share your data with parties needed to provide the service, such as the delivery service (for delivery) and the payment service provider (for payment). Data processing agreements have been concluded with these parties where required. We only provide data to government authorities when legally obliged to do so.
6. Transfers outside the EEA
We aim to process your data within the European Economic Area (EEA). If a transfer to a country outside the EEA nevertheless takes place, this only happens with appropriate safeguards, such as the European Commission’s standard contractual clauses.
7. Security
We take appropriate technical and organisational measures to protect your data against loss or unlawful processing, including encrypted connections (TLS) and restricted access. If you notice a vulnerability, please report it via our contact form.
8. Your rights
Under the GDPR you have the right to access, rectify and erase your personal data, the right to restrict and object to processing, and the right to data portability. If you have given consent, you can withdraw it at any time. You can submit a request via our contact form. We respond within one month. We may ask for additional identification for verification.
9. Cookies
How we handle cookies and similar techniques is explained in the cookie policy.
10. Complaint & changes
If you disagree with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl). We may amend this privacy policy; the current version is always shown on this page with the date of the last change.
See also: Terms & conditions Returns Shipping & payment Cookies