Privacy policy

Last updated: February 7, 2026

wabi shop operates this store and website, including all related information, content, features, tools, products and services (the “Services”) to provide you with a curated shopping experience. wabi shop is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how wabi shop collects, uses, stores, and shares your personal information when you visit, use, or make a purchase from the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will apply with respect to the collection, processing, and disclosure of your personal information.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

When we refer to “personal information”, we mean information that identifies you or can reasonably be linked to you. This does not include anonymised or de-identified data.

Depending on how you interact with the Services, we may collect the following categories of personal information:

Contact details: name, billing and shipping address, email address, phone number
Payment information: payment method, transaction details and confirmations (payment card details are processed securely by our payment providers and not stored by us)
Account information: username, password, preferences and settings
Order and transaction information: products viewed, added to cart or purchased, order history, returns and exchanges
Customer communications: messages you send to us via email or customer support
Device and technical data: IP address, browser type, device identifiers
Usage data: how you browse and interact with the Services

2. Sources of Personal Information

We collect personal information from the following sources:

Directly from you, when you place an order, create an account, contact us, or otherwise interact with the Services
Automatically, through cookies and similar technologies when you use the Services
From service providers, such as Shopify, payment providers, shipping partners, and analytics tools
From third parties, where permitted by law (for example, marketing or advertising partners)

3. How and Why We Use Your Personal Information (Legal Bases)

Under the EU General Data Protection Regulation (GDPR), we must have a valid legal basis to process your personal information. Depending on the context, we rely on the following bases:

a. Performance of a Contract

We process personal information to:

Process and fulfil orders
Handle payments, shipping, returns and exchanges
Create and manage customer accounts
Provide customer support

This processing is necessary to fulfil our contract with you.

b. Legal Obligations

We process personal information where required to:

Comply with Dutch tax and accounting laws
Respond to lawful requests from authorities

c. Legitimate Interests

We process personal information where necessary for our legitimate business interests, including:

Fraud prevention and security
Improving and optimising our Services
Website analytics and performance
Managing customer relationships

We only rely on legitimate interests where they do not override your rights and freedoms.

d. Consent

We rely on your explicit consent for:

Marketing communications (such as newsletters and promotional emails)
Non-essential cookies and tracking technologies

You may withdraw your consent at any time.

4. Marketing Communications

If you choose to receive marketing communications from us, we may send you emails about new products, offers or updates.

You will only receive marketing emails if you have opted in
You can unsubscribe at any time using the link in our emails
Even if you unsubscribe, we may still send you non-promotional messages related to your orders or account

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services.

👉 Cookie details (types, purposes, providers, and retention periods) will be listed here.
This section will be updated to reflect the cookies used on the Services.

You can manage or withdraw your cookie consent at any time via our cookie banner or settings.

6. How We Share Personal Information

We may share your personal information with trusted third parties only where necessary, including:

Shopify, which hosts our store and provides core e-commerce functionality
Payment providers, to securely process transactions
Shipping and fulfilment partners, to deliver your orders
IT, analytics, and customer support providers
Marketing partners, where you have given consent

All third parties are required to process your data in accordance with applicable data protection laws.

We may also disclose personal information where required to comply with legal obligations or in connection with a business transfer (such as a merger or sale).

7. Relationship with Shopify

Our store is hosted on Shopify. Shopify processes personal information on our behalf and, in some cases, as an independent data controller for its own purposes.

You can learn more about how Shopify uses personal information and exercise your rights in relation to Shopify-processed data via the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

8. International Transfers

Your personal information may be transferred to and processed outside the European Economic Area (EEA).

Where this occurs, we rely on approved safeguards such as:

European Commission Standard Contractual Clauses
Transfers to countries recognised as providing an adequate level of data protection

9. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, including:

Order and accounting records: up to 7 years, in line with Dutch tax law
Customer account information: for as long as your account remains active
Marketing data: until you withdraw consent

When data is no longer required, it is securely deleted or anonymised.

10. Your Rights Under GDPR

If you are located in the EU or EEA, you have the right to:

Access your personal information
Correct inaccurate data
Request deletion of your data
Restrict or object to processing
Withdraw consent at any time
Request data portability
Lodge a complaint with a supervisory authority

In the Netherlands, the supervisory authority is:

Autoriteit Persoonsgegevens
https://autoriteitpersoonsgegevens.nl

11. Children’s Data

The Services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Security

We take reasonable technical and organisational measures to protect your personal information. However, no system is completely secure, and we cannot guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the “Last updated” date will be revised.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: info@wabi-shop.com