Privacy Policy

Guren Streetwear is a sole proprietorship (eenmanszaak) registered in the Netherlands. We are responsible for the processing of your personal data as described in this privacy policy.

Trade name: Guren Streetwear
Chamber of Commerce (KvK): [Fill in: KvK number]
VAT number: [Fill in: VAT number]
Address: [Fill in: address]
Email: info@gurenstreetwear.nl

We only process data strictly necessary for fulfilling our services:

• Account data: email address and password (or Google account) when creating an account.
• Order data: name, delivery address, postcode, city and country when placing an order.
• Payment data: payment information is processed by our payment provider Mollie. We do not store full payment details.
• Communications: email address for sending order confirmations and shipping notifications.

We do not collect marketing data, tracking cookies, or browsing behaviour profiles.

• Processing and fulfilling your orders.
• Sending order confirmations and shipping notifications by email.
• Maintaining an account so you can access your order history.
• Complying with our legal obligations (tax administration).

We do not use your data for profiling, advertising, or resale to third parties.

We process your personal data on the following legal grounds:

• Performance of a contract (Art. 6(1)(b) GDPR): processing is necessary to fulfil and deliver your order.
• Legal obligation (Art. 6(1)(c) GDPR): retention of invoice data for tax purposes.
• Legitimate interest (Art. 6(1)(f) GDPR): securing our webshop and preventing fraud.

We use the following service providers who process personal data on our behalf:

• Supabase Inc. (US/EU): database hosting and authentication. Data is stored in the EU. Supabase is SOC 2 Type II certified.
• Mollie B.V. (Netherlands): payment processing. Mollie is a licensed payment service provider (AFM/DNB) and processes payment data as an independent controller.
• Brevo (Sendinblue SAS) (France): sending transactional emails (order confirmations, shipping notifications).
• Railway Corp. (US): server hosting of the webshop application.

We have signed data processing agreements with all sub-processors in accordance with the GDPR.

• Order and invoice data: 7 years, as required by Dutch tax law.
• Account data: for as long as your account is active. If you delete your account, we delete your data within 30 days — except for data we are legally required to retain.
• Newsletter: until you unsubscribe or object. You can always unsubscribe via the link in any email.

We use exclusively functional cookies that are strictly necessary for the operation of the webshop:

• Session cookie (Supabase): keeps you logged in during your visit and secures your shopping cart and checkout session.

We place no analytics cookies, tracking cookies, or advertising cookies. Strictly necessary cookies do not require consent under EU law, but we inform you regardless for transparency.

As a data subject, you have the following rights:

• Right of access (Art. 15): you may request to know which data we process about you.
• Right to rectification (Art. 16): you may request correction of inaccurate data.
• Right to erasure (Art. 17): you may request deletion of your data, unless we are legally required to retain it.
• Right to data portability (Art. 20): you may request your data in a common machine-readable format.
• Right to object (Art. 21): you may object to processing based on legitimate interest.
• Right to restriction (Art. 18): you may request temporary restriction of processing.

Send your request to info@gurenstreetwear.nl. We will respond within 30 days.

If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.

We take appropriate technical and organisational measures to protect your personal data. Our webshop uses HTTPS, and access to the database is restricted to authorised systems and personnel.

We may update this privacy policy. For material changes, we will notify you by email (if you have an account) or via a notice on the website. The date of the latest update is always shown at the top.

Questions about this privacy policy? Contact us at info@gurenstreetwear.nl.

See also our Terms and Conditions.