Privacy Policy

1. Who we are

Bottega Noord (“we”, “us”, “our”) operates the webshop at botteganoord.store. We are based in Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under KvK 97159239 (VAT NL005252241B41). For any privacy question, contact us at orders@botteganoord.nl. We are the data controller for personal data processed through this webshop within the meaning of the EU General Data Protection Regulation (GDPR) and the Dutch UAVG.

See our contact page for our full company details.

2. What we collect

• Order data: name, delivery address, billing address, email, phone number, order contents and totals.
• Payment data: processed directly by our payment provider. We only receive a transaction reference and status — never full card details.
• Account & correspondence: any messages you send us, wholesale enquiries, and preferences you set.
• Technical data: IP address, device and browser type, referring page, and interaction data collected via essential cookies and — with your consent — analytics cookies.

3. Why we process it (legal basis)

• Performance of a contract — to process, pack, ship and support your order.
• Legal obligation — to keep invoices and tax records for the period required by Dutch law (currently seven years).
• Legitimate interest — to secure the site, prevent fraud, and improve the shop.
• Consent — for analytics cookies, marketing emails and any other optional processing. You can withdraw consent at any time.

4. Who we share data with

We share personal data only with processors we need to run the shop: Shopify (checkout, order and payment processing), our shipping carrier, our email and hosting providers, and our accountant. Each acts under a data processing agreement. We never sell your data.

Some processors may be located outside the EEA. Where that is the case, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

Order and invoice data: seven years (Dutch tax law). Account and contact data: as long as your account is active, plus two years. Marketing consent: until you unsubscribe. Analytics data: up to fourteen months.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these, email orders@botteganoord.nl. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

7. Cookies

See our Cookie Policy for the full list of cookies and how to manage them.

8. Changes

We may update this policy from time to time. Material changes will be announced on this page with a new “last updated” date.