Privacy policy

Last updated: 16 November 2025

Privacy-sensitive data – in other words, personal data – is processed through our online store.
Hugsback considers careful handling of personal data very important. That is why we process and secure your data with care.

When processing data, we comply with the requirements of the General Data Protection Regulation (GDPR). This means, among other things, that we:

  • clearly state the purposes for which we process personal data;
  • not collect more data than necessary;
  • ask for your consent first when required;
  • take appropriate security measures;
  • respect your rights to access, correct or delete your data.

Hugsback is responsible for data processing. In this privacy statement, we explain which personal data we collect, what we use it for and which parties we work with. We recommend that you read this statement carefully.

If you have any questions, you can always contact Hugsback (contact details below).

Processing your order

When you order something from our online store, we need personal data to process your order properly. For this purpose, we use:

  • your name and address details
  • phone number
  • email address
  • payment details
  • shipping details

This data is used to:

  • process the order
  • process payments via Mollie
  • keep you informed about the status of your order
  • deliver the order via our shipping partner Sendcloud (which works with delivery services such as PostNL, DHL, etc.)

The legal basis for this is the performance of the agreement.

We retain this information for up to two years after the order has been completed.
We retain some data (such as invoices) for seven years due to the statutory tax retention obligation.

Sharing with third parties

We work with various parties that may receive your personal data when necessary for our services.

These parties include:

• Shopify (hosting of our online store)

Shopify processes personal data to make our online store possible.

• Mollie (payment processing)

For iDEAL, Bancontact, credit card, Klarna and other payment methods.

• Sendcloud (shipping processing)

For printing shipping labels and passing on shipping details to carriers.

• Klaviyo (email marketing & newsletter)

Only when you subscribe yourself.

• Meta (Facebook/Instagram) & TikTok

Only when you give consent for marketing cookies.

These parties process personal data in accordance with their own privacy policies and comply with the GDPR.

We never share your data with other companies or organisations, unless we are legally required to do so (for example, in a police investigation).

Statistics and analytics

We keep statistics on the use of our webshop. This helps us improve the website and display more relevant information.

For this, we use:

  • Shopify Analytics
  • Google Analytics (IP address not anonymised due to tracking choice)

We have a data processing agreement with Google and have made strict arrangements about what they may do with the data.

We do not unnecessarily combine statistical data with other personal data.

Cookies and tracking

Our webshop uses cookies. We use them for:

Functional cookies

Necessary for the webshop to function properly (login, shopping cart, preferences).

Analytics cookies

To measure how visitors use our webshop.

Marketing cookies (only with consent)

For personalised advertising via:

  • Meta Pixel
  • TikTok Pixel
  • Klaviyo (email behaviour)

On your first visit, we display a cookie banner allowing you to give or refuse consent.

You can always disable cookies through your browser settings.

Advertising and newsletters

We only send advertising or newsletters if you have signed up for them.

We then send messages via:

  • email (Klaviyo)
  • possibly WhatsApp (only if you sign up for it)

Every marketing email contains an unsubscribe link.

You can unsubscribe at any time.

Security

We take security measures to prevent misuse, loss or unwanted access to personal data.

This includes:

  • secure connections (SSL)
  • secure storage via Shopify
  • access security
  • regular updates

We closely monitor potential vulnerabilities and continuously adjust security measures.

Retention periods

We never retain personal data longer than necessary.

  • Order data: 2 years
  • Invoice data: 7 years (legal obligation)
  • Newsletter data: until unsubscribing
  • Support messages: up to 2 years
  • Account data: as long as the account is active

Your rights

Under the GDPR, you have the following rights:

  • receive an explanation of which personal data we hold
  • access the data we hold about you
  • have errors corrected
  • have outdated data deleted
  • have data transferred
  • withdraw consent
  • object to a specific use

When making a request, always provide clear identification so that we can ensure the correct data is amended.

Submit a complaint

Do you feel that we are not properly helping you with your privacy rights?
You then have the right to submit a complaint to:

Dutch Data Protection Authority
https://autoriteitpersoonsgegevens.nl

Changes to this privacy statement

We may amend this privacy statement from time to time.
We recommend reviewing this statement regularly to stay informed of any changes.

Contact details

Hugsback
Broekkantsedijk 32
5482ET Schijndel
The Netherlands

Email: info@hugsback.com
WhatsApp: +31 6 45972787
Chamber of Commerce: 97949620
VAT number: NL868300500B01