Privacy Policy
Last updated: 2 October 2026
In this privacy policy we explain which personal data we process when you visit fits4kids.com, place an order or contact us, why we do so, with whom we share it and which rights you have. Questions? Email us at info@fits4kids.store.
1. Who is responsible for your data?
The controller for the processing described in this policy is DR Commerce B.V. (trading as Fits4Kids), Industrieweg 10C, 5145 PV Waalwijk, the Netherlands. Email: info@fits4kids.store. Phone: +31 85 130 4093. Chamber of Commerce (KVK) number: 42088785.
This policy applies to the English-language version of our online shop on fits4kids.com. Our establishment is in the Netherlands.
2. Which data do we process, why, and on what legal basis?
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Processing your order: payment, shipping, order confirmation, delivery updates | Name, delivery and billing address, email address, phone number (optional), order details, payment status (we do not see your full card details) | Performance of the contract (art. 6(1)(b)) |
| Customer account (optional) | Name, email address, password (encrypted), addresses, order history | Performance of the contract (art. 6(1)(b)) |
| Withdrawal, returns, reimbursing return costs, complaints, legal guarantee and manufacturer's warranty | Name, email address, order number, products, date received, reason (optional), correspondence, photos you send us, receipt of your return label | Performance of the contract and legal obligation (art. 6(1)(b) and (c)) |
| Customer service by email, phone or our contact form | Contact details and the content of your message | Performance of the contract, or our legitimate interest in answering your questions (art. 6(1)(b) and (f)) |
| Bookkeeping and tax obligations | Order and invoice data | Legal obligation (art. 6(1)(c)) |
| Security of the shop and fraud prevention | IP address, device and browser data, order data | Legitimate interest in a secure shop (art. 6(1)(f)) |
| Sending the discount code you request via our pop-up | Email address | Performance of your request (art. 6(1)(b)) |
| Newsletter, if you choose to receive it | Email address, sign-up date, your marketing consent | Consent (art. 6(1)(a)) |
| Review invitation via WebwinkelKeur | Name, email address, order number | Legitimate interest in collecting genuine reviews (art. 6(1)(f)); you can object at any time |
| Strictly necessary cookies (cart, language, security, saving your cookie choice) | Cookie data, see our cookie policy | Legitimate interest (art. 6(1)(f)) |
| Statistics (Google Analytics, Hotjar) | Cookie IDs, IP address, pages visited, clicks, mouse movements and scrolling (Hotjar), device and browser data | Consent (art. 6(1)(a)) |
| Advertising and measuring advertising (Google Ads, Meta, TikTok) | Cookie IDs, IP address, pages visited, products viewed and purchased, device and browser data | Consent (art. 6(1)(a)) |
You are not obliged to give us your personal data. However, we need your name, address and email address to process and deliver your order. Without that data, we cannot accept your order. Your phone number is optional. We do not ask for your date of birth.
We receive most data directly from you. Some data we receive from our service providers, for example the payment status from the payment provider, the delivery status from the carrier and, if you consent to cookies, statistics from Google and Hotjar.
3. Discount code and newsletter
Our discount pop-up asks for your email address so that we can send you the discount code. We store your email address in our shop system (Shopify). If you also tick that you want to receive our newsletter, we send you news and offers by email. You can unsubscribe at any time via the link in every newsletter or by emailing us.
4. Automated decisions
We do not make decisions about you that are based solely on automated processing and that have legal or similarly significant effects. Our shop platform Shopify and our payment providers carry out automated fraud checks on orders. If an order is flagged, a person from our team always reviews it before any decision is taken.
If you pay with Klarna, Klarna carries out its own credit check. Klarna does this as an independent controller under its own privacy policy.
5. Who receives your data?
We only share your data where this is necessary for the purposes above. Our service providers process your data on our instructions under a data processing agreement, unless stated otherwise below.
| Recipient | Purpose | Location / transfer outside the EEA |
|---|---|---|
| Shopify International Limited (Dublin, Ireland) | Shop platform, checkout, hosting, Shop Pay, customer accounts, customer list | EU; transfers to Canada (adequacy decision) and the USA (EU-US Data Privacy Framework or standard contractual clauses) are possible |
| Payment providers: Shopify Payments (with Stripe), PayPal and Klarna | Processing payments, fraud prevention, credit check (Klarna). PayPal and Klarna partly act as independent controllers under their own privacy policies | EU; transfers to the USA are possible (EU-US Data Privacy Framework or standard contractual clauses), depending on the provider |
| Fulfilment partner Verzendbazen | Storing, packing and shipping your order; choosing the carrier | EU |
| The carrier chosen by Verzendbazen | Delivering your parcel, delivery notifications | EU |
| Stichting WebwinkelKeur (the Netherlands) | Trust mark, review invitations, review widget, mediation in disputes | EU |
| Kaching Bundles | Applying bundle discounts in the shopping cart | Data is stored in your browser; see our cookie policy |
| Hosting provider of our online withdrawal form (Supabase) | Storing withdrawal notifications you submit via our online withdrawal page | Only with appropriate safeguards (see section 6) |
| Hotjar Ltd. (Malta) | Statistics: heatmaps and session recordings, only with your consent. Text you type in input fields is not recorded | EU |
| Google Ireland Limited (Google Analytics, Google Ads) | Statistics and advertising, only with your consent | Transfers to the USA (EU-US Data Privacy Framework) |
| Meta Platforms Ireland Limited (Meta pixel, Facebook and Instagram) | Measuring and targeting advertising, only with your consent | Transfers to the USA (EU-US Data Privacy Framework) |
| TikTok Technology Limited (Ireland) (TikTok pixel) | Measuring and targeting advertising, only with your consent | Transfers to the USA and Singapore (standard contractual clauses) |
| Google Fonts (Google Ireland Limited) | Displaying the fonts on our website; your browser sends your IP address to Google | Transfers to the USA (EU-US Data Privacy Framework) |
| Authorities, such as the tax authorities | Only if we are legally obliged to share data | Netherlands |
Messages you send via our contact form arrive in our own mailbox. You can also contact us via WhatsApp. WhatsApp (Meta Platforms Ireland Ltd.) then processes your phone number and messages as an independent controller and may transfer data to Meta in the US under the EU-US Data Privacy Framework. We only use your WhatsApp messages to answer your question.
For the Meta pixel, we and Meta Platforms Ireland Limited are jointly responsible for collecting your data on our website and transmitting it to Meta. Meta is solely responsible for the further processing. You can read more in Meta's privacy policy.
We do not sell your personal data.
6. Transfers outside the European Economic Area
Some recipients process data outside the European Economic Area (EEA). We only allow this if your data is properly protected:
- for the USA, through the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023), where the recipient is certified;
- for Canada, through the adequacy decision of the European Commission;
- in other cases, through the standard contractual clauses of the European Commission, combined with additional measures where necessary.
You can request a copy of the relevant safeguards by emailing info@fits4kids.store.
7. How long do we keep your data?
| Data | Retention period |
|---|---|
| Order and invoice data | 7 years, because of Dutch tax law |
| Customer account | As long as your account exists. You can ask us to delete your account at any time; data we must keep for tax reasons is kept for the statutory period |
| Customer service emails, withdrawal notifications, returns, complaints and warranty claims | As long as needed to handle them, and at most 2 years after the last contact. Data that forms part of our bookkeeping is kept for the statutory tax retention period of 7 years |
| Email address for the discount code and newsletter | Until you unsubscribe. After unsubscribing we only keep your email address on a block list, to make sure you no longer receive emails |
| Cookies | See the retention periods in our cookie policy. Statistics and advertising data are deleted by the providers in accordance with their retention settings |
8. Your rights
- Access: you can ask which personal data we process about you and receive a copy.
- Rectification: you can have incorrect or incomplete data corrected.
- Erasure: you can ask us to delete your data, unless we must keep it for a legal reason (for example tax law).
- Restriction: you can ask us to temporarily restrict the processing of your data.
- Data portability: you can receive the data you provided to us, which we process on the basis of your consent or a contract, in a structured, commonly used and machine-readable format, or have it transferred to another party.
- Objection: you can object at any time to processing based on our legitimate interest, on grounds relating to your particular situation. You can always object to the use of your data for direct marketing and to review invitations; we then stop immediately.
- Withdrawing consent: you can withdraw your consent at any time, for example via "Cookie settings" at the bottom of every page or the unsubscribe link in every newsletter. This does not affect the lawfulness of processing before the withdrawal.
To exercise your rights, email info@fits4kids.store. We respond within one month. If your request is complex or we receive many requests, we may extend this period by up to two months; we tell you this within the first month. We may ask you to confirm your identity, but never ask for more information than necessary. Exercising your rights is free of charge.
9. Complaints
If you are not satisfied with how we handle your data, please let us know first, so we can try to solve it together.
You also have the right to lodge a complaint with a data protection supervisory authority. Our lead supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl). You can also lodge a complaint with the supervisory authority in the EU country where you live or work, for example:
- Italy: Garante per la protezione dei dati personali
- Spain: Agencia Española de Protección de Datos (AEPD)
- Denmark: Datatilsynet
- Sweden: Integritetsskyddsmyndigheten (IMY)
10. Children
Our products are made for children, but our online shop is intended for adults. We do not knowingly collect personal data from children under 16 (or the lower age that applies in your country). If you believe that a child has provided us with personal data, please contact us and we will delete it.
11. Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. Our website uses an encrypted connection (HTTPS), payments are processed by specialised payment providers, and only authorised persons within our company have access to your data. Do you suspect misuse? Please contact us immediately at info@fits4kids.store.
12. Reviews via WebwinkelKeur
After your order, we may invite you by email to leave a review via WebwinkelKeur. For this, we share your name, email address and order number with Stichting WebwinkelKeur. If you write a review, WebwinkelKeur publishes it with the name you enter on its website and in our review widget. You can object to review invitations at any time by emailing info@fits4kids.store or via the unsubscribe link in the invitation. More information is in the privacy policy of WebwinkelKeur on www.webwinkelkeur.nl.
13. Cookies
We use cookies and similar techniques. Strictly necessary cookies are always placed; statistics and marketing cookies only with your consent. You can find the list of cookies, their purposes and retention periods in our cookie policy. You can change your choice at any time via "Cookie settings" at the bottom of every page.
14. Changes
We may update this privacy policy, for example when we start using a new service. The date at the top shows when it was last changed. If the changes are significant, we inform you in a clear way, for example on our website or by email.
15. Contact
DR Commerce B.V. (Fits4Kids), Industrieweg 10C, 5145 PV Waalwijk, the Netherlands, info@fits4kids.store, +31 85 130 4093
