Privacy Policy - Table Of Contents

Privacy Policy

House of Bleyenberg attaches great value to the protection of your personal data. This privacy policy explains which personal data we collect, why we use it, and what rights you have.

Last updated: February 2, 2026

1. Who are we?

Data Controller:

  • Name: House of Bleyenberg
  • Address: Gerard Doustraat 35, 1072VK Amsterdam
  • Chamber of Commerce number: 99812819
  • VAT number: NL869144236B01
  • Email: privacy@house-of-bleyenberg.com
  • Website: www.house-of-bleyenberg.com

2. To whom does this privacy policy apply?

This privacy policy applies to all individuals who visit our webshop, create an account, place an order, subscribe to our newsletter, or otherwise have contact with us. This applies to both private customers (B2C) and business customers (B2B).

3. What personal data do we process?

We process the following categories of personal data, depending on your interaction with our webshop:

3.1 Account registration and orders

  • First and last name
  • Email address
  • Telephone number
  • Billing address (street, house number, postal code, city, country)
  • Delivery address (if different from billing address)
  • Company name and Chamber of Commerce number (B2B customers only)
  • VAT number (if applicable)
  • Date of birth (optional, for birthday discounts)
  • Payment details (via our secure payment provider)
  • Order history and preferences

3.2 Website visits

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Pages visited and click behavior
  • Date and time of visit
  • Referring website

3.3 Communication

  • Correspondence via email, phone, or other channels
  • Feedback and reviews
  • Customer service conversations

3.4 Newsletter and marketing

  • Email address
  • Name (optional)
  • Preferences and interests
  • Email opening and click behavior

4. Why do we process your data?

We process your personal data for the following purposes and based on the following legal grounds:

4.1 Performance of a contract (Art. 6(1)(b) GDPR)

  • Processing and handling your order
  • Sending order confirmations and shipping notifications
  • Delivering products to the specified address
  • Processing payments
  • Handling returns and warranty claims
  • Customer service and communication about your order
  • Managing your customer account

4.2 Legal obligation (Art. 6(1)(c) GDPR)

  • Compliance with accounting obligations (7-year retention requirement)
  • Compliance with tax legislation (VAT administration)
  • Compliance with consumer protection legislation

4.3 Legitimate interest (Art. 6(1)(f) GDPR)

  • Fraud prevention and security
  • Improving our webshop and services
  • Analyzing website usage (anonymized)
  • Internal business operations and administration
  • B2B relationship management and account management

4.4 Consent (Art. 6(1)(a) GDPR)

  • Sending newsletters and marketing communications
  • Placing non-essential cookies
  • Personalized recommendations
  • Social media integration

You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. How long do we retain your data?

We do not retain your personal data longer than necessary for the purposes for which they were collected:

  • Account data: Up to 2 years after last activity, unless you delete your account earlier
  • Order data: 7 years (tax retention requirement)
  • Payment data: 7 years (tax retention requirement)
  • Newsletter subscription: Until you unsubscribe
  • Correspondence: 3 years after last contact
  • Website data (analytics): 26 months (anonymized)
  • Cookie data: See our cookie policy
  • B2B customer data: During the business relationship + 7 years

6. Do we share your data with third parties?

We never sell your personal data to third parties. We only share your data with carefully selected parties that help us deliver our services:

6.1 Data processors

PartyPurposeLocation
Shipping partners (PostNL, DHL, etc.)Product deliveryNetherlands/EU
Payment providers (Mollie, Stripe, etc.)Payment processingEU
Email service (Mailchimp, etc.)Sending newslettersEU/US (adequate level of protection)
Hosting providerWebsite hosting and databasesEU
Accounting softwareFinancial administrationNetherlands/EU
Google AnalyticsWebsite analysis (anonymized)EU (data residency)

We have concluded data processing agreements with all these parties that comply with the GDPR. These parties may only use your data for the agreed purposes and not for their own purposes.

6.2 Transfer outside the EU/EEA

In principle, we store your data within the European Economic Area (EEA). If we use service providers outside the EEA (for example, cloud services in the US), we ensure appropriate safeguards such as:

  • EU-US Data Privacy Framework
  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decision of the European Commission

7. How do we secure your data?

We take appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, modification, or distribution:

  • SSL/TLS encryption: All our web pages use HTTPS encryption
  • Secure servers: Regular updates and patches
  • Access control: Only authorized personnel have access to personal data
  • Firewalls and antivirus software: Protection against cyberattacks
  • Data backups: Regular secure backups
  • Secure payments: PCI-DSS certified payment providers

8. Cookies

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool "Real Cookie Banner". Details on how "Real Cookie Banner" works can be found at https://devowl.io/rcb/data-processing/

The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

We use the following types of cookies:

8.1 Functional cookies (necessary)

These cookies are necessary for the functioning of our webshop. Without these cookies, certain functions cannot work:

  • Shopping cart and checkout process
  • Session security and login functionality
  • Language preference
  • Remember cookie consent

Legal basis: Legitimate interest (necessary for service provision)

8.2 Analytical cookies

We use Google Analytics to understand how visitors use our website. The data is anonymized:

  • IP addresses are anonymized
  • Data sharing with Google is disabled
  • Retention period: 26 months

Legal basis: Consent (via cookie banner)

8.3 Marketing cookies

With your consent, we place cookies to:

  • Show personalized advertisements
  • Enable social media integration
  • Measure marketing campaigns

Legal basis: Consent (via cookie banner)

Managing cookies: You can adjust your cookie preferences at any time via our cookie policy or your browser settings. Please note: disabling functional cookies may limit the operation of our webshop.

9. Your rights under the GDPR

You have the following rights regarding your personal data:

RightDescription
Right of access
(Art. 15 GDPR)
You have the right to know which personal data we process about you. You can request a copy of your data.
Right to rectification
(Art. 16 GDPR)
You can have incorrect or incomplete data corrected. You can also do this yourself in your account settings.
Right to erasure
(Art. 17 GDPR)
You can request to have your data deleted, unless we have a legal retention obligation (e.g., tax data).
Right to restriction
(Art. 18 GDPR)
You can request to restrict the processing of your data, for example when the accuracy of the data is contested.
Right to data portability
(Art. 20 GDPR)
You can request your data in a structured format to transfer it to another party.
Right to object
(Art. 21 GDPR)
You can object to processing based on legitimate interest or for direct marketing purposes.
Right to withdraw consent
(Art. 7(3) GDPR)
When processing is based on consent, you can withdraw it at any time (e.g., newsletter).
Right not to be subject to automated decision-making
(Art. 22 GDPR)
We do not use automated decision-making or profiling with legal effects for you.

9.1 How do you exercise your rights?

You can exercise your rights by contacting us via:

  • Email: privacy@houseofbleyenberg.com
  • In writing: House of Bleyenberg, [Address], attn. "Privacy Request"

We will respond to your request within one month. In complex cases, we may extend this period by a maximum of two months, of which we will inform you.

To prevent abuse, we may ask you to identify yourself with a copy of your identity document (where you may obscure the passport number and photo).

10. Newsletter and marketing

10.1 What will you receive?

  • Information about new products and collections
  • Special offers and discounts
  • Inspiration and styling tips
  • Background stories about our European makers
  • Event invitations (if applicable)

10.2 Unsubscribe

You can unsubscribe from our newsletter at any time free of charge via:

  • The unsubscribe link at the bottom of each newsletter
  • Your account settings
  • Contact with our customer service

11. Minors

Our services are aimed at persons aged 16 and over. We do not knowingly collect personal data from persons under 16 years without parental or guardian consent.

If you suspect that we have collected personal data from a minor without consent, please contact us at privacy@houseofbleyenberg.com so we can delete this information.

12. Changes to this privacy policy

We reserve the right to modify this privacy policy. The most recent version can always be found on our website. We will announce important changes via email or through a clear notice on our website.

Date of last change: February 2, 2026

13. Complaints

We hope that you will first contact us if you have questions or complaints about the processing of your personal data. However, you always have the right to file a complaint with the supervisory authority:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

P.O. Box 93374
2509 AJ The Hague, The Netherlands
Phone: +31 (0)70 888 85 00
Website: www.autoriteitpersoonsgegevens.nl

14. Contact

House of Bleyenberg

Address: Gerard Doustraat 35, 1072VK
Email: privacy@house-of-bleyenberg.com
Phone:+31(0)203693012
Chamber of Commerce number: 99812819
VAT number: NL869144236B01

GDPR Cookie Consent with Real Cookie Banner