Privacy.

1. Who we are

[CLUB5 legal entity name], handelend onder de naam CLUB5, [Street + number], [Postcode] [City], the Netherlands. Kamer van Koophandel (KvK): [KvK number]. We are the controller for the personal data described here. Contact: support@club5.nl.

2. What data we collect

• Account: email address and password (stored securely, never readable by us).
• Orders (at launch): name, delivery and billing address, phone number, order contents and payment status. We never see your full card details.
• Newsletter and waitlist: email address, consent date and time.
• Contact form: name, email address and your message.
• Bag and wishlist: stored in your own browser; a saved bag is linked to your account when signed in.
• Technical data: anonymous visit statistics and the cookies described in our cookie policy.

3. Why we use it and on what legal basis

• To run your account and process orders — performance of a contract.
• To send newsletters and launch offers — your consent, which you can withdraw at any time.
• To answer your questions — our legitimate interest in providing customer service.
• To keep accounting records — legal obligation.
• To keep the site secure and understand how it is used — legitimate interest.

4. How long we keep it

• Account data: until you delete your account.
• Order and invoice data: 7 years, as required by Dutch tax law.
• Newsletter data: until you unsubscribe.
• Contact messages: up to 2 years after the last contact.

5. Who we share it with

We never sell your data. We only share it with processors that help us run the shop, under a data processing agreement:

• An affiliate tracking service, only if you accept cookies and arrive via a partner link.
• Hosting and database provider (within the EU/EEA or with appropriate safeguards).
• Email delivery provider for order, account and newsletter emails.
• Payment provider and delivery partner (once checkout launches).

When data is transferred outside the EEA, we rely on EU Standard Contractual Clauses or an adequacy decision.

6. Your rights

You have the right to access, correct, delete, restrict or transfer your data, and to object to its use. You can withdraw consent at any time without affecting earlier processing. Email support@club5.nl; we respond within one month.

You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens.

7. Security

We use encrypted connections (HTTPS), access controls and secure password storage to protect your data. Only authorised people can access customer data.

8. Changes

We may update this policy. The date at the top shows the latest version; significant changes will be announced on the site or by email.