Waylon Smith VOF ("Waylon Smith", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal information when you visit or make a purchase from waylonsmith.com (the "Site"), in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Waylon Smith VOF, Swingdreef 38, 3845BW Harderwijk, The Netherlands, KvK (Chamber of Commerce) number: 98412841

VAT number: NL868482730B01

Email: support@waylonsmith.com

2. What Personal Data We Collect

Depending on how you use our Site, we may collect:

• Contact details: name, email address, phone number, shipping and billing address
• Order information: products purchased, order value, payment method (payment card details are processed directly by our payment provider and are never stored by us)
• Account information: if you create an account, your login details and order history
• Technical data: IP address, browser type, device information, pages visited, and cookies (see our Cookie Policy)
• Marketing preferences: whether you have opted in to receive our newsletter or marketing communications

3. How We Use Your Personal Data

We process your personal data for the following purposes and legal bases:

Purpose | Legal basis

• Processing and delivering your order
• Performance of a contract
• Customer service and handling returns
• Performance of a contract
• Sending order confirmations and shipping updates
• Performance of a contract
• Sending marketing emails and newsletters
• Consent
• Improving our Site and analysing usage
• Legitimate interest
• Preventing fraud and ensuring Site security
• Legitimate interest
• Complying with legal and tax obligations
• Legal obligation

4. Sharing Your Data with Third Parties

We use the following categories of service providers ("processors") to operate our Site and fulfil orders. These providers only process your data on our instructions and are bound by data processing agreements:

Shopify: our e-commerce platform provider, which hosts the Site and processes order and account data

Shopify Payments: (or another payment provider integrated via Shopify) — to securely process payments

Shopify Analytics: Shopify's built-in analytics, used to understand how visitors use our Site

Shopify Email: used to send newsletters and marketing communications, only where you have opted in

Shipping carriers: — to deliver your order

We do not sell your personal data to third parties.

5. International Data Transfers

Some of our service providers (such as Shopify and certain analytics or email tools) may process data outside the European Economic Area (EEA), including in the United States. Where this occurs, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Data Retention

We retain personal data only as long as necessary for the purposes described above:

• Order and invoice data: 7 years, in line with Dutch tax law
• Account data: until you request deletion of your account
• Marketing data: until you withdraw your consent
• Technical/analytics data: as set out in our Cookie Policy

7. Your Rights Under the GDPR

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), where applicable
• Restrict or object to our processing of your data
• Data portability receive your data in a structured, machine-readable format
• Withdraw consent at any time, where processing is based on consent (e.g. marketing emails)
• Lodge a complaint with your national data protection authority. In the Netherlands, this is the [Autoriteit Persoonsgegevens](https://autoriteitpersoonsgegevens.nl)

To exercise any of these rights, contact us at support@waylonsmith.com.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including relying on Shopify's PCI-DSS compliant infrastructure for payment processing.

9. Children's Privacy

Our Site is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Waylon Smith VOF

Swingdreef 38, 3845BW Harderwijk, The Netherlands

Email: support@waylonsmith.com

Customer service hours: daily, 9:00 AM – 8:00 PM