Privacy statement Attractedtoblack

Last updated: May 20, 2026

Article 1. Introduction

Attractedtoblack respects the privacy of every visitor, customer, and user of www.attractedtoblack.nl.

In this privacy statement, we explain which personal data we process, why we do this, on what basis we do this, with whom we share data, how long we retain data, how we secure data, and what rights you have.

Attractedtoblack processes personal data in accordance with the General Data Protection Regulation, the Implementation Act of the General Data Protection Regulation, the Telecommunications Act, and other applicable privacy legislation.

This privacy statement applies to all services, products, communications, orders, invoices, quotes, marketing activities, and other activities of Attractedtoblack.

Article 2. Identity of the data controller

The data controller for the processing of personal data is:

Attractedtoblack

Owner: Max Marsen

Website: www.attractedtoblack.nl

Email address: info@attractedtoblack.nl

Chamber of Commerce number: 76317064

VAT number: NL003073979B20

Attractedtoblack determines which personal data is processed, for what purposes this occurs, and how this is done.

Article 3. Webshop platform Shopify

The webshop of Attractedtoblack is built and hosted via Shopify.

Shopify processes personal data on behalf of Attractedtoblack to technically enable the webshop, process orders, manage shopping carts, display products, secure the webshop, process customer data, support payments, perform analyses, and provide webshop functionalities.

When you use the webshop or place an order, personal data may be processed through Shopify's systems. This may include name, address, email address, phone number, order details, payment status, IP address, device data, browser data, cookie data, cart data, and data about your use of the webshop.

Shopify may process personal data on servers inside and outside the European Economic Area. When personal data is processed outside the European Economic Area, Shopify ensures appropriate safeguards according to applicable privacy legislation, such as EU model contracts or other valid transfer mechanisms.

Shopify may also process certain data as an independent data controller, for example for security, fraud prevention, platform improvement, compliance with legal obligations, and providing its own services. The privacy policy of Shopify applies to those processing activities.

Article 4. Who this privacy statement applies to

This privacy statement applies to all individuals whose personal data is processed by Attractedtoblack.

This applies, among others, to visitors of the webshop, customers, business clients, individuals placing an order, individuals requesting a quote, individuals receiving an invoice, individuals contacting customer service, newsletter subscribers, SMS subscribers, individuals creating an account, individuals participating in promotions, individuals responding to advertisements, and individuals sharing personal data with Attractedtoblack in other ways.

Article 5. Which personal data Attractedtoblack processes

Attractedtoblack may process the following personal data:

First and last name.

Address data.

Postal code.

City.

Country.

Email address.

Phone number.

Company name.

Chamber of Commerce number.

VAT number.

Billing address.

Delivery address.

Order data.

Payment data.

Invoice data.

Shipping data.

Order number.

Payment status.

Return data.

Complaint data.

Warranty data.

Account data.

Login data.

Password data in encrypted form, if an account is created.

Preferences within the webshop.

Wishlist data.

Shopping cart data.

Information about abandoned shopping carts.

Newsletter preferences.

SMS preferences.

Marketing preferences.

Communication with customer service.

Messages, photos, attachments, and other information you provide.

IP address.

Cookie ID.

Browser data.

Device data.

Operating system.

Session data.

Click behavior.

Website usage.

Advertisement IDs.

Campaign data.

Location data, only when consent has been given or when this is technically necessary for, for example, language, currency, or shipping options.

Data needed for fraud prevention, security, and abuse prevention.

Data needed for business orders, quotes, invoices, and purchases.

Attractedtoblack does not process special personal data, such as data about health, religion, political preference, race, ethnic origin, or biometric data, unless this is necessary under the law or when the data subject provides this data themselves and processing is necessary for the relevant purpose.

Article 6. Purposes of processing

Attractedtoblack processes personal data for the following purposes:

Processing orders.

Delivering products.

Executing agreements.

Creating and managing customer accounts.

Processing payments.

Preparing and sending invoices.

Sending quotes and price estimates.

Processing business orders.

Purchasing, reserving, or producing products on request.

Shipping orders.

Tracking shipments.

Processing returns.

Handling complaints.

Handling warranty requests.

Providing customer service.

Answering questions.

Sending order confirmations.

Sending shipping updates.

Sending service messages.

Sending newsletters.

Sending offers.

Sending product updates.

Sending SMS and MMS messages, if consent has been given or when legally permitted.

Sending reminders for abandoned shopping carts, if legally permitted.

Personalizing the webshop.

Personalizing advertisements.

Personalizing communication.

Analyzing and improving the webshop.

Measuring campaign performance.

Displaying relevant advertisements.

Preventing and detecting fraud.

Preventing and detecting abuse.

Securing the webshop and systems.

Collecting outstanding amounts.

Maintaining administration.

Complying with legal obligations, including tax retention obligations.

Handling legal disputes.

Protecting the rights and property of Attractedtoblack.

Article 7. Legal grounds for processing

Attractedtoblack processes personal data only when there is a valid legal basis for doing so.

Attractedtoblack processes personal data based on the execution of a contract when this is necessary to process an order, deliver a product, handle a payment, provide customer service, process a return, handle a warranty request, execute an invoice order, or handle a business assignment.

Attractedtoblack processes personal data based on a legal obligation when data must be processed or retained for administration, tax legislation, accounting, legal information obligations, fraud prevention, or other legal obligations.

Attractedtoblack processes personal data based on consent when this is necessary for, for example, newsletters, SMS marketing, marketing cookies, location data, certain forms of personalization, or other processing for which consent is legally required.

Attractedtoblack processes personal data based on legitimate interest when this is necessary for fraud prevention, security, customer service, improving the webshop, direct marketing to existing customers, evidence collection, debt collection, legal protection, and protecting the rights of Attractedtoblack.

When processing takes place based on consent, this consent can always be withdrawn. Withdrawal of consent does not affect processing that has already occurred before the consent was withdrawn.

Article 8. Orders, payments, and delivery

When you place an order, Attractedtoblack processes personal data necessary to confirm, process, pay for, ship, and handle the order.

For this purpose, data may be shared with Shopify, payment providers, shipping partners, fulfillment parties, IT service providers, hosting parties, accounting service providers, and other parties necessary for the execution of the order.

For international orders, personal data may be shared with carriers, customs, logistics parties, local delivery services, or other parties necessary to deliver the order in the destination country.

Article 9. Shopify Payments and payment providers

Payments in the webshop can be processed via Shopify Payments or other payment providers offered in the webshop.

For processing payments, personal data and payment details may be shared with the relevant payment provider. This may include name, email address, billing address, delivery address, order amount, payment method, payment status, transaction data, fraud prevention data, and technical data.

Attractedtoblack does not receive all complete payment details, such as full credit card information. This data is processed by the payment provider according to the security standards and terms of the relevant payment provider.

Payment providers may process data as a processor or as an independent data controller, depending on their role and legal obligations.

Article 10. Invoices, quotes, and business orders

When Attractedtoblack issues an invoice, quote, price estimate, or order confirmation, Attractedtoblack processes personal data and company data necessary for administration, execution of the assignment, payment, delivery, and legal retention obligations.

This may include name, company name, address, email address, phone number, VAT number, Chamber of Commerce number, invoice data, order data, payment status, delivery data, and communication regarding the assignment.

Invoice data and administrative data are retained as long as necessary based on tax and legal obligations.

Article 11. Customer service and communication

When you contact Attractedtoblack, Attractedtoblack processes the data necessary to handle your question, complaint, return, warranty request, or request.

This may include name, email address, phone number, order number, invoice number, photos, messages, attachments, and other information you provide.

Attractedtoblack retains communication as long as necessary for the processing of your request, customer service, evidence, administration, and protection of rights.

Article 12. Account and customer environment

When you create an account, Attractedtoblack processes the data necessary to create, secure, and manage the account.

This may include, among other things, name, email address, password data in encrypted form, order history, addresses, preferences, wishlist data, and account settings.

You are responsible for keeping your login credentials confidential.

Attractedtoblack may block or delete an account if there are suspicions of misuse, fraud, unlawful behavior, or violation of terms.

Article 13. Newsletter, Email Marketing, and Abandoned Carts

Attractedtoblack may send emails regarding orders, service messages, product updates, promotions, offers, and abandoned carts.

Newsletters and commercial emails are only sent when consent has been given or when legally permitted, for example, to existing customers for similar products.

Every commercial email contains an option to unsubscribe.

Opting out can also be done by contacting via info@attractedtoblack.nl.

After opting out, Attractedtoblack may still send you service messages that are necessary for orders, payments, delivery, returns, complaints, or legal obligations.

Article 14. SMS and Mobile Communication

When you provide your phone number and give consent, Attractedtoblack may send SMS or MMS messages.

These messages may relate to orders, shipping updates, service messages, abandoned carts, promotions, product updates, and marketing campaigns.

The frequency of messages may vary.

Standard SMS and data rates from your provider may apply.

You can opt-out of SMS messages at any time by replying STOP to a received text message.

For assistance, you can reply HELP or contact via info@attractedtoblack.nl.

Attractedtoblack is not liable for delays, interruptions, or errors in the delivery of SMS or MMS messages by providers, networks, or external service providers.

Article 15. Mobile Terms for SMS Services

By providing your phone number and agreeing to SMS communication, you are signing up for SMS messages from Attractedtoblack.

Messages may include information about orders, shipping information, abandoned carts, promotions, product updates, and other communications from Attractedtoblack.

Standard SMS and data rates from your provider may apply.

You can always opt-out by replying STOP to a text message.

For assistance, you can reply HELP or send an email to info@attractedtoblack.nl.

You may not misuse, disrupt, or use the SMS service in a way that could cause harm to Attractedtoblack, other users, providers, or systems.

Attractedtoblack may modify, temporarily suspend, or terminate the SMS service.

Attractedtoblack is not liable for delays, disruptions, undelivered messages, or errors in the delivery of messages by providers, networks, or external service providers.

Data processed for SMS services are used for delivering, securing, analyzing, and improving this service, in accordance with this privacy statement.

Article 16. Cookies and similar techniques

Attractedtoblack uses cookies and similar techniques on the webshop.

Functional cookies are needed for the webshop to work properly. These cookies ensure, for example, that products remain in the shopping cart, that the website can be used securely, and that preferences are remembered.

Shopify places necessary cookies and similar techniques to ensure the webshop functions technically, to enable orders, to remember shopping carts, to manage sessions, to prevent fraud, and to ensure the security of the webshop.

Analytical cookies are used to gain insight into the use of the webshop and to improve the webshop.

Marketing cookies are used for advertisements, personalization, remarketing, affiliate tracking, and measuring campaigns.

For non-essential cookies, Attractedtoblack asks for consent, as far as legally required.

You can change cookie settings via the cookie banner, through the settings on the website, or through your browser settings.

When you block or delete cookies, certain parts of the webshop may not work as well.

Article 17. Location data

Attractedtoblack can process location data when you give consent or when it is technically necessary to display certain features of the webshop.

Location data can be used to better tailor shipping options, delivery times, currency, language, content, or offers to your location.

You can always withdraw consent for location data via your device settings or browser settings.

Article 18. Marketing, advertisements, and social media

Attractedtoblack can use personal data to make advertisements, offers, and content more relevant.

This can happen via email, SMS, social media, search engines, advertising platforms, and other marketing channels.

Attractedtoblack may use cookies, pixels, ad IDs, customer lists, website behavior, and purchase history for this purpose, as far as legally permitted.

When consent is required, Attractedtoblack asks for consent in advance.

You can unsubscribe from direct marketing via the unsubscribe link in emails, by replying STOP to SMS messages, or by contacting info@attractedtoblack.nl.

Article 19. Sharing personal data with third parties

Attractedtoblack does not sell personal data to third parties.

Attractedtoblack shares personal data only when necessary for the execution of services, legal obligations, security, administration, marketing, payment, shipping, customer service, or improvement of the webshop.

Personal data may be shared with Shopify.

Personal data may be shared with Shopify Payments or other payment providers.

Personal data may be shared with shipping partners.

Personal data may be shared with fulfillment parties.

Personal data may be shared with IT service providers.

Personal data may be shared with hosting parties.

Personal data may be shared with email marketing platforms.

Personal data may be shared with SMS and communication partners.

Personal data may be shared with analytics services.

Personal data may be shared with advertising platforms.

Personal data may be shared with social media platforms.

Personal data may be shared with customer service platforms.

Personal data may be shared with accountants and administrative service providers.

Personal data may be shared with collection agencies, if necessary.

Personal data may be shared with legal advisors, if necessary.

Personal data may be shared with government agencies, regulators, or authorities when legally required.

With parties that process personal data on behalf of Attractedtoblack, Attractedtoblack enters into a data processing agreement where necessary.

Article 20. International transfer of personal data

Attractedtoblack may use Shopify and other service providers that process personal data outside the European Economic Area.

When personal data is processed outside the European Economic Area, Attractedtoblack or the relevant service provider ensures appropriate safeguards, such as EU model contracts, additional security measures, adequacy decisions, or other legally permitted mechanisms.

Article 21. Retention periods

Attractedtoblack does not retain personal data longer than necessary for the purpose for which the data was collected, unless a longer retention period is legally required or permitted.

Order data, payment data, invoice data, and administrative data are generally retained for 7 years due to tax obligations.

Account information is retained as long as the account is active and then for a maximum of 2 years after inactivity, unless longer retention is necessary.

Customer service communication is retained as long as necessary for the processing of the request, evidence, administration, and protection of rights.

Marketing data is retained until you unsubscribe or until a maximum of 2 years after the last interaction has passed, unless earlier deletion is legally required.

SMS data is retained as long as necessary for providing the SMS service, proof of consent, opt-out, analysis, and compliance with legal obligations.

Cookie data is retained according to the retention periods specified in the cookie banner or cookie settings.

Data necessary for fraud prevention, disputes, collections, or legal proceedings may be retained as long as necessary.

Article 22. Security

Attractedtoblack takes appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, and destruction.

These measures are tailored to the nature of the data, the risks of processing, and the state of technology.

Attractedtoblack restricts access to personal data to individuals and parties who need this data for their work.

Shopify, as a webshop platform, takes technical and organizational security measures to protect the webshop and the personal data processed via Shopify.

Although Attractedtoblack strives to secure personal data properly, complete security during transmission or storage of data over the internet can never be absolutely guaranteed.

Article 23. Rights of data subjects

You have the right to access your personal data.

You have the right to have inaccurate personal data corrected.

You have the right to have personal data deleted, as far as the law allows.

You have the right to restrict the processing of personal data.

You have the right to object to the processing of personal data.

You have the right to data portability.

You have the right to withdraw consent when processing is based on consent.

You have the right to object to direct marketing.

You can exercise your rights by sending an email to info@attractedtoblack.nl.

Attractedtoblack generally responds to a request within 1 month.

When a request is complex or when multiple requests have been submitted, this period may be extended according to legal regulations.

Attractedtoblack may ask for additional information to verify your identity before a request is fulfilled.

Attractedtoblack may refuse a request when legally permitted, for example when a request is unfounded or excessive, when legal retention obligations apply, or when the rights of others are infringed.

Article 24. Objection to direct marketing

You can always object to the use of your personal data for direct marketing.

After objecting to direct marketing, Attractedtoblack will no longer use your personal data for that purpose.

To unsubscribe from email marketing, you can use the unsubscribe link in the email or via info@attractedtoblack.nl.

To unsubscribe from SMS marketing, reply STOP to an SMS message.

Article 25. Complaint to the regulator

If you believe that Attractedtoblack is not handling your personal data carefully, you can contact via info@attractedtoblack.nl.

You also have the right to file a complaint with the Data Protection Authority or with the privacy regulator in the country where you live or work.

Article 26. Minors

The webshop and services of Attractedtoblack are not aimed at individuals under 16 years of age.

Attractedtoblack does not knowingly process personal data of individuals under 16 years of age without consent from a parent or legal representative.

If it turns out that Attractedtoblack has processed personal data of a minor without valid consent, this data will be deleted unless there is a legal basis for retaining the data.

Article 27. Automated decision-making and profiling

Attractedtoblack does not make decisions that are solely based on automated processing and that have legal effects or significantly affect the data subject in a similar way.

Attractedtoblack may use profiling for marketing, personalization, recommendations, advertisements, fraud prevention, and analysis, as far as this is legally permitted and where necessary based on consent.

You can object to profiling for direct marketing or withdraw your consent when processing is based on consent.

Article 28. Links to external websites

The webshop may contain links to third-party websites, apps, or services.

Attractedtoblack is not responsible for the content, security, or privacy practices of external websites, apps, or services.

We advise you to read the privacy statements of these external parties before sharing personal data with them.

Article 29. Changes to this privacy statement

Attractedtoblack may change this privacy statement.

The most current version is always available at www.attractedtoblack.nl.

In case of significant changes, Attractedtoblack may inform customers via email, a notification on the webshop, or another appropriate method.

The date at the top of this privacy statement indicates when this statement was last updated.

Article 30. Contact

For questions about this privacy statement or for requests regarding personal data, you can contact:

Attractedtoblack

Owner: Max Marsen

Website: www.attractedtoblack.nl

Email address: info@attractedtoblack.nl