Privacy Policy

This page explains how FIFTYFOURSGLORY handles your personal data when you shop with us or join our lists.

Who is responsible

What we collect

• VIP waiting list: your email address, optional first name, product preference, sign-up date and, only if you tick the box, your marketing consent with its timestamp and the consent text you agreed to.
• Newsletter: your email address and, if given, your marketing consent.
• Orders: processed by Shopify, which collects your name, contact details, delivery address and payment details to complete and deliver your order.
• Technical data: your IP address and browser type, used to protect the site against spam and abuse (for example limiting repeated sign-ups or login attempts).

Why, and on what legal basis

• Processing and delivering your order: performance of a contract (Art. 6(1)(b) GDPR).
• Keeping order and invoice records: legal obligation under Dutch tax law (Art. 6(1)(c) GDPR).
• Telling you about the drop you signed up for: your request when joining the list (Art. 6(1)(b) GDPR).
• Marketing emails: only with your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time; this does not affect earlier processing.
• Security and spam prevention: our legitimate interest in keeping the site safe (Art. 6(1)(f) GDPR).

We do not use automated decision-making or profiling that has legal or similarly significant effects for you.

How long we keep it

• Waiting list and newsletter data: until you unsubscribe or ask us to delete it. We keep a minimal record of your consent and unsubscribe to prove we respected your choice.
• Order and invoice records: 7 years, as required by Dutch tax law.
• Technical security data: only as long as needed to prevent abuse, normally a few weeks.

Who we share it with

We never sell your data. We share it only with service providers that process it on our behalf under a data processing agreement: Shopify (store, checkout and payments), our website hosting and database provider, and our email delivery provider. Some of these providers may process data outside the European Economic Area, for example in Canada or the United States. In that case the transfer is protected by an EU adequacy decision or the European Commission's Standard Contractual Clauses.

Cookies and local storage

We use only functional storage needed for the site to work, such as remembering your bag and keeping you signed in. We do not use advertising or tracking cookies. Shopify's checkout may set its own cookies; see Shopify's privacy policy.

Your rights

You have the right to access, correct, delete, restrict or export your data, to object to processing based on legitimate interest, and to withdraw consent at any time. You can unsubscribe through the link in every marketing email. For anything else, email us or use our contact page; we respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

Our lists and shop are not intended for children under 16. We do not knowingly collect their data.

Security

We protect your data with access controls and encrypted connections. Only authorised people can view sign-up data.

Changes

We may update this policy. The latest version is always on this page.

Last updated: 12 October 2026