Privacy Policy

Last updated: 16 October 2025

At GetChillFeet, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, how we keep it secure, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who We Are

GetChillFeet
Website: [www.getchillfeet.com]
Email: [info@getchillfeet.com]

GetChillFeet is the data controller responsible for determining how and why personal data is processed in connection with your use of our webshop.

2. Personal Data We Collect

We collect only the information necessary to provide you with our products and services. This may include:

• Identity information: first and last name, address, postal code, city, country

• Contact details: email address, phone number

• Order details: products purchased, order number, shipping and delivery status

• Payment details: payment method, encrypted transaction data (processed securely by our payment partners)

• Technical information: IP address, browser type, device data, and website usage statistics

We do not collect sensitive personal information, such as medical, religious, or political data.

3. Purpose of Processing

We use your personal data for the following purposes:

• To process and deliver your orders

• To communicate with you about your purchases or inquiries

• To process payments securely through trusted payment providers

• To improve our webshop and user experience

• To comply with legal obligations, such as tax or accounting requirements

• To send marketing emails or newsletters, but only if you have given explicit consent

4. Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases:

1. Contractual necessity – to fulfill your order and provide customer service

2. Legal obligation – to comply with tax, accounting, and consumer protection laws

3. Legitimate interest – to prevent fraud, improve our website, or ensure network security

4. Consent – for sending promotional or marketing communications (which you may withdraw at any time)

5. Sharing of Personal Data

We share your data only when it is necessary for operational or legal purposes, including with:

• Shipping partners (e.g., DHL, UPS, PostNL) – to deliver your orders

• Payment processors (e.g., Mollie, PayPal, Stripe) – to securely handle your payments

• Hosting and IT service providers – to operate and secure our webshop

• Accounting and compliance partners – to meet legal and financial reporting obligations

All third-party partners operate under a Data Processing Agreement (DPA) to ensure full GDPR compliance.
We never sell or rent your data to third parties.

6. Data Retention

We keep your data only for as long as necessary for the purpose it was collected or as required by law:

• Order and invoice data: 7 years (in accordance with tax law)

• Customer account information: as long as your account remains active

• Email and communication data: up to 12 months after your last contact

• Marketing subscriptions: until you unsubscribe

After these periods, data is securely deleted or anonymized.

7. Data Security

GetChillFeet applies strong technical and organizational security measures to protect your personal data against loss, misuse, or unauthorized access.

These include:

• Secure SSL/TLS encryption for all website and payment pages

• Secure EU-based servers and hosting infrastructure

• Limited data access for authorized staff only

• Regular security updates and encrypted data backups

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access – to obtain a copy of your personal data

• Right to rectification – to correct inaccurate or incomplete data

• Right to erasure (“right to be forgotten”)

• Right to restrict processing – to limit how we use your data

• Right to data portability – to receive your data in a machine-readable format

• Right to object – to processing based on legitimate interests or for marketing purposes

To exercise any of these rights, contact us at privacy@getchillfeet.com.
We will respond within 30 days as required by EU law.

9. Use of Cookies

Our website uses cookies to ensure the proper functioning of our webshop and to improve your shopping experience.

• Necessary cookies: essential for core website functionality

• Analytical cookies: used to understand how visitors use our site (anonymized)

• Marketing cookies: used only with your explicit consent

You can manage your cookie preferences at any time through our cookie consent banner. For more details, see our separate Cookie Policy.

10. International Data Transfers

We store and process your data primarily within the European Economic Area (EEA).
If any third-party service provider transfers data outside the EEA, we ensure adequate protection through EU Standard Contractual Clauses (SCCs) or equivalent legal safeguards.

11. Questions or Complaints

If you have questions or concerns about how we handle your personal data, please contact us:
📧 privacy@getchillfeet.com

If you are not satisfied with our response, you have the right to file a complaint with the relevant Data Protection Authority.
In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
https://www.autoriteitpersoonsgegevens.nl

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The “Last updated” date above shows when this policy was last revised.

We encourage you to review this page periodically to stay informed about how we protect your privacy.