Last updated: November 9, 2025

Bristol & Reed values the protection of your personal data. In this privacy policy, we explain which personal data we collect, why we do so, and what your rights are.

1. Who is responsible for your data?

Data controller:

Bristol & Reed
Trading name of Degen en Leideritz

Address:
Roggestraat 14
7311 CD Apeldoorn
The Netherlands

Chamber of Commerce number: 02067512
Email: support@bristolandreed.shop

2. What personal data do we process?

We may process the following personal data from you:

When placing an order:

• First and last name
• Email address
• Delivery address (street, house number, postal code, city, country)
• Phone number (if provided)
• Payment information (processed by Shopify Payments)
• IP address
• Order history

When using the website:

• Cookies and similar technologies (see section 8)
• Browser data (via Google Analytics, if applicable)

When contacting customer service:

• Name and email address
• Content of your message
• Any photos with complaints

3. Why do we process your data?

We use your personal data for the following purposes:

Purpose	Legal basis
Fulfillment of your order	Contract
Shipping of products	Contract
Communication about your order	Contract
Customer service and complaint handling	Contract
Processing of payments	Contract
Compliance with legal obligations (e.g. tax law)	Legal obligation
Improvement of the website	Legitimate interest
Fraud prevention (only when suspected)	Legitimate interest / Legal obligation
Newsletter (only with consent)	Consent

4. How long do we retain your data?

We do not retain your personal data longer than necessary for the purposes for which they were collected:

Type of data	Retention period
Order data and invoices	7 years (tax retention obligation)
Account data	Until you delete your account, or 3 years after last activity
Customer service correspondence	2 years after resolution
Newsletter email addresses	Until you unsubscribe
Website analytics data (anonymized)	26 months
IP addresses (fraud prevention)	1 year

After these periods, we delete or anonymize your data.

5. Who do we share your data with?

We only share your data with parties that help us provide our services:

Processors (working on our behalf):

• Shopify - e-commerce platform for orders and order confirmations
• Shopify Payments - payment processing
• Prodigi - print-on-demand production and shipping of posters
• Mailchimp - newsletters (only with consent)
• Google Analytics - website analytics (anonymized, only with consent)

We never sell your data to third parties for marketing purposes.

6. Transfer outside the EU

Some of our processors store data on servers outside the European Economic Area (EEA):

• Shopify has servers in the United States and Canada
• Mailchimp (Intuit) has servers in the United States
• Google Analytics processes data outside the EU
• Prodigi has production facilities worldwide

For transfers outside the EU, we apply appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decision by the European Commission (where applicable)
• Data processing agreements with all processors

7. Security of your data

We take the protection of your data seriously and implement appropriate technical and organizational measures:

• SSL/TLS encryption for all data transmitted via the website
• Secure storage of data on servers of trusted parties
• Access restriction - only authorized personnel have access to personal data
• Regular security updates of our systems
• Processor agreements with all parties processing data on our behalf

Data breach

Should a data breach occur despite our measures, we will report it to the Dutch Data Protection Authority within 72 hours. If the data breach poses a high risk to you, we will inform you directly.

8. Cookies and similar technologies

Our website uses cookies. These are small text files stored on your device.

Which cookies do we use?

Functional cookies (always active)

• Necessary for the functioning of the webshop
• Shopping cart and ordering process
• Language preferences
• Retention period: session or up to 1 year

Analytical cookies (with consent)

• Google Analytics for visitor statistics (anonymized)
• Retention period: 26 months

Marketing cookies (with consent)

• Only if you have given consent
• Retention period: varying, maximum 24 months

You can refuse or delete cookies through your browser settings. Please note: some functions of the website may not work optimally.

More information: see your browser settings or allaboutcookies.org

9. Your rights

According to the GDPR (General Data Protection Regulation), you have the following rights:

Right of access

You can request which personal data we have about you.

Right to rectification

You can request correction of incorrect or incomplete data.

Right to erasure ("right to be forgotten")

You can request deletion of your data, unless we have a legal retention obligation.

Right to restriction of processing

You can request temporary restriction of processing your data.

Right to data portability

You can request a copy of your data in a structured, commonly used format.

Right to object

You can object to processing based on legitimate interest.

Rights regarding automated decision-making

We do not make automated decisions with legal or similar consequences. In case of suspected fraud, automated analysis may take place, but human assessment always follows.

Right to withdraw consent

If processing is based on consent (such as newsletters), you can always withdraw this consent.

How do you exercise these rights?

Send an email to support@bristolandreed.shop with:

• Your name and email address
• A clear description of your request
• A copy of your ID (with sensitive information redacted)

We respond to your request within 1 month. In complex cases, we can extend this by a maximum of 2 months, informing you about this.

10. Minors

Our webshop is intended for persons aged 16 and older. We do not knowingly collect data from persons younger than 16 without parental or guardian consent. Are you younger than 16? Please ask permission from your parents or guardian before providing personal data to us.

11. Complaints

We do our best to handle your requests and complaints carefully. Should you be dissatisfied with how we handle your personal data, you can file a complaint with the supervisory authority:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
P.O. Box 93374
2509 AJ The Hague
The Netherlands
Phone: +31 88 1805 250
Website: autoriteitpersoonsgegevens.nl

12. Changes to this privacy policy

We may update this privacy policy from time to time. You can always find the most recent version on our website. In case of significant changes, we will inform you via email or with a notification on the website.

Last updated: November 9, 2025

13. Contact

Do you have questions about this privacy policy or about how we handle your personal data?

Please contact us:

Email: support@bristolandreed.shop
Address: Roggestraat 14, 7311 CD Apeldoorn, The Netherlands

Bristol & Reed is a trading name of Degen en Leideritz