Curated Outfits

Privacy Policy

This privacy policy explains how Curated Outfits collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

Curated Outfits
Sjoerd Wiersmahof 9
8501 VA Joure
Netherlands
[email protected]

2. What Data We Collect

We collect the following categories of personal data:

  • Contact and shipping information provided during checkout (name, email address, postal address)
  • Order details (items purchased, amounts, shipping costs, order history)
  • Account data if you register (email address and a securely hashed password — we never store your password in readable form)
  • Basic profile data (name, email address) received from Google or Facebook if you choose to log in with a social account
  • Your wishlist and saved preferences when logged in
  • IP address and device/browser information (only when analytics consent is granted)

We do not collect or store payment details — payments are handled by Mollie (iDEAL, Wero, Bancontact, card), which processes payment data on our behalf.

3. Why We Collect It (Legal Basis)

  • Contract performance (Art. 6(1)(b) GDPR): Processing your order, arranging shipping, sending order confirmation emails, and operating your customer account and wishlist.
  • Consent (Art. 6(1)(a) GDPR): Google Analytics usage tracking — only collected if you accept analytics cookies via the consent banner.
  • Legal obligation (Art. 6(1)(c) GDPR): Retaining order records for tax and accounting purposes.

4. Who We Share Your Data With

We share data with the following third-party processors only to the extent necessary to operate the service:

  • Mollie — payment processing (iDEAL, Wero, Bancontact, card); Mollie processes your payment data directly
  • Resend — transactional email (order confirmations, account emails)
  • Cloudflare — content delivery, DNS, and security/edge protection for the website
  • Google / Meta (Facebook) — only if you choose to log in with a Google or Facebook account; they provide us your basic profile data and act under their own privacy policies
  • Google Analytics — website usage analytics (only if you grant analytics consent)

Our website and database run on our own managed servers hosted within the EU (Hetzner Online GmbH, Germany). We do not sell your personal data to third parties.

Our catalog links to external platforms (such as Vinted, Vestiaire Collective, and Instagram), and we publish our own product photos on social media. Following such a link takes you to that platform under its own privacy policy — no personal data about you is shared with these platforms by us.

5. How Long We Keep Your Data

  • Order data: Retained for 7 years, as required by Dutch tax and accounting law (fiscale bewaarplicht).
  • Account data: Retained until you delete your account or ask us to remove it.
  • Analytics data: Retained as configured in Google Analytics 4 (default: 14 months). Only collected with your consent.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data (subject to legal retention requirements).
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Restriction: Ask us to limit how we use your data in certain circumstances.
  • Withdraw consent: Withdraw analytics consent at any time via the cookie settings banner.

To exercise your rights, contact us at: [email protected]

7. Right to Lodge a Complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the supervisory authority in your country. In the Netherlands, the relevant authority is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

8. Cookies

We use a cookie consent manager (Orejime) to give you control over which cookies are set. On your first visit, a banner will appear with the option to accept or manage cookie preferences.

We use the following categories of cookies:

  • Strictly necessary: Required for the site to function (shopping cart, checkout, login session). These cannot be disabled.
  • Analytics (optional): Google Analytics cookies (_ga, _gid, _gat) — set only with your consent.

You can change your cookie preferences at any time by clicking the cookie settings link in the footer.

Last updated: 14 July 2026