FREE SHIPPING ON ORDERS OVER €100DELIVERY IN 1-3 WORKING DAYS*EASY 30-DAY RETURNS WITH FREE OPTIONS

Privacy policy

Privacy Policy

Version: 15 October 2026

In this privacy policy you can read which personal data we process when you visit thefightcompany.nl, place an order with us or contact us, why we do this, on what legal basis, how long we keep your data and what rights you have. We comply with the General Data Protection Regulation (GDPR) and the Telecommunications Act.

1. Who is responsible?

TFC Trading Group B.V., trading under the name "The Fight Company"
Kaskinenweg 7, 9723 JL Groningen
Email: kontakt@thefightcompany.pl
Phone: 085 060 6340
Chamber of Commerce number: 83630562
VAT number: NL862940369B01

For any questions about privacy and to exercise your rights, you can email kontakt@thefightcompany.pl. We are not legally required to appoint a data protection officer.

2. What data we use and why

Your visit to the website

Our webshop runs on Shopify (Shopify International Limited, Dublin, Ireland). When you visit, Shopify processes technical data for us, such as your IP address, the pages you view, your browser and device and the contents of your shopping cart. This is necessary to make the website work, keep it secure and prevent misuse. Legal basis: our legitimate interest in a secure, working webshop (Art. 6(1)(f) GDPR) and, for your shopping cart and ordering, performance of the contract (Art. 6(1)(b) GDPR). We load fonts via Shopify itself, not via Google Fonts.

Ordering and payment

When you order, we process your name, delivery and billing address, email address, any phone number, the ordered items and the payment and order data. We need these to execute your order (Art. 6(1)(b) GDPR). We keep invoice data because the law requires it (Art. 6(1)(c) GDPR).

You pay via the payment provider you choose: Shopify Payments (for credit card, Apple Pay, Google Pay and other methods, with Stripe Payments Europe Ltd. as the payment processor), PayPal (Europe) S.à r.l. et Cie, S.C.A. and, if offered at checkout, Klarna Bank AB. They receive the data necessary for payment and can carry out their own checks to prevent fraud; they are responsible for this themselves. We do not see your full card details.

Customer account and loyalty points

When you create an account, we store your account details, addresses and orders so you can view your orders and order faster. If you take part in our loyalty programme, we also store your points, your level and the rewards you have redeemed. Legal basis: the contract (Art. 6(1)(b) GDPR). You can have your account deleted at any time.

Shipping, warehouse and returns

For delivery, we pass on your name, delivery address and, if necessary for track & trace, your email address and phone number to the carrier, such as PostNL, DHL, DPD, GLS, UPS or FedEx. We create shipping labels via Innosend and QLS. Our warehouse works with Picqer (Picqer B.V.). If you return via our returns portal, we process your order data, the reason for return, your choice for refund, exchange or credit and any photos you upload. If you return in our Amsterdam store, we use the same data. Legal basis: the contract (Art. 6(1)(b) GDPR).

Customer service, live chat and AI

If you contact us via email, phone, the contact form or live chat, we use your data and your message to help you (Art. 6(1)(b) GDPR, or for general queries our legitimate interest, Art. 6(1)(f) GDPR). For email and chat we use Gorgias (Gorgias Inc., US). Our live chat and returns portal run on Cloudflare servers (Cloudflare Inc., US).

To help you faster, we analyse messages and associated order and shipping data using an AI system (Claude by Anthropic PBC, US) that creates draft responses and suggestions. We have set it so that our data is not used to train AI models. Legal basis: our legitimate interest in fast and efficient customer service (Art. 6(1)(f) GDPR). We do not make decisions with legal or other significant consequences for you entirely automatically (Art. 22 GDPR): larger refunds and exceptions are reviewed by an employee, and you can always ask for a human to handle your query.

Newsletter and emails

If you sign up for the newsletter, we send you offers, new products and personal tips. Legal basis: your consent (Art. 6(1)(a) GDPR). We store the time of sign-up and your IP address to be able to prove that consent. We use Klaviyo (Klaviyo Inc., US) to send emails. Klaviyo measures whether you open an email and which links you click on, so we can tailor the content better to you. If there is a giveaway for newsletter subscribers, the giveaway terms apply and we email the winner.

If you have purchased from us, we may also email you without sign-up about our own, similar products (Art. 11.7 Telecommunications Act, Art. 6(1)(f) GDPR). You can unsubscribe from all emails at any time via the link at the bottom of the email. We also send you service emails about your order, such as order confirmation and shipping and return information.

Reviews

After a purchase, we sometimes ask you for a review. For this we use Loox (Loox Ltd., Israel), which receives your name, email address and the ordered items. Published reviews are shown with your first name or initials. Legal basis: our legitimate interest in genuine customer reviews (Art. 6(1)(f) GDPR); you can always object to this.

On our website we also display Google reviews of our store (name or initials of the writer, the rating and the text). We store these reviews ourselves with Shopify; when displayed, no connection is made with Google.

Google Maps

On the page of our Amsterdam store you can view a Google Maps map (Google Ireland Limited). The map only loads when you click "Load map"; only then do data such as your IP address go to Google and can Google place cookies. Legal basis: your consent by that click (Art. 6(1)(a) GDPR, Art. 11.7a Telecommunications Act).

3. Cookies, analytics and advertising

We place functional cookies, which are necessary for, for example, your shopping cart, language choice, account and checkout, without consent (Art. 11.7a(3) Telecommunications Act). We only place analytical cookies and marketing cookies if you give us consent in our cookie banner (Art. 11.7a(1) Telecommunications Act, Art. 6(1)(a) GDPR). We manage your choice with Cookiebot (Usercentrics A/S, Denmark), which records your choice, a shortened IP address and browser data to be able to prove your consent. You can adjust or withdraw your choice at any time via the cookie icon or the "Cookie settings" link.

With your consent, we use:

  • Google Analytics and Google Ads (Google Ireland Limited, Ireland): measuring how our website is used and whether our advertising works, including conversion measurement and "enhanced conversions" (where data such as your email address is encrypted (hashed) to Google) and remarketing. Data in Google Analytics is deleted after 14 months.
  • Meta pixel (Meta Platforms Ireland Limited, Ireland): measuring and improving our advertising on Facebook and Instagram and remarketing. For collecting and passing on the data, we are jointly responsible with Meta (Art. 26 GDPR; see facebook.com/legal/controller_addendum). Meta is responsible for what Meta does with the data afterwards.
  • TikTok pixel (TikTok Technology Limited, Ireland): measuring and improving our advertising on TikTok and remarketing.
  • OpenAI advertising pixel (OpenAI Ireland Ltd., Ireland): measuring whether advertising in ChatGPT results in a purchase.
  • Microsoft Clarity (Microsoft Ireland Operations Limited, Ireland): heatmaps and pseudonymised session recordings (mouse movements, clicks, scrolling) to make our webshop more user-friendly. What you type in form fields is masked by default.
  • ProfitMetrics (ProfitMetrics ApS, Denmark): links sales to advertising campaigns, so we can see which advertising is profitable, and passes those conversions on to Google and Meta.
  • Shopify analytics (Shopify International Limited, Ireland): overviews of visits, shopping carts and purchases.

4. Who receives your data?

We only share your data if necessary for your order (for example with payment providers and carriers), if the law requires us to do so (for example the tax authorities), if we have a legitimate interest or if you have given consent. Parties that process data for us have a data processing agreement with us (Art. 28 GDPR). We never sell your data.

5. Data outside the European Economic Area

Some parties are located outside the EEA or have access to data there, especially in the US (Google, Meta, Microsoft, TikTok, OpenAI, Shopify, Stripe, Klaviyo, Gorgias, Cloudflare, Anthropic), in Canada (Shopify) and in Israel (Loox). For Canada and Israel, the European Commission has decided that the protection is adequate. For the US, such a decision applies to companies certified under the EU-U.S. Data Privacy Framework. If a party is not certified, we use the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR).

6. How long we keep your data

  • Order, invoice and payment data: 7 years, because the tax retention requirement requires it (Art. 52 General Tax Act).
  • Customer service enquiries, chat conversations and returns: as long as you are a customer with us and it is necessary to handle subsequent enquiries, warranty and return matters and to defend ourselves against claims. On your request, we delete this data sooner, unless a statutory retention obligation applies.
  • Customer account and loyalty points: as long as your account exists. Order data that we must keep is retained until the retention period has passed.
  • Newsletter: until you unsubscribe. We keep proof of your consent or unsubscription for up to 3 years.
  • Cookies and analytics: as stated in the cookie settings, maximum 26 months (Google Analytics: 14 months).

7. Your rights

You have the right to view your data (Art. 15 GDPR), have it corrected (Art. 16) or deleted (Art. 17), restrict processing (Art. 18) and receive your data in a standard file or have it transferred (Art. 20). You can always withdraw consent given; this applies from that moment on (Art. 7(3)). Send your request to kontakt@thefightcompany.pl. We will respond within one month. To prevent us from giving data to the wrong person, we may ask you to prove who you are, for example by emailing from the email address of your order.

Right to object (Art. 21 GDPR). If we use your data on the basis of our legitimate interest, you can always object because of your personal situation. We will then stop, unless we have compelling reasons that outweigh your interests or need the data for legal proceedings. You can always object to the use of your data for direct marketing, without giving a reason; we will then no longer use it for that purpose.

Filing a complaint. If you are not satisfied with how we handle your data, please let us know. You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or with the privacy supervisor in the country where you live.

8. Security

Our website uses an encrypted connection (https). We protect your data with appropriate technical and organisational measures, including by restricting access to employees and parties who need the data.

9. Changes

We update this privacy policy when our processing or the law changes. The version on this page applies.
Back to top