Privacy policy

At Cotton District (Cotton District B.V.), accessible from www.cottondistrict.nl, one of our main priorities is the privacy of our visitors and customers. This Privacy Policy document outlines the types of information that is collected and recorded by Cotton District and how we use, share, and protect it in compliance with the General Data Protection Regulation (GDPR).

1. Company Information

Cotton District B.V.

Jan Tinbergenstraat 131
7559 SP Hengelo
The Netherlands

Chamber of Commerce (KvK): 78412692
VAT ID (BTW): NL 861382870B01
E-mail: info@cottondistrict.shop

2. Personal Data We Collect

When you visit our webshop, place an order, or interact with us, we may collect the following personal data:

Contact & Identity Data: Full name, billing address, shipping address, email address, phone number.
Payment & Transaction Data: Payment method details, order history, bank account details (when refunds are processed).
Account Data: Username, password, order history (if you create a personal account).
Technical & Usage Data: IP address, browser type, device information, operating system, pages visited, and website interaction logs.
Customer Service Data: Correspondence via email, contact form, or social media.

3. How We Use Your Information

We process your personal data for the following legal bases and purposes:

Order Processing & Delivery: To process payments, ship your items, handle potential exchanges/returns, and update you on order status (Execution of Agreement).
Customer Service: To answer your questions, resolve issues, and provide support (Execution of Agreement / Legitimate Interest).
Account Management: To manage and store your preferences and past orders if you register an account (Execution of Agreement).
Marketing Communications: To send newsletters, promotional emails, and offers (only if you have opted-in or as an existing customer, Consent / Legitimate Interest).
Legal Obligations: To comply with tax laws, statutory financial administrative obligations, and fraud prevention (Legal Obligation).
Website Optimization: To analyze website usage and improve our shop's performance (Legitimate Interest).

4. How Long We Retain Your Data

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected:

Order & Administrative Data: Retained for 7 years to comply with Dutch tax administration laws (Rijksbelastingdienst).
Account Information: Retained until you request the deletion of your account.
Customer Support Records: Retained for a maximum of 2 years following the last interaction.
Marketing Data: Retained until you unsubscribe or withdraw consent.

5. Sharing Data with Third Parties

We do not sell, rent, or trade your personal data. We only share your data with trusted service providers (Processors) who assist us in running our business, under strict data protection agreements:

Logistics & Delivery Partners: (e.g., PostNL, DHL) to deliver your packages and manage returns.
Payment Service Providers: (e.g., iDEAL, Klarna, Credit Card processors) to handle secure payments.
E-commerce Platform & IT Support: Web hosting providers and software management tools.
Marketing & Analytics Providers: (e.g., Google Analytics) to improve web performance and manage marketing efforts.

Some payment providers (such as Klarna) act as separate data controllers for credit assessment and payment processing. We encourage you to review their respective privacy notices.

6. Cookies and Tracking Technologies

Cotton District uses cookies and similar tracking technologies to enhance your shopping experience, remember preferences, and analyze web traffic.

Essential Cookies: Necessary for the website to function properly (e.g., shopping cart functionality).
Analytical Cookies: Help us understand how visitors interact with the webshop so we can optimize usability.
Marketing Cookies: Used to serve relevant offers and track ad performance across third-party platforms.

You can adjust or disable cookie preferences at any time through your web browser settings or via our cookie consent banner.

7. Your Data Protection Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal information:

Right of Access: You have the right to request copies of your personal data.
Right to Rectification: You can request that we correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data under certain conditions.
Right to Restrict Processing: You have the right to ask us to restrict the processing of your personal data.
Right to Data Portability: You can request that we transfer your collected data to another organization or directly to you.
Right to Object: You can object to our processing of your personal data (e.g., for direct marketing).
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@cottondistrict.shop. We will respond within 30 days.

8. Data Security

We take appropriate technical and organizational measures to safeguard your personal data against loss, unauthorized access, disclosure, or misuse. This includes SSL encryption across our webshop and restricted access to personal data for authorized personnel only.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or applicable legal requirements. Any changes will be posted directly on this page with an updated revision date.

10. Contact Us & Complaints

If you have questions about this Privacy Policy or wish to file a complaint regarding how your data is handled, please contact us at: