Privacy Policy

At FLFFY, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains which personal data we collect, why we process it, how long we retain it and what rights you have under the General Data Protection Regulation (GDPR).

Data Controller

The controller responsible for processing your personal data is:

FLFFY
Operated by VG Ladi Holding B.V.
Based in the Netherlands

Chamber of Commerce (KvK): 88624331
VAT number: NL854874264B01

Email: info@flffy.online
Phone & WhatsApp: +31 6 8393 3916

Personal Data We Collect

Depending on how you use our website and services, we may process:

• Your name
• Email address
• Telephone number
• Billing and shipping address
• Order and payment details
• Personalisation details submitted with your order
• Messages and other communications with FLFFY
• Return, refund and complaint information
• IP address, browser information and device data
• Cookie preferences and website usage information
• Marketing preferences, where applicable

FLFFY does not directly store complete payment card details. Payments are processed securely by our payment providers.

Why We Process Your Data

We may process your personal data to:

• Process, personalise and deliver your order
• Receive and verify payments
• Send order confirmations, shipping updates and Track & Trace information
• Provide customer service
• Process returns, refunds, complaints and warranty requests
• Prevent fraud, misuse and payment-related risks
• Maintain our financial and tax administration
• Protect and improve the security and performance of our website
• Analyse website usage where permitted
• Send marketing communications where you have provided consent or where otherwise legally permitted
• Comply with our legal obligations

Legal Bases

We process personal data only when we have a valid legal basis. Depending on the purpose, we rely on:

• Performance of a contract: to process, personalise, deliver and provide support for your order
• Legal obligation: to comply with tax, accounting and other legal requirements
• Legitimate interests: to operate and secure our business, prevent fraud, improve our services and handle disputes
• Consent: for optional cookies and certain marketing communications

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

Payment Providers

Payments may be processed by trusted payment providers, including Mollie and PayPal.

These providers process the information required to complete and verify your payment. Their own privacy policies may also apply to their processing activities.

FLFFY does not store complete credit or debit card details.

Sharing Personal Data

We do not sell your personal data.

We may share information only when necessary with service providers such as:

• Our website and webshop provider, including JouwWeb
• Payment providers, including Mollie and PayPal
• Shipping platforms and delivery partners, including Sendcloud and the selected carrier
• IT, hosting, email and security providers
• Analytics or marketing providers, where these tools are enabled and the required consent has been obtained
• Accountants, professional advisers or competent authorities where legally required

These parties receive only the information reasonably necessary to provide their services or comply with the law.

Some providers, such as payment or technology companies, may process personal data as independent controllers under their own privacy policies.

International Transfers

Some service providers may process data outside the European Economic Area.

Where required, we ensure that appropriate safeguards are used, such as an adequacy decision issued by the European Commission or approved Standard Contractual Clauses.

Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by law.

In general:

• Order, invoice and payment records are retained for at least seven years where required under Dutch tax legislation
• Customer-service, complaint and return information is retained for as long as necessary to resolve the matter and establish or defend legal claims
• Personalisation information may be retained as part of the relevant order record
• Marketing information is retained until you unsubscribe or withdraw your consent
• Cookie and analytics information is retained according to the retention periods described by the relevant cookie or service provider

Once personal data is no longer required, it will be deleted or anonymised unless continued retention is legally necessary.

Cookies

Our website may use:

• Essential cookies required for the website, shopping basket, checkout and security
• Preference cookies that remember selected settings
• Analytics cookies that help us understand website usage
• Marketing cookies used to measure advertising or show relevant content

Non-essential analytics and marketing cookies will only be placed where the legally required consent has been obtained.

You can accept, refuse or adjust optional cookies through our cookie banner or your browser settings. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Disabling essential cookies may affect the operation of the website or checkout.

Marketing Communications

We will only send marketing emails where you have consented or where another lawful basis permits us to do so.

You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us. Unsubscribing from marketing does not prevent us from sending essential communications relating to an existing order.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of online transmission or electronic storage can be guaranteed to be completely secure.

Your Privacy Rights

Subject to the conditions of the GDPR, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Object at any time to direct marketing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with a data-protection authority

Certain requests may be limited where FLFFY is legally required to retain information, for example for tax administration or the establishment, exercise or defence of legal claims.

We may request information necessary to verify your identity before processing a privacy request. We will normally respond within one month, as required by the GDPR.

Automated Decision-Making

FLFFY does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

Payment and fraud-prevention providers may perform automated checks under their own policies.

Complaints

If you have a concern about how we process your personal data, please contact us first so we can try to resolve the matter.

You also have the right to submit a complaint to the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl

Changes to This Privacy Policy

We may update this Privacy Policy when our services, providers or legal obligations change.

The latest version will always be published on this page together with the date of the most recent update.

Contact

For questions or requests concerning this Privacy Policy or your personal data, please contact:

Email: info@flffy.online
Phone & WhatsApp: +31 6 8393 3916

Last updated: August 2026