Privacy Policy

At FLFFY, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we use it, how long we retain it and what rights you have under the General Data Protection Regulation (GDPR).

Data Controller

The data controller responsible for your personal data is:

VG Ladi Holding B.V., trading as FLFFY
Drouwenstraat 48
2545 WK Den Haag
The Netherlands

Chamber of Commerce (KvK): 88624331
VAT number: NL854874264B01

Email: info@flffy.online
Phone & WhatsApp: +31 6 8393 3916

Personal Data We Collect

Depending on how you use our website and services, we may process:

  • Your name
  • Email address and telephone number
  • Billing and shipping address
  • Order and payment information
  • Personalisation details, including names, preferences and measurements you provide
  • Messages and other communications with FLFFY
  • Return, refund and complaint information
  • IP address, browser and device information
  • Cookie preferences and website usage information
  • Marketing preferences, where applicable

We do not directly store complete payment card details. Payments are processed by the relevant payment provider.

Why We Use Your Data

We use personal data where necessary to:

  • Process and prepare your order, including personalisation
  • Receive and verify payments
  • Arrange delivery and send order confirmations, shipping updates and Track & Trace information
  • Respond to questions and provide customer service
  • Handle returns, refunds, complaints and legal claims
  • Maintain our financial and tax records
  • Protect and maintain the security of our website and business
  • Understand website use, where permitted
  • Send marketing communications where you have consented or where this is otherwise permitted by law
  • Meet our legal obligations

Legal Bases

We process your personal data only when we have a valid legal basis. Depending on the purpose, this may be:

  • Contract: to process, personalise and deliver your order and provide related customer service
  • Legal obligation: to meet tax, accounting and other legal requirements
  • Legitimate interests: to secure and operate our business, prevent fraud, handle disputes and improve our services, where these interests do not override your rights
  • Consent: for optional cookies and marketing activities where consent is required

You can withdraw consent at any time. This does not affect processing that took place before you withdrew it.

Some information, such as your name, contact details, delivery address and order details, is needed to process and deliver an order. If you do not provide the required information, we may be unable to accept or fulfil your order.

Payment Providers

Payments may be processed by payment providers such as Mollie and PayPal, depending on the payment method you choose.

These providers process the information needed to complete and verify your payment. Their own privacy policies also apply to their processing activities.

FLFFY does not store complete credit or debit card details.

How We Share Personal Data

We do not sell your personal data. Where necessary, we may share relevant information with service providers that help us run our business, such as:

  • Our website and webshop provider, including JouwWeb
  • Payment providers, including Mollie and PayPal
  • Shipping platforms and delivery partners, including Sendcloud and the carrier selected for your order
  • IT, hosting, email and security providers
  • Analytics or marketing providers, if these tools are enabled and any required consent has been obtained
  • Accountants, professional advisers or public authorities where required by law

We share only the information reasonably needed for the relevant service. Some providers, such as payment providers, may process your data as independent controllers under their own privacy policies.

International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA). Where applicable, we use an appropriate legal transfer mechanism, such as an adequacy decision by the European Commission or approved Standard Contractual Clauses.

How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, unless the law requires us to keep it longer.

  • Order, invoice and payment records are generally kept for seven years where required for tax and accounting purposes. The Dutch Tax Administration lists seven years as the standard retention period for basic business records.
  • Customer-service, return and complaint information is kept as long as needed to handle the matter and any related legal claims.
  • Personalisation details may be retained as part of the relevant order record.
  • Marketing information is kept until you unsubscribe or withdraw your consent, subject to any limited records needed to respect your preferences.
  • Cookie and analytics information is kept according to the applicable settings and retention periods of the relevant service.

When we no longer need personal data, we delete or anonymise it unless we are legally required to retain it.

Cookies

Our website may use essential cookies needed for features such as the shopping basket, checkout and website security. Depending on the tools enabled on the website, it may also use preference, analytics or marketing cookies.

Where required by law, we ask for your consent before placing non-essential cookies. You can accept, refuse or change your choices through the cookie banner or settings available on our website. You can also adjust your browser settings. Disabling essential cookies may affect the operation of the website or checkout.

Marketing Communications

We send marketing emails where you have consented or where another lawful basis permits us to do so.

You can unsubscribe at any time using the link in a marketing email or by contacting us. Unsubscribing does not stop essential messages about an order you have placed.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No method of online transmission or electronic storage can be guaranteed to be completely secure.

Your Privacy Rights

Subject to the conditions set out in the GDPR, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Object to direct marketing at any time
  • Request data portability
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a data-protection authority

These rights are subject to legal conditions. For example, we may need to retain certain information to meet tax obligations or to establish, exercise or defend legal claims.

To make a request, contact us using the details below. We may ask for information to verify your identity. We will normally respond within one month. If a request is complex or we receive several requests, the GDPR may allow us to extend this period; if so, we will let you know within the first month. Autoriteit Persoonsgegevens

Automated Decision-Making

FLFFY does not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Payment and fraud-prevention providers may carry out automated checks under their own privacy policies.

Complaints

If you have a concern about how we use your personal data, please contact us first so we can try to resolve it.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens:

www.autoriteitpersoonsgegevens.nl

Changes to This Privacy Policy

We may update this Privacy Policy if our services, providers or legal obligations change. The latest version will be published on this page, together with its update date.

Contact

For questions or requests about this Privacy Policy or your personal data, contact:

VG Ladi Holding B.V., trading as FLFFY
Email: info@flffy.online
Phone & WhatsApp: +31 6 8393 3916

Last updated: October 2026