Privacy Policy

Last updated: 8 October 2026

The Coffee District, is responsible for the processing of personal data described in this Privacy Policy.

Trading name: The Coffee District
Address: Willemsparkweg 8-H, 1071 HD Amsterdam, the Netherlands
Website: www.coffeedistrict.nl
Email: info@coffeedistrict.nl

For questions about this Privacy Policy or the use of your personal data, contact us at info@coffeedistrict.nl.

 Personal data we collect

Depending on how you use our website and services, we may process the following personal data:

  • your name;

  • billing and delivery addresses;

  • telephone number and email address;

  • order, return and purchase history;

  • payment and transaction information, such as payment status and payment method;

  • account information and login details if you create an account;

  • messages, questions, complaints and other information you provide when contacting us;

  • marketing preferences and newsletter subscriptions;

  • IP address, device type, browser type, operating system and similar technical information;

  • information about how you use our website, subject to your cookie choices; and

  • other personal data that you choose to provide to us.

Payment card and bank details are generally processed directly by our payment service providers. We normally receive only the information needed to confirm and administer the payment.

How we collect personal data

We collect personal data:

  • directly from you when you place an order, create an account, subscribe to communications, contact us or exercise your privacy rights;

  • automatically when you visit or use our website, for example through essential cookies and, where you have given consent, analytics or marketing technologies; and

  • from service providers involved in processing an order or payment, preventing fraud, delivering a parcel or operating our online store.

Purposes and legal bases

We process personal data only when we have a valid legal basis under applicable data-protection law.

We use your contact, order, delivery and payment information to process payments, confirm orders, deliver or prepare products for collection, handle returns and refunds, and provide customer service.

Legal basis: performance of our agreement with you and taking steps at your request before entering into an agreement.

Shopify and other recipients

We use Shopify to operate our online store. Shopify processes personal data on our behalf and may also process certain data for its own purposes as described in Shopify’s privacy information.

Where necessary for the purposes described in this Privacy Policy, we may share personal data with:

  • Shopify and providers that host, maintain or secure our online store;

  • payment service providers and banks;

  • delivery and logistics providers, including PostNL where applicable;

  • providers of customer service, email, newsletter, analytics and marketing tools;

  • professional advisers, such as accountants, legal advisers and insurers;

  • public authorities or regulators where disclosure is legally required; and

  • a buyer, successor or adviser in connection with a proposed or completed restructuring, merger or sale of all or part of our business, subject to appropriate safeguards.

These parties receive only the personal data reasonably necessary for their role. Where required, we enter into data-processing agreements with service providers that process personal data on our behalf.

We do not sell your personal data.

 International data transfers

Some of our service providers, including Shopify and providers used through Shopify, may process personal data outside the European Economic Area.

Where personal data is transferred to a country that does not provide an adequate level of data protection, we use an approved transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where appropriate.

You may contact us if you would like more information about the safeguards used for international transfers relevant to your personal data.

How long we retain personal data

We retain personal data only for as long as necessary for the purpose for which it was collected, including compliance with legal, accounting and reporting obligations.

  • Order, payment and invoice records: generally seven years, as required by Dutch tax and accounting law.

  • Customer accounts: while the account remains active and for a reasonable period afterwards, unless you request earlier deletion and no legal reason requires us to retain the data.

  • Customer-service messages and complaints: for as long as needed to handle the matter and, where relevant, to establish or defend legal claims.

  • Marketing data: until you unsubscribe, withdraw consent or object, subject to a limited suppression record so that we can respect your choice.

  • Cookie and analytics data: for the periods stated in our cookie settings or Cookie Policy.

When data is no longer required, we delete or anonymise it unless continued retention is required or permitted by law.

Cookies and similar technologies

Our website uses cookies and similar technologies. Essential cookies are used to operate the website, remember shopping-cart selections, secure checkout and provide functions you request.

Analytics, personalisation and marketing cookies are used only in accordance with your choices and applicable law. When you first visit the website, you can accept, reject or manage non-essential cookies through the cookie banner. You can change your preferences later through the cookie settings on our website.

Your browser may also allow you to block or delete cookies. Blocking essential cookies can affect the operation of the website and checkout.

More information about the individual cookies, providers, purposes and retention periods should be provided in the Cookie Policy or cookie-settings panel on our website.

Automated decision-making and fraud prevention

We do not intend to make decisions based solely on automated processing that have legal or similarly significant effects on you.

Shopify, payment providers or fraud-prevention providers may use automated tools to assess transactions for possible fraud or security risks. Where an automated assessment affects an order, we may review the relevant circumstances. You can contact us if you have questions about a decision concerning your order.

Your privacy rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

  • obtain information about how we process your personal data;

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests or to direct marketing;

  • receive certain data in a structured, commonly used and machine-readable format and have it transferred where technically feasible;

  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal; and

  • lodge a complaint with a data-protection authority.

To exercise a right, email info@coffeedistrict.nl and describe your request. We will normally respond within one month. This period may be extended by up to two additional months for complex or multiple requests; if so, we will inform you within the first month.

We may ask for information reasonably necessary to verify your identity. We do not ask for a full copy of an identity document as a standard requirement. If additional identification is genuinely necessary, we will explain why and ask you to conceal information that we do not need.

Complaints

If you have a concern about our use of your personal data, please contact us first so that we can try to resolve it.

You also have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl

If you live in another European Economic Area country, you may also contact the data-protection authority in that country.

Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include limiting access to personal data, using appropriate security controls and selecting service providers with suitable privacy and security commitments.

No online system is completely secure. If you believe that your personal data or account may have been compromised, please contact us promptly at info@coffeedistrict.nl.

Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology, legal obligations or data-processing activities change. The current version will be published on this page with the date of the latest update.