Privacy policy

Here is the exact translation with all the proper markdown formatting, bolding, list elements, and clear structural headings applied:

Privacy Policy

Last updated: June 4, 2026

This Privacy Policy describes how Ruffman ("the Site", "we", "us", or "our") collects, uses, and shares your personal data when you visit, use our services, make a purchase from www.ruffman.nl (the "Site"), or otherwise communicate with us (collectively, the "Services").

For the purpose of this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether you are a customer, website visitor, or another person from whom we collect information pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Privacy Policy on the Site, adjust the "Last updated" date, and undertake all other steps required by applicable law.

How we collect and use your personal data

To be able to deliver the Services, we collect personal information about you from various sources, as set out below. The information we collect and use depends on your interaction with us.

In addition to the specific use described below, we may also use the information we collect about you to communicate with you, deliver or improve the Services, comply with applicable legal obligations, enforce our terms of service, and to protect or defend the Services, our rights, and the rights of our users or third parties.

Which personal data we collect

Which type of personal data we obtain about you depends on your interactions with our Site and your use of our Services. When we use the term 'personal data', we mean data that identifies you directly or indirectly, relates to you, or describes you.

1. Information we collect directly from you

Information that you provide directly to us through our Services may include the following:

  • Contact details: Your name, address, phone number, and email address.

  • Order details: Your name, billing address, shipping address, payment confirmation, email address, and phone number.

  • Account details: Your username, password, security questions, and other information used for the security of your account.

  • Customer service information: The information you decide to include in your communication with us, for example, when you send a message via the contact form or by email.

For some functions of the Services, it is necessary that you provide us with this data. You can choose not to do so, but in that case, you may not be able to use these specific functions (such as completing an order or creating an account).

2. Information we collect about your use (Usage Data)

We automatically collect certain information about your interaction with the Services. For this purpose, we use cookies, pixels, and similar technologies ("Cookies"). Usage Data contains information about how you visit and use our Site and your account, including device and browser information, information about your network connection, your IP address, and data about your interaction with the Services.

3. Information we obtain from third parties

Finally, we may obtain information about you from third parties and service providers acting on our behalf, such as:

  • Platform support: Companies that support our Site and Services, in particular Shopify.

  • Payment processors: Our payment processors collect your payment details (such as bank account, credit card, or debit card details and the billing address) to securely process your payment and to be able to execute your order.

  • Online tracking: When you visit our Site, open emails we send you, or interact with our advertisements, we or our partners may automatically collect information using online tracking technologies (such as pixels, web beacons, and cookies).

All information we obtain from third parties is treated in accordance with this Privacy Policy.

How we use your personal data

  • Delivery of products and services: We use your personal data to fulfill our agreement with you. This includes processing payments, executing and shipping orders, sending updates about your order or account, facilitating returns, and managing your account. To improve your shopping experience, Shopify can match your account with other Shopify services that you use. Shopify processes this data according to their own Privacy Policy for Consumers.

  • Marketing and advertising: We can use your personal data to send you marketing and promotional communications by email or to show you personalized advertisements on our Site and other websites. The legal basis for this processing is our legitimate interest in selling our products (Art. 6 paragraph 1 sub f GDPR). You can opt out of this at any time.

  • Security and fraud prevention: We use your data to detect and investigate potential fraudulent, illegal, or malicious activities. If you register an account, you are personally responsible for keeping your login details secret. The legal basis for this is our legitimate interest in keeping our website and our customers safe (Art. 6 paragraph 1 sub f GDPR).

  • Communication and service improvement: We use your data for customer service and to optimize our Services. This is in our legitimate interest to communicate effectively with you and to maintain our business relationship with you (Art. 6 paragraph 1 sub f GDPR).

Cookies

Like many other websites, we use cookies on our Site. Specific information about the cookies that Shopify uses to support our store can be found via https://www.shopify.com/legal/cookies.

We use cookies to optimize the Site, remember your preferences, and perform analyses on the interaction with our Services. You can configure your browser to refuse or delete cookies. Please bear in mind that this can have a negative impact on the functioning of the webshop and that certain functions may no longer work correctly.

How we share personal data

In certain circumstances, we share your personal data with third parties for the execution of our agreement, on the grounds of a legitimate interest, or to comply with the law. This happens in the following cases:

  • Dienstverleners (Service providers): With suppliers who perform services on our behalf, such as IT management, payment processing, data analysis, customer service, cloud storage, and logistics partners (shipping and handling).

  • Marketing partners: With business partners and marketing platforms to show advertisements to you. They process this data according to their own privacy policies.

  • Your consent: When you specifically ask us or give us permission to pass data to third parties, for example via social media widgets or login integrations.

  • Business transactions and legislation: In the event of a merger, acquisition, or bankruptcy, or when we are legally required to share data (for example, following an official request from government authorities or to protect our rights).

Overview of data sharing:

Data category Recipient categories
Identificatiegegevens (Identification data) (basic contact details, order and account information) IT service providers, payment processors, fulfillment and transport partners, customer service partners.
Commerciële informatie (Commercial information) (order history, shopping behavior, customer service interactions) Marketing partners, advertising networks, and data analysis providers.
Internet- en netwerkactiviteit (Internet and network activity) (usage data, IP address, browser info) Analytics providers, internet providers, and hosting parties.

We never sell or rent your personal data to third parties.

Third-party websites

Our Site may contain links to third-party websites. If you follow these links, your visit falls under the privacy policy of those specific websites. We bear no responsibility and provide no guarantees for the privacy or security of websites that are not managed by us.

Children's data

The Services are not intended for use by persons under the age of 16. We do not knowingly collect personal data of children. If you are the parent or guardian of a child who has provided us with personal data, you can contact us via the contact details below to request that this data be erased.

Security and retention of your data

Although we take appropriate technical and organizational measures to protect your data, no security is 100% impenetrable. We can therefore not guarantee absolute security. Data that you send to us via unsecured channels (such as regular email) may be at risk during transmission; we recommend always choosing a secure method for sensitive information.

How long we retain your personal data depends on statutory retention periods (such as the tax retention obligation of 7 years for order data) and whether we need the data to continue delivering our services to you.

Your rights

Based on the GDPR, you have the following rights regarding your personal data:

  • Right of access: You have the right to ask which personal data we hold about you and how we use it.

  • Right to rectification: You have the right to have inaccurate or incomplete data adjusted.

  • Right to erasure ("Right to be forgotten"): You can request us to erase your data, insofar as we are not legally required to retain it.

  • Right to restriction: You can ask to temporarily pause the processing of your data.

  • Right to data portability: You have the right to receive a copy of your data in a structured, commonly used format, so that you can transfer it to another party.

  • Withdrawal of consent: If a processing activity is based on your consent (such as the newsletter), you can withdraw this consent at any time via the unsubscribe link in the email.

To make use of these rights, you can contact us via info@ruffman.eu. We may ask you to verify your identity before we process your request. In principle, we respond to your request within one month.

Complaints

If you have complaints about the way we handle your privacy, we would of course like to hear about it and resolve it together with you. Should we not be able to work it out together, you have the right under privacy legislation to file a complaint with the national regulatory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens - AP).

International data transfer

We can transfer your personal data to and store it in countries outside the European Economic Area (EEA), for example because our platform provider Shopify has backups or servers there. When we transfer data outside the EEA, we ensure that this happens on the basis of approved transfer mechanisms, such as the Standard Contractual Clauses (SCCs) of the European Commission, to guarantee an adequate level of protection.

Contact

For questions about this Privacy Policy or to exercise your rights, you can contact us via:

Email: support@ruffman.eu

Postal address:

VULT

Brugstraat 7, 4691 EB Tholen

The Netherlands

In the framework of the GDPR, Ruffman is the data controller for your personal data.