Privacy policy

PRIVACY POLICY

Most recent date of amendment: June 2026

This privacy statement (“Privacy Statement”) provides you with information about your personal data that is used on www.english-hatter.nl (“Website”) or in connection with our services, for example to inform you about our products and services and to sell them to you, and for the maintenance, improvement, and management of our products and services, as well as to offer you the best experience when you contact us. The English Hatter respects the privacy rights of its (online) visitors and recognizes the importance of protecting the privacy of collected personal data. For this reason, The English Hatter has implemented strict policies and security measures to protect your personal data.

This Privacy Statement contains the most important information about the processing of your personal data by The English Hatter, with its registered office at Aalsmeerderweg 285A, 1432 CN Aalsmeer, as the data controller (The English Hatter or we).

Introduction

In accordance with the European General Data Protection Regulation 2016/679 (“GDPR”), this Privacy Statement aims to provide you with a clear understanding of the types of personal data we collect and how we use, possibly share, and protect your personal data. It also explains the options you have to manage your data and the rights you have in that context. This Privacy Statement applies when you visit and/or use the Website. By using the Website, you agree and understand that we process your personal data in accordance with this Privacy Statement.

1. Data processed by The English Hatter and why
1.1.        Legal basis for processing
1.2.        Use of data and purposes
1.3.        Social networks
1.4.        Cookies
2. Does The English Hatter share your data with others?
3. How long do we retain your data?
4. Protection and management of your personal data
5. Minors
6. What rights can you exercise in relation to your personal data?
7. Complaints
8. Changes to this Privacy Statement
9. Contact us

1. Data processed by The English Hatter and why

The English Hatter requests certain personal data in order to provide you with the products or services you want. For example, when you place orders, subscribe to our newsletter, or create an account. In addition, we may collect certain data through your interaction with us or our Website.

1.1.        Legal basis for processing

We process your personal data on the following legal bases:

  • Performance of a contract with you: When we process your data for the conclusion of the purchase agreement with you, we ensure that we use only the minimum information necessary for its performance.
  • Providing your personal data for certain activities is a contractual obligation. You are free to provide your data or not, but without the requested data it is not possible to enter into or perform the agreement with you or to comply with your requests. This means, for example, that you cannot buy products or use our services and that we cannot process your requests.
  • Your consent: We carry out certain processing activities only if you have given us your explicit consent to do so, for example in the context of marketing activities, sending newsletters, and analyzing your browsing behavior and consumption patterns within the use of your account, in order to personalize your experience on our Website.
  • If you have given your consent to the processing of your personal data, you may withdraw this consent at any time.
  • Our legitimate interests: In certain cases, we have legitimate interests in processing your personal data, for example to further develop our business activities and improve our Website.
  • A legal obligation: We must comply with statutory requirements. For example, we are required to process your data if this is required in connection with taxes, sanctions legislation, claims, attachments, anti-money laundering, preventing terrorist financing, preventing fraud, and preventing over-crediting.

1.2.        Use of data and purposes

The English Hatter may collect and process the following data for the following purposes on the basis of the stated legal grounds:

  • Subscription to email messages and newsletters:
    You can subscribe to the weekly newsletter of The English Hatter by providing your email address in the newsletter module at the bottom of every page of the Website or when completing your order. We send the newsletter only to online visitors (or registered visitors) if you have chosen to receive the newsletter. All our email messages contain an unsubscribe button, so you can unsubscribe from receiving future email messages at any time. You can also contact us using our contact details to exercise your rights.

  • Your account:
    When completing your order via the Website, it is possible to create an account. To do so, you must provide your email address and a password. In your account you can manage multiple delivery addresses; for this we ask for your address details (street address, house number, postal code, and city) and telephone number.

  • Sale and delivery of products:
    To process and deliver your order, we process certain personal data, such as your shopping cart, payment details (credit card number), delivery details, shipping and billing address, order number, and purchase history with The English Hatter. We also ask for your email address and telephone number to confirm your order (by email), inform you about your order, and, if necessary, contact you so that the delivery of the products you purchased can take place safely and efficiently. These purchase and payment details are also processed to manage your deliveries, any claims, returns, and refunds.
  • Electronic withdrawals:

    When you use our online withdrawal form to exercise your statutory right of withdrawal, we process personal data such as your name, email address, order number, and any additional information you provide in connection with your withdrawal request.

    These data are processed to receive, register, confirm, and handle your request, as well as to comply with our legal obligations regarding consumers’ right of withdrawal.

    For the processing of electronic withdrawals, we use Re:Quest B.V. (RevoQ) as a processor. Re:Quest B.V. processes these personal data solely on our behalf and in accordance with applicable data protection legislation.

    The processing of these data is necessary for the performance of the agreement with you and for compliance with legal obligations to which we are subject.

We also use these data, where necessary, to verify your identity in this context. The order data may also be used for the development and improvement of our products and services on the basis of our legitimate interest, for example by asking you to review the products you purchased. We process these data for the performance of the agreement between us. In the context of our customer service, we process your personal data on the basis of our legitimate interests.

  • Information about your preferences:
    This is information we use to ensure that you have the best experience when we are in contact with each other. This includes, among other things: preferred language, items on the wish list, primary delivery address, and browser settings. We have a legitimate interest in processing these data or ask for your prior consent.

  • Contact:

You can contact us by email, telephone, or social media with any questions or comments. We use your contact details (such as your name, telephone number, shipping and billing address, email address) to handle your questions, process complaints and returns, and provide any technical support. We process these contact details to carry out your contact request (or in connection with your orders). We may also contact you if there is a problem with your order or to invite you, on a voluntary basis, to review the products you purchased.

  • To verify your identity:

In certain cases, we are required to verify and check your identity to ensure that you are who you say you are, for example to ensure that we do not provide personal data to the wrong person in response to a request.

  • Showing targeted advertisements and suitable products:

Using cookies and similar technologies, we collect data about your browsing behavior, the device you use (such as your browser type, versions, and operating system), your geographical location (such as your current login location or your IP address and GPS data), and the use of our Website (such as the date and time of your visit, how long you stayed on our Website,  the referral URL, if you arrived at our Website via another website or an advertisement, and the pages visited) in order to show you targeted advertisements.

The data about your use of our Website (including your purchase history, browsing behavior, and interactions while shopping) are also used to ensure that we only show information that is relevant to you, offer you the best deals and offers in which you may be interested, and optimize your experience as a user of the Website.


We may also collect information via social networks based on public information, such as social media buttons, interactions and messages via social media, your “Likes” and other responses, your social media connections, and your photos, in order to better understand you, build a better relationship with you as a consumer, produce products according to your wishes, and focus our marketing on communications that you find useful and interesting (based on your online behavior), as well as to optimize your social media. Based on these data, profile characteristics may be inferred (through profiling) in order to show you targeted advertisements.


We collect and process these data only if you have given your consent. More information about giving or withdrawing consent via cookies can be found in our cookie policy.
 

  • Improvement of the Website and our services:
    Your (limited) location data will also be used to display information (and language) relevant to you. We also use these data to secure our network and improve our services. We have a legitimate interest in doing so.

We point out that we do not collect or store payment data on our servers. We do this through third parties with whom we have entered into a data processing agreement and who have implemented appropriate security measures to secure all data and personal information obtained. More information about these third parties can be found under point 2.

1.3.        Cookies

We may also obtain information through the use of cookies. A cookie is a small file that is sent to the browser and stored on your device when you visit our Website. The use of cookies helps us improve our Website and provide a more personal experience. Some advertisements on our Website are managed by third-party companies. It should be noted that these companies may also use cookies to collect data about our users.

When you visit our Website, unique cookies are placed to recognize your browser among all other browsers visiting our Website. Please consult our cookie policy for more information.

2. Does The English Hatter share your data with other parties?

Your personal data are provided to third parties in certain cases. In order to carry out our business activities, we work with a number of third parties who are experts in their respective fields, such as our main service providers. In principle, we provide your personal data to such parties only insofar as this is necessary for the performance of a contract with you, if we are legally obliged to do so, if you have given your consent, or if we have a legitimate interest in doing so. This includes partners for payment, delivery, and order processing. 

In addition, we may share personal data with service providers involved in returns handling and the processing of electronic withdrawal requests. For the processing of electronic withdrawals, we use Re:Quest B.V. (RevoQ), which processes these data solely on our behalf as a processor.

Some parties qualify as so-called processors and will therefore not process your personal data for their own purposes, but only in accordance with the instructions given by The English Hatter. These processors have been duly selected and guarantee that the rules on the processing of personal data are complied with.

We may also disclose your personal data to the police and to judicial and administrative authorities, in accordance with the law, for the detection and prosecution of criminal offences, the prevention of and protection against threats to public safety, to enable us to exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others. It is also possible that, in the event of the sale of certain business assets, a merger, or an acquisition, we may provide your personal data to the potential buyer.

3. How long do we retain your data?

We retain your personal data for a limited period, depending on the type of activity involved in the processing of your personal data. For example, data used to send you newsletters or offers are deleted after you unsubscribe, and personal data used to create your account are erased within 2 years after termination of this account. However, we retain these personal data for longer after you have deleted your account insofar as this is necessary to comply with our legal and regulatory obligations, and for the purposes of fraud monitoring, detection, and prevention. We also retain your data to comply with our tax and accounting obligations and our financial reporting obligations. If we retain your data, we do so in accordance with all limitation periods and data retention obligations imposed by applicable law.

After these periods, your data will be permanently deleted or otherwise irreversibly anonymized.

4. Protection of your personal data

We have taken appropriate technical and organizational measures to protect your data against loss, alteration, access, or improper use. This includes in particular the following measures:

Encryption and security

The English Hatter has implemented various security measures to maintain the safety of your personal data. All payment details provided by you are sent via Secure Socket Layer technology (SSL), which encrypts your data before it is provided to us in order to protect these data against unauthorized use. In addition to SSL encryption, we use MasterCard SecureCode, which provides an additional level of security when you place an order. This code protects you against improper use of your credit card number. All payment details are processed via a portal provider and are not stored or processed on our servers. Although we do our best to protect your personal data, security cannot be guaranteed.

Third-party links

Our Website may contain links to external websites operated by other companies. These third-party links may collect personal data from visitors to their website. The English Hatter is neither responsible nor liable for the content and activities of these linked websites.

5. Minors

If you are under the age of 16, we ask you to inform your parent or guardian and obtain the consent of a parent or guardian before providing us with your personal data.

6. What rights can you exercise in relation to your personal data?

You have the right to access and amend or supplement the personal data we have obtained from you. You have the right to object to the processing of your personal data. In certain cases, you may also ask us to restrict the processing of your personal data, transfer them to another controller, or delete them. If you wish to exercise any of these rights, you can send a request to our customer service via info@english-hatter.nl, indicating that it concerns a request relating to personal data.

To prevent us from providing your personal data to someone else, we may ask you to provide certain personal data to verify your identity. For example, we may ask you to log in to your account or to provide the last digits of your account number, your telephone number, or other data.

You will receive an overview of your data or a response to your request within one month of receiving your request, unless we are dealing with complex requests or a large number of requests. In those cases, we may extend our response period by two months. In any event, we will inform you of this within one month of receiving your request.

7. Complaints

Although we hope this will not be necessary, you may have complaints about our use of your personal data; in that case, please send an email describing your complaints to info@english-hatter.nl. We will handle your complaints and respond to all complaints received by us.

If you believe that we have wrongly failed to comply with your request(s) or that the processing of your personal data has been carried out unlawfully, you may lodge a complaint with the supervisory authority responsible for compliance with data protection rules. In the Netherlands, such complaints can be submitted to the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl. If you are dissatisfied with the way the complaint has been handled, you may then appeal to the court.

8. Changes to this Privacy Statement

The English Hatter reserves the right to make changes to this Privacy Statement without prior notice. Changes will be published on our Website, stating the date of its last update. If you continue to visit the Website, you are automatically bound by the amended Privacy Statement. We therefore advise you to check this Privacy Statement regularly.

9. Contact us

If you have any questions about our use of your data, how to exercise your rights, or about our policies, please contact us using the details below.

Telephone: +31(0) 85 - 2126 898 (Monday to Friday 9:00 – 17:00 CET)
Email: info@english-hatter.nl