Privacy policy

Privacy Policy

Last updated: 28 July 2026

Your privacy is important to us. This Privacy Policy explains how ekck collects, uses, stores and shares personal information when you visit our website, place an order, create an account, subscribe to our communications or contact us.

This Privacy Policy applies to personal information processed through our online store, customer service and other interactions with ekck.

1. Who we are

This online store is operated by:

KCK Group B.V.
Trading as: ekck
Kreekweg 16
3133 AZ Vlaardingen
The Netherlands

Chamber of Commerce registration number (KVK): 42053513
VAT identification number: NL869493851B01
Email: info@kckgroupbv.com

For the purposes of applicable data-protection law, KCK Group B.V. is the controller of the personal information described in this Privacy Policy.

2. Personal information we collect

The information we collect depends on how you interact with ekck.

Information you provide directly

We may collect information such as:

Your first and last name;
Your email address;
Your billing and delivery address;
Your telephone number if you choose or are required to provide one for delivery;
Your order number and order history;
The products, sizes, colours and quantities you purchase;
Your customer-account information;
Your newsletter and marketing preferences;
Information contained in emails, return requests, complaints or other messages you send to us;
Information you provide when reporting a damaged, defective, missing or incorrectly supplied product.

Payment and transaction information

Payments are processed by Shopify and our selected payment-service providers. We may receive information such as:

The payment method used;
The payment status;
The transaction date and amount;
A payment or transaction reference;
Limited payment details, such as the final digits of a payment card where available;
Information relating to refunds, chargebacks or suspected fraudulent payments.

ekck does not normally receive or store your complete payment-card number or card security code.

Information collected automatically

When you visit or use our website, certain information may be collected automatically through Shopify, cookies and similar technologies, including:

Your IP address;
Your approximate location based on your IP address;
Your browser, device type and operating system;
Your language and time-zone settings;
Cookie and device identifiers;
The pages and products you view;
The website or advertisement that referred you to ekck;
Products added to or removed from your shopping basket;
Checkout activity;
Website interactions, errors and performance information;
Information used to protect our website and detect suspicious activity.

Information received from other parties

We may receive information from service providers that support our store, including Shopify, payment providers, delivery carriers, fraud-prevention services, analytics providers, advertising platforms and email-service providers.

We use information received from these parties only for the purposes described in this Privacy Policy or as otherwise permitted by law.

3. How we use personal information

We may use personal information to:

Receive, process and confirm orders;
Process payments and prevent payment fraud;
Prepare, dispatch and deliver orders;
Send order confirmations, shipping updates and other service messages;
Manage returns, refunds, cancellations, exchanges and complaints;
Respond to customer-service enquiries;
Maintain customer accounts and order histories;
Verify transactions and protect customers against unauthorised activity;
Operate, maintain, secure and improve our website;
Understand how visitors use our website and services;
Measure website and campaign performance;
Provide personalised content or advertising where permitted and where the required consent has been obtained;
Send newsletters, product releases, early-access information and promotional communications;
Administer promotions, including complimentary gifts connected to qualifying orders;
Maintain our financial and business administration;
Comply with tax, accounting, consumer-protection and other legal obligations;
Establish, exercise or defend legal claims;
Enforce our policies and Terms of Service.

4. Legal bases for processing

Where the General Data Protection Regulation applies, we rely on one or more of the following legal bases.

Performance of a contract

We process information where this is necessary to enter into or perform our agreement with you. This includes processing orders, receiving payment, arranging delivery and handling returns or refunds.

Legal obligation

We process and retain certain information to comply with legal obligations, including tax, accounting, fraud-prevention and consumer-protection requirements.

Legitimate interests

We may process information where this is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

These interests may include:

Providing and improving customer service;
Operating and improving our online store;
Protecting our business, systems and customers;
Preventing fraud and misuse;
Understanding general website performance;
Managing disputes and legal claims.

Consent

We rely on consent where required, including for certain marketing communications, analytics cookies, advertising cookies and personalised advertising.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that lawfully took place before consent was withdrawn.

5. How we share personal information

We do not sell customer databases for money. We may share personal information with trusted service providers where this is necessary to operate our business and provide our services.

These recipients may include:

Shopify and its affiliated companies;
Payment processors and payment-method providers;
Fraud-prevention and security providers;
Delivery carriers, postal services and fulfilment providers;
Customer-service and communication providers;
Email and newsletter providers;
Analytics and website-performance providers;
Advertising and social-media platforms, subject to your privacy choices and consent where required;
Hosting, cloud-storage, software and IT-service providers;
Accountants, legal advisers, insurers and other professional advisers;
Tax authorities, regulators, courts, law-enforcement authorities or other public bodies where disclosure is legally required.

Service providers may process personal information only as necessary to provide their services, comply with legal obligations or otherwise as permitted under their own applicable privacy terms.

6. Shopify

Our store is hosted on Shopify. Shopify provides the commerce platform that enables us to display products, manage orders, operate our checkout and provide other store functions.

Shopify processes personal information when you visit our website, make a purchase, use the checkout or interact with Shopify services such as Shop or Shop Pay.

Depending on the Shopify features and settings active in our store, Shopify may also process information about your interactions with our store and with other merchants in order to provide, personalise, analyse or improve Shopify services.

For more information about how Shopify processes consumer information, please read the Shopify Consumer Privacy Policy .

Certain Shopify privacy choices may also be available through the Shopify Privacy Portal .

7. Cookies and similar technologies

ekck, Shopify and selected service providers use cookies and similar technologies to operate the website, remember preferences, understand website activity, protect the checkout and support analytics or advertising.

Necessary cookies

Necessary cookies are used for essential functions such as:

Website navigation;
Shopping-basket functionality;
Checkout and payment processes;
Security and fraud prevention;
Customer login;
Remembering privacy and cookie preferences.

These cookies are required for the website to function properly and cannot always be disabled through our cookie banner.

Analytics and performance cookies

These cookies help us understand how visitors interact with the website, which pages or products are viewed and whether technical improvements are required.

Where legally required, these cookies are activated only after you provide consent.

Marketing and advertising cookies

These cookies may be used to measure advertising campaigns, understand interactions with advertisements and display advertising that may be more relevant to you.

Where legally required, these cookies are activated only after you provide consent.

Managing your cookie choices

You can accept, reject or adjust non-essential cookies through the privacy or cookie settings displayed on our website.

You may also adjust cookie settings through your browser. Blocking certain cookies may affect the operation of parts of the website.

8. Marketing communications

When you subscribe to our newsletter or otherwise provide a valid marketing preference, we may send you information about:

New collections and product releases;
Early access;
Restocks;
Special offers and promotions;
ekck news and events;
Complimentary-gift promotions.

You can unsubscribe at any time by clicking the unsubscribe link at the bottom of a marketing email or by contacting info@kckgroupbv.com.

Unsubscribing from marketing does not prevent us from sending necessary service communications relating to an order, payment, delivery, return, refund or customer account.

We may retain limited information about your unsubscribe request so that we can continue to respect your preference.

9. International transfers

Some of our service providers, including Shopify and other technology providers, operate internationally. Personal information may therefore be processed in countries outside the Netherlands or the European Economic Area.

Where applicable law requires additional protection for an international transfer, the transfer may be based on:

A decision recognising that the destination provides an adequate level of protection;
Approved standard contractual clauses;
A recognised certification or data-transfer framework;
Another lawful transfer mechanism.

Service providers may also be required to disclose information under laws that apply in the country where they operate.

10. How long we retain information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, tax, accounting, security and dispute-resolution requirements.

Our general retention periods are:

Order, payment, invoice and financial-administration information is normally retained for at least seven years, or longer where a specific tax or VAT rule requires a longer period.
Customer-service correspondence is normally retained for up to two years after the enquiry has been resolved, unless it is required for an ongoing complaint, dispute or legal claim.
Return, refund, chargeback and complaint information may be retained for the applicable legal limitation period.
Marketing-subscription information is retained until you unsubscribe, withdraw consent or the information is no longer required.
Customer-account information is generally retained while the account remains active and for a reasonable period afterwards.
Technical, fraud-prevention and security information is retained for as long as reasonably necessary to protect our services and investigate incidents.
Cookie information is retained in accordance with the lifespan of the relevant cookie and your privacy settings.

Information may be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

11. Security

We take reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.

These measures may include access controls, secure connections, account protection, service-provider safeguards and procedures for dealing with suspected security incidents.

However, no online transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping customer-account login information confidential and for informing us if you suspect unauthorised use of your account.

12. Your privacy rights

Depending on the circumstances and subject to applicable legal conditions and exceptions, you may have the right to:

Request confirmation of whether we process your personal information;
Request access to your personal information;
Request correction of inaccurate or incomplete information;
Request deletion of personal information;
Request restriction of certain processing;
Receive certain information in a structured, commonly used and machine-readable format;
Request that eligible information be transferred to another organisation;
Object to processing based on legitimate interests;
Object at any time to the use of your information for direct marketing;
Withdraw consent where processing is based on consent;
Submit a complaint to a competent data-protection authority.

These rights are not absolute. For example, we may need to retain information where this is required for tax administration, fraud prevention or the establishment or defence of legal claims.

13. Exercising your privacy rights

To exercise a privacy right or ask a question about your personal information, contact:

info@kckgroupbv.com

Please clearly describe your request and provide sufficient information for us to identify the relevant customer or order.

To protect customer information, we may request reasonable proof of identity before processing a request. We will use identity-verification information only for handling and documenting the request.

We aim to respond within the period required by applicable data-protection law. Under the GDPR, this will normally be within one month. Where legally permitted, this period may be extended for particularly complex requests or a high number of requests.

14. Complaints

If you believe that your personal information has not been handled correctly, please contact us first so that we can review your concern.

You also have the right to submit a complaint to the Dutch data-protection authority:

Autoriteit Persoonsgegevens
Website: www.autoriteitpersoonsgegevens.nl

If you reside in another country, you may also be entitled to contact the competent data-protection authority in that country.

15. Children’s privacy

Our online store is not specifically designed to collect personal information from children. We do not knowingly use children’s personal information for targeted marketing.

If you believe that a child has provided personal information without the required permission, please contact us so that we can review and, where appropriate, remove the information.

16. External websites

Our website may contain links to third-party websites, social-media platforms or services. We are not responsible for the privacy practices of websites or services that we do not operate.

We recommend reading the privacy policies of third parties before providing personal information to them.

17. Business changes

If ekck or KCK Group B.V. is involved in a merger, acquisition, restructuring, financing or sale of all or part of its business, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

18. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, providers, legal obligations or data-processing activities change.

The latest version will be published on this page. The revision date at the top of the policy indicates when it was last updated.

Where required by law, we will provide additional notice of material changes.

19. Contact us

For privacy questions, requests or concerns, contact: