Privacy Policy
Last updated: October 2026
Introduction
This privacy policy describes how Batch One collects and processes personal data via its website and webshop.
Batch One is a trade name of Harink en Loykens VOF, registered in the Netherlands. We act as data controller for the processing activities described in this policy.
Harink en Loykens VOF (trading as Batch One) Oude Rijksweg 639 7954 GP Rouveen The Netherlands KvK: 42139219 VAT: NL869894869B01 Email: info@batch-one.com
We take the protection of your personal data seriously. This policy explains what data we collect, why, and what your rights are under the General Data Protection Regulation (GDPR).
What personal data we collect
Depending on how you use our website and webshop, we may process the following data:
- Contact and identification details (such as name, email address, delivery address)
- Order and transaction data (such as products ordered, payment method, order history)
- Technical data (such as IP address, browser type, operating system)
- Usage data (such as pages visited, time spent, click behaviour)
This data is obtained directly from you (when you place an order or contact us) or collected automatically via cookies and similar technologies.
Why we process your data
|
Purpose |
Data |
Legal basis |
Retention |
|---|---|---|---|
|
Processing and fulfilling orders |
Contact details, order data |
Performance of contract |
7 years (tax obligation) |
|
Customer service and responding to enquiries |
Contact details |
Legitimate interest |
2 years after last contact |
|
Sending order confirmations and shipping updates |
Email address |
Performance of contract |
Duration of the order process |
|
Email marketing (newsletter) |
Email address |
Consent |
Until consent is withdrawn |
|
Website security and functionality |
Technical data |
Legitimate interest |
Duration of visit or session |
|
Analytics (if activated) |
Technical data, usage data |
Consent |
Until consent is withdrawn |
You can withdraw your consent at any time by emailing info@batch-one.com. Withdrawal does not affect the lawfulness of processing before that point.
Who we share your data with
We only share your personal data when necessary, and always under a data processing agreement that meets GDPR requirements. We work with the following parties:
- Shopify (website hosting and webshop platform)
- DHL (shipping and delivery)
- Payment providers (such as Mollie or Stripe, for processing payments)
- Email marketing tools (such as Klaviyo or Mailchimp, if applicable)
- Cookie consent management (such as Pandectes or CookieYes)
We do not sell your personal data to third parties. We may also share data if required by law or in the event of a legal dispute.
In principle, we do not transfer personal data outside the European Economic Area (EEA). If a transfer outside the EEA is unavoidable, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Cookies
Our website uses cookies and similar technologies. We use strictly necessary cookies for the functioning and security of the website, for which no consent is required.
If we add analytics or marketing cookies in the future, we will ask for your consent via a cookie banner before placing them. You can manage or withdraw your cookie preferences at any time via the cookie settings on our website.
For more information, see our Cookie Policy.
Your rights
Under the GDPR, you have the following rights:
- Right of access: you can request a copy of the personal data we hold about you.
- Right to rectification: you can ask us to correct inaccurate or incomplete data.
- Right to erasure: in certain cases, you can ask us to delete your data.
- Right to object: you can object to processing based on legitimate interest, and always to direct marketing.
- Right to restriction: you can ask us to limit how we use your data in certain circumstances.
- Right to data portability: you can request your data in a structured, machine-readable format.
Exercising your rights is free of charge. To do so, contact us at info@batch-one.com. We will respond within one month. In exceptional cases this may be extended to three months, but we will inform you within the first month.
Complaints
If you believe we are not handling your personal data correctly, please contact us first at info@batch-one.com. We will do our best to resolve your concern.
You also have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (AP) Website: www.autoriteitpersoonsgegevens.nl Address: Hoge Nieuwstraat 8, 2514 EL Den Haag Phone: +31 (0)70 888 85 00
Changes to this policy
We may update this privacy policy from time to time. Any changes will be published on our website. The date at the top of this page shows when the policy was last updated. We recommend reviewing this page periodically.
Updated versions take effect 14 days after publication, unless changes are required by law, in which case they take effect immediately.
Applicable law: this privacy policy is governed by Dutch law. Any disputes arising from it fall under the jurisdiction of the competent Dutch courts.
