Last updated: 16.10.2026

1. Who We Are

This website is operated by Rhyme&Hype B.V. (“we”, “us”, or “our”), trading as Rhyme&Hype. We are the data controller responsible for your personal data under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG).

Registered Address: Hoogoorddreef 105, 1101 BB Amsterdam, Amsterdam-Zuidoost
Chamber of Commerce (KvK) Number: [e.g. 12345678]
VAT (BTW) Number: [e.g. NL123456789B01]
Customer Care Email: info@rhymeandhype.store
Website: https://rhymeandhype.store

2. Personal Data We Collect and Why

Depending on how you interact with our online boutique, we process the following categories of personal data:

• Orders and Delivery: When you purchase clothing items, we collect your first and last name, delivery address, billing address, email address, phone number, and items ordered (including sizes and quantities). Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
• Payments: Payment transactions are handled directly through certified Payment Service Providers (such as Mollie, Stripe, iDEAL, Klarna, or PayPal). We do not store or have access to your full credit card numbers or banking passwords; we only receive transaction statuses and reference IDs. Legal basis: Performance of a contract and legal compliance.
• Customer Accounts (Optional): If you create an account, we retain your login credentials, saved addresses, wishlists, and order history for easier future checkouts. Legal basis: Consent and performance of a contract.
• Customer Support & Returns: If you contact us or process an exchange/return, we keep correspondence records, return reason notes, and refund details. Legal basis: Performance of a contract and legitimate interest in providing quality service.
• Marketing & Newsletters: If you subscribe to our newsletter or opt-in at checkout, we process your email address to send style updates, exclusive offers, and abandoned-cart reminders. You can unsubscribe at any time via the link in each email. Legal basis: Consent (Art. 6(1)(a) GDPR) or legitimate interest where soft opt-in applies.
• Device, IP & Browsing Data: We collect technical logs, IP addresses, browser types, and behavioral patterns to safeguard our store against fraud and optimize browsing performance. Legal basis: Legitimate interest (security) and consent (for marketing/analytical cookies).

3. Who We Share Your Data With

We do not sell your personal data. We only share necessary information with reliable third-party service providers who assist us in running our business:

• Shipping & Logistics Carriers: To deliver your parcels across Europe, we share your name, delivery address, phone number, and email with logistics partners (e.g., PostNL, DHL, DPD, GLS). They use this information exclusively to fulfill delivery and send tracking notifications.
• Payment Gateways: Payment details are securely processed by our payment processors (e.g., Mollie / Stripe / Klarna / PayPal) complying with PCI-DSS standards.
• Technical & E-Commerce Infrastructure: Hosting providers, website maintenance engineers, and e-commerce platforms (WooCommerce/WordPress) supporting site operations.
• Marketing & Analytics Tools: Email service providers (e.g., Klaviyo/Mailchimp) and analytical services (e.g., Google Analytics, Meta Pixel) subject to your cookie consent.
• Legal and Tax Authorities: Dutch tax authorities (Belastingdienst) or law enforcement bodies when strictly required by law.

4. International Transfers (Outside the EEA)

Whenever data is processed outside the European Economic Area (EEA)—for example, by US-based cloud or analytics providers—we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or participation in the EU-U.S. Data Privacy Framework.

5. How Long We Retain Your Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal requirements:

• Fiscal & Invoicing Records: Stored for 7 years in accordance with the mandatory statutory retention period under Dutch tax law (fiscale bewaarplicht).
• Customer Accounts: Kept active until you request deletion or after 3 years of continuous inactivity.
• Customer Support Records: Retained for up to 2 years following inquiry resolution to handle warranties or statutory return claims.
• Marketing Subscriptions: Retained until you withdraw consent / unsubscribe.

6. Cookies and Tracking Technologies

Our store uses essential cookies to enable shopping cart functionality, secure checkout, and user sessions.