Company
Privacy statement
What we record about you, why, for how long, and what you can do about it. Short, because we collect little.
Data controller
Bad Intentions Clothing Co.
E-mail: hello@badintentions.nl
To be added: registered address and Chamber of Commerce (KvK) number.
What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail address (list signup) | Telling you when Drop 01 opens | Consent | Until you unsubscribe |
| Name, address, e-mail, order details | Making, shipping and handling your order | Performance of the contract | 7 years (tax retention duty) |
| Payment details | Processing payment | Performance of the contract | Held by the payment provider; we never see full card details |
| The content of your e-mail to us | Answering your question or complaint | Legitimate interest | 2 years after resolution |
What we do not do
This site runs no analytics, no advertising pixels and no tracking cookies. There is no cookie banner because there is nothing to ask. We do not sell your data and we do not build profiles with it.
What stays in your browser
The pieces you save to your list are kept in your own browser's local storage. That data stays on your device, we cannot reach it, and it disappears when you clear your browser data.
Who else processes your data
- Cloudflare — hosting and storage of signups. Servers within the EU.
- Promio — production and shipping of your order. Receives what is needed to make and deliver your parcel, no more.
- Google Fonts — this site's typeface loads from a Google server, which means your IP address reaches Google. See below.
Worth fixing. Google Fonts is loaded from Google's servers here. That is a data transfer your visitor never consented to, and European rulings have treated it as a GDPR breach. Self-hosting the font removes the transfer entirely and is a small change.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to object, and to receive your data in a readable file. Consent you gave — for the mailing list, for instance — can be withdrawn at any time; that does not affect processing carried out before then.
Mail hello@badintentions.nl and you hear from us within a month.
Leaving the list
Every mail we send carries an unsubscribe link. One click and your address is deleted. Mailing us works just as well.
Complaints
If you think we handle your data wrongly, tell us first. If we cannot resolve it, you can complain to the Dutch Data Protection Authority.