EBAG Privacy Policy

This Privacy Policy describes how EBAG collects, uses, and shares your personal information when you visit our website or Services, place an order, contact us, or otherwise communicate with us.

By using our Services, you indicate that you have read this privacy policy and agree to the described processing of your personal information.

Who we are

We are EBAG , based in the Netherlands and responsible for the processing of your personal data in accordance with the General Data Protection Regulation (GDPR).

Contact details:
EBAG
2574 VN The Hague
The Netherlands
E-mail: info@ebag.nl

EBAG operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a personalized shopping experience (the "Services"). EBAG is powered by Shopify , which allows us to provide the Services to you.

Personal information we collect

We may collect the following categories of personal data:

• Contact details: name, address, billing address, delivery address, telephone number, email address.

• Financial information: credit card, debit card and financial account numbers, payment card information, payment confirmation and other payment details.

• Account information: username, password, security questions, preferences and settings.

• Transaction information: items you view, add to cart, add to wish list or purchase, return, exchange or cancel.

• Communications: information that you personally provide to us via email, social media or customer service.

• Device data: information about your device, browser or network connection, IP address, device ID.

• Usage Information: how and when you use the Services.

• Social media activity: your interaction with our content on social platforms.

• Cookies and tracking technologies: as described in our Cookie Policy.

Sources of personal information

We collect your information:

• Directly from you : upon registration, ordering, contact or other interactions.

• Automatically through our Services : such as cookies, web analytics, and device data.

• From our service providers : who perform Services on our behalf, such as Shopify, IT services, payments and shipping.

• From partners or third parties : such as marketing or logistics partners, only if permitted or with your consent.

Purpose and legal basis of the processing

Goal	Legal basis (GDPR)
Fulfill orders, process payments, provide support	Contract performance (Art. 6(1)(b))
Sending marketing communications	Consent (Art. 6(1)(a))
Website analysis, improving services	Legitimate interest (Art. 6(1)(f))
Fraud prevention and security monitoring	Legitimate interest (Art. 6(1)(f))
Compliance with legal obligations	Legal obligation (Art. 6(1)(c))

Legitimate interest includes improving your customer experience, securing our Services, and understanding website performance.

Marketing communications

You will only receive marketing communications if you have explicitly given your consent. You can unsubscribe at any time via the link in the email or by contacting us.

Cookies

Our website uses cookies and similar technologies for functionality, analytics, and personalization. Non-essential cookies are only placed with your consent. You can manage your cookie preferences through your browser settings or our Cookie Settings.

How we share your data

We do not sell your personal data. We may share it with trusted third parties:

• Service providers : hosting, analytics, IT, email/SMS services, customer service, cloud storage, fulfillment, shipping.

• Payment and logistics partners : to process orders and deliver products.

• Marketing and affiliate partners : only with your permission.

• Government agencies : where required by law.

• Platform providers : such as Shopify, Klaviyo, Meta, as necessary for the Services.

All third parties operate under data processing agreements (DPAs) to comply with the GDPR.

International data transfer

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. In such cases, we ensure your data is protected by implementing Standard Contractual Clauses (SCCs) approved by the European Commission or by using partners certified under appropriate frameworks.

Data security

We take appropriate technical and organizational measures to protect your data, including:

• SSL encryption

• Access control and authentication

• Regular audits and vulnerability assessments

• Secure data storage

No security measure is completely watertight, but we do our utmost to protect your data.

Data retention

• Order and account information: 7 years (according to Dutch tax law)

• Marketing consent: Until you unsubscribe or withdraw your consent

• Customer service interactions: 2 years after last contact

• Analytics and cookies: according to our Cookie Policy

Your rights under the GDPR

Depending on your location, you have the following rights:

• Access to your personal data

• Correction of incorrect data

• Deletion of data

• Restriction of processing

• Data portability

• Objection to processing or marketing

• Withdrawal of consent

You can exercise these rights via info@ebag.nl

Complaints can be submitted to the Dutch Data Protection Authority : https://autoriteitpersoonsgegevens.nl

Relationship with Shopify

Our Services are hosted by Shopify. Your data processed through Shopify is also subject to the Shopify Privacy Policy : https://privacy.shopify.com

Websites and external links

Our Services may contain links to external websites. We are not responsible for their privacy policies or security.

Changes to this policy

We may update this privacy policy periodically. The last updated date is listed on this page: December 22, 2025 .