Privacy policy

Last updated: September 13, 2026.

1. Who is responsible?

Bosman Ondernemingen, trading under the name FatbikesForYou, is responsible for the processing of personal data described in this statement. For privacy questions and requests, you can contact us:

Bosman Ondernemingen, trading under the name FatbikesForYou
Houthakkersweg 11
8091 DC Wezep, Netherlands
Chamber of Commerce: 97795151
VAT ID: NL005288097B56
Email: info@fatbikesforyou.nl
WhatsApp: +31 6 43224955
Website: www.fatbikesforyou.nl

2. What data do we process?

Depending on your contact with us, this concerns your name, billing and delivery address, email address, telephone number, account details, ordered products, payment status, transaction details, and correspondence. If you send us photos or videos for advice or a complaint, we also process that information. Do not send any personal data that is not necessary for your inquiry.

During a website visit, technical data may be processed, such as IP address, device and browser data, session data, visited pages, and your cookie preferences. Which data is processed depends partly on the function used and your consent for non-essential cookies. The data required for payment is also processed by the chosen payment service.

3. Purposes and legal grounds

  • Ordering, payment and delivery: to execute the purchase agreement, including contact regarding your order and any returns.
  • Customer service and warranty: for the execution of our agreements and legal obligations. In the event of a dispute, we may also use necessary data based on our legitimate interest to establish or defend our legal position.
  • Administration: to comply with legal obligations, including tax retention obligations.
  • Security and fraud prevention: for our legitimate interest in protecting the webshop, payments, and customers. We weigh that interest against your privacy and limit the data to what is necessary.
  • Newsletters and offers: based on your consent. You can unsubscribe via the link in the email or by notifying us.
  • Reviews and customer satisfaction: to evaluate and improve service, based on our legitimate interest. You may object to review invitations. To the extent that a message also constitutes marketing, the consent rules apply.
  • Statistics and personalized marketing: with your consent where required. A legal exception may apply for strictly necessary technology or statistics with no or minimal privacy impact.

Data such as your delivery address is required to process an order. We cannot deliver without this data. Optional data and consent for marketing are not required to place an order.

4. With whom do we share data?

We share data for the purposes mentioned above with the service providers required for the relevant function. Not every party receives all data. This may involve:

  • Shopify: for the webshop platform, accounts, order processing, and associated technical services.
  • Payment services: such as Shopify Payments, Mollie, and the provider of the payment method you choose, for example Klarna or in3.
  • Shipping: shipping software such as Sendcloud and the engaged carrier, for example PostNL, DHL, DPD, or GrootPakket.
  • Communication and forms: for example, Shopify Messaging and Forms, Klaviyo, CWILL/SendWILL, and WhatsApp when these are used for your contact or registration.
  • Accounting: our administrative service providers and integrations, including Webwinkelfacturen/Jortt or Combidesk, to the extent necessary for administration.
  • Reviews: Trustpilot for review invitations and ratings. A review you publish there becomes visible according to Trustpilot's settings and terms.
  • Analytics and advertising: the measurement and advertising platforms used, such as Google, Meta, or TikTok, when the relevant integration is active and you have given the required consent. This may involve website actions, device characteristics, and identifiers to measure campaigns or tailor advertisements.
  • Advisors and competent authorities: if necessary for advice, dispute resolution, or a legal obligation.

A party that processes personal data exclusively on our behalf is a processor; the required agreements regarding data protection apply to them. Some parties, for example payment services or platforms for their own services, determine their own processing purposes and are independently responsible for them. See, among others, the Privacy Statement of Shopify, Mollie, Klaviyo and Meta/WhatsApp.

5. Processing outside the European Economic Area

Service providers such as Shopify may also process data outside the EEA, for example in Canada or the United States. Such transfers must have a valid legal basis for transfer, such as an adequacy decision or appropriate safeguards. To this end, Shopify describes, among other things, binding corporate rules and, where applicable, standard contractual clauses in its Privacy Statement. You can ask us for information about the safeguards that apply to a specific transfer of your data.

6. Cookies and similar technologies

The webshop uses necessary cookies for purposes such as the shopping cart, checkout, security, and remembering privacy choices. In addition, analytical and marketing technologies may be used. For technologies for which consent is required, you must first actively provide it. Simply continuing to browse or reading this statement does not constitute consent.

You can refuse non-essential cookies and change or withdraw a previous choice via the cookie settings offered during your visit. If you are unable to change your choice, please contact us via info@fatbikesforyou.nl. Withdrawal is possible without losing your regular access to the webshop. You can also view and delete cookies via your browser. Deleting cookies does not automatically erase all data that has already been lawfully processed.

There are session cookies and cookies that are stored for longer periods; the duration depends on the cookie and the relevant service. Shopify publishes a overview of its cookies, purposes, and lifespans. That overview describes the platform cookies and does not replace information about any individual apps or advertising techniques. For questions about your privacy choice or a specific cookie, you can email us.

7. How long do we retain data?

  • Fiscal records: as long as the applicable statutory retention obligation requires. Therefore, not all customer data needs to be retained for the same length of time; we only retain what is necessary for that obligation.
  • Orders, warranty, and disputes: for as long as necessary for processing and any legal claims. If a shorter retention period is possible, we delete or anonymize the data that is no longer needed.
  • Regular contact inquiries: no later than one year after processing, unless the correspondence remains necessary for, for example, an ongoing warranty claim, dispute, or legal obligation.
  • Newsletters: until your consent is withdrawn. We may subsequently retain limited data to respect your unsubscribe request and, where necessary, to demonstrate which consent was given.
  • Technical data and cookies: no longer than necessary for the relevant function, security, or measurement purpose, taking into account your privacy choices.

8. Security

We take appropriate technical and organizational measures to protect personal data, including secure connections and restricting access to those who need it. No system is completely risk-free. If you suspect misuse or a data breach, please report this via our email address.

9. Your rights

You may request access, correction, deletion, restriction of processing, or transfer of data, insofar as the GDPR grants that right in your situation. You may object to processing on the grounds of a legitimate interest. You may object to direct marketing at any time. You may withdraw consent at any time; this does not render previous lawful processing unlawful.

Send your request to info@fatbikesforyou.nl. In principle, we will respond within one month. In the case of a complex request, we may apply the statutory extension; in that case, we will inform you of the reason within that first month. We may only request necessary additional information to verify your identity. Do not send a full copy of your proof of identity unsolicited.

You can file a complaint with the Data Protection Authority or the competent supervisory authority in your country. Deletion may be restricted for data that we are legally required to retain or need for a legal claim.

10. Automated processing and changes

Webshop and payment services may use automated checks, for example to detect fraud. A payment service may conduct its own assessment for its own product, such as pay later. The explanation and rights regarding this are set out in the privacy information of that service. Please contact us if you would like an explanation regarding a decision about your order; we will assess your request and involve the relevant service provider if necessary.

We will amend this statement if our services or the rules change. In the event of substantially different processing, we will inform you separately where required and ask for new consent if necessary. A change to the text does not automatically imply consent for new marketing purposes.