Privacy statement

Who we are

Navy Strikes is a trade name of Alpha Innovations, established at Stationsplein 99, 1703 WE Heerhugowaard, the Netherlands (KvK 81903219, VAT NL003617845B40). Questions about privacy? Email info@navystrikes.nl.

Which data we process

• Order data: name, address, email address, phone number (for delivery) and payment information, needed to deliver your order (processed via Shopify).
• Contact data: if you email us, use the contact form or submit a withdrawal.
• Newsletter data: your email address, only if you sign up yourself.
• Website use: before you make a choice and if you decline, Google may receive limited measurement data without analytics cookies. After you allow analytics, we use Google Analytics 4 and Shopify to measure visits. Shopify receives information including page addresses viewed, browser information, your IP address and identifiers for your browser and session. Microsoft Clarity also records clicks, scrolling and mouse movements. Read more in the cookie statement.

Why we process it (legal bases)

• Performance of the contract: delivering your order, payment, returns and warranty.
• Legal obligation: the tax administration and retention obligation.
• Consent: newsletters and analytics cookies. You can withdraw your consent at any time.
• Legitimate interest: answering your questions and securing our website.

Sharing with third parties

We use service providers for orders, contact and our website: Shopify (shop platform, payment processing through Shopify Payments and, after your analytics consent, visit measurement), Mollie (payment processing for iDEAL and Bancontact, among others), the delivery service (PostNL, DHL or DPD) for name and address, Klaviyo (email marketing) for the newsletter and the waiting list for sold-out items, and Resend (email delivery) for messages from the contact, business and withdrawal forms. Google Ireland Limited (Google Analytics 4) may receive limited signals even without consent to analytics cookies. With that consent, Google receives more detailed measurement data and we load Microsoft Clarity from Microsoft Ireland Operations Limited for visit measurement and session recordings. We conclude data processing agreements with processors. We never sell data to third parties.

Purchase measurement

For purchase measurement, Google Analytics receives information through Shopify such as a transaction ID, purchased items, amounts, currency and the source of the visit. This helps us understand which visits lead to orders. Your analytics choice is passed to checkout. This choice does not give consent for advertising or using contact details for advertising measurement.

Transfer outside the EU

Some processors, such as Shopify, Google, Microsoft, Klaviyo and Resend, may process personal data outside the European Economic Area. This only happens with appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission and, for Google and Microsoft, the EU-US Data Privacy Framework.

Retention periods

We do not keep your data longer than necessary for the purposes above. For order data the statutory tax retention obligation of 7 years applies.

Your rights

You have the right to access, rectification (correction) and erasure of your personal data. You also have the right to restriction of processing, the right to object and the right to data portability. If you have given us consent, for example for the newsletter, you can withdraw it at any time. Send a request to info@navystrikes.nl; we respond within one month at the latest.

Security

The connection to our website and the checkout is encrypted (https). Payment data is processed by our payment providers (Shopify Payments and Mollie) and never comes into our view. Access to customer data is limited to those who need it.

If you disagree with how we handle your data, you have the right to lodge a complaint with the supervisory authority. In the Netherlands this is the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl); if you live in Belgium, it is the Data Protection Authority (gegevensbeschermingsautoriteit.be / autoriteprotectiondonnees.be).