FREE SHIPPING ON ORDERS OVER €100ORDERED BEFORE 23:59, DELIVERED THE NEXT WORKING DAY*EASY 30-DAY RETURNS WITH FREE OPTIONS

Privacy policy

Privacy notice

Version: 15 October 2026

In this privacy notice you'll find which personal data we process when you visit thefightcompany.nl, place an order with us or contact us, what we use it for, the legal basis, how long we keep your data and what rights you have. We comply with the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

1. Who is responsible?

TFC Trading Group B.V., trading as "The Fight Company"
Kaskinenweg 7, 9723 JL Groningen
Email: klantenservice@thefightcompany.nl
Phone: +31 85 060 6340
Chamber of Commerce number: 83630562
VAT identification number: NL862940369B01

For any questions about privacy and to exercise your rights, you can email klantenservice@thefightcompany.nl. We are not legally required to appoint a data protection officer.

2. What data we use and why

Your visit to the website

Our webshop runs on Shopify (Shopify International Limited, Dublin, Ireland). When you visit, Shopify processes technical data for us, such as your IP address, the pages you view, your browser and device, and the contents of your shopping cart. This is necessary to make the website work, keep it secure and prevent abuse. Legal basis: our legitimate interest in a secure, functioning webshop (Article 6(1)(f) GDPR) and, for your shopping cart and ordering, performance of the contract (Article 6(1)(b) GDPR). We load fonts via Shopify itself, not via Google Fonts.

Ordering and payment

When you order, we process your name, delivery and billing address, email address, optionally your phone number, the items ordered and payment and order details. We need these to fulfil your order (Article 6(1)(b) GDPR). We keep invoice data because the law requires it (Article 6(1)(c) GDPR).

You pay via the payment partner you choose: Shopify Payments (for iDEAL, Bancontact, creditcard, Apple Pay, Google Pay and other methods, with Stripe Payments Europe Ltd. as the payment processor), PayPal (Europe) S.à r.l. et Cie, S.C.A. and, if offered at checkout, Klarna Bank AB. They receive the data needed for payment and may carry out checks to prevent fraud; they are responsible for this themselves. We do not see your full card details.

Customer account and loyalty points

If you create an account, we store your account details, addresses and orders so you can view your orders and order more quickly. If you take part in our loyalty programme, we also store your points, your level and the rewards you have redeemed. Legal basis: the contract (Article 6(1)(b) GDPR). You can request your account to be deleted at any time.

Shipping, warehouse and returns

For delivery we pass on your name, delivery address and, if necessary for track & trace, your email address and phone number to the carrier, such as PostNL, DHL, DPD, GLS, UPS or FedEx. We create shipping labels via Innosend and QLS. Our warehouse works with Picqer (Picqer B.V.). If you return via our returns portal, we process your order details, the reason for return, your choice for refund, exchange or credit and any photos you upload. If you return in our Amsterdam store, we use the same data. Legal basis: the contract (Article 6(1)(b) GDPR).

Customer service, live chat and AI

When you contact us via email, phone, the contact form or live chat, we use your data and message to assist you (Article 6(1)(b) GDPR, or for general questions our legitimate interest, Article 6(1)(f) GDPR). For email and chat we use Gorgias (Gorgias Inc., USA). Our live chat and returns portal run on the servers of Cloudflare (Cloudflare Inc., USA).

To help you faster, we let an AI system (Claude by Anthropic PBC, USA) analyse messages and the related order and shipping data to create draft responses and suggestions. We have configured it so that our data is not used to train AI models. Legal basis: our legitimate interest in fast and efficient customer service (Article 6(1)(f) GDPR). We do not make decisions with legal consequences or other major consequences for you entirely automatically (Article 22 GDPR): larger refunds and exceptions are reviewed by a staff member, and you can always ask to have your query handled by a person.

Newsletter and emails

If you sign up for the newsletter, we send you offers, new products and personal tips. Legal basis: your consent (Article 6(1)(a) GDPR). We store the time of sign-up and your IP address to be able to prove that consent. We use Klaviyo (Klaviyo Inc., USA) to send it. Klaviyo measures whether you open an email and which links you click, so we can tailor the content better to you. If there is a draw for subscribers, the terms and conditions of the draw apply and we email the winner.

If you have purchased from us, we may also email you without signing up about our own, similar products (Article 11.7 ePrivacy Directive, Article 6(1)(f) GDPR). You can unsubscribe from all emails at any time using the link at the bottom of the email. We also send you service emails about your order, such as order confirmation and shipping and returns information.

Reviews

After an order we sometimes ask you for a review. For this we use Loox (Loox Ltd., Israel), which receives your name, email address and the items ordered. Published reviews are shown with your first name or initials. Legal basis: our legitimate interest in genuine customer reviews (Article 6(1)(f) GDPR); you can always object to this.

On our website we also show Google reviews of our store (name or initials of the author, the rating and the text). We store these reviews ourselves with Shopify; no connection to Google is made when displaying them.

Google Maps

On the page of our Amsterdam store you can view a Google Maps map (Google Ireland Limited). The map only loads when you click "Load map"; only then do data such as your IP address go to Google and can Google place cookies. Legal basis: your consent through that click (Article 6(1)(a) GDPR, Article 11.7a ePrivacy Directive).

3. Cookies, analytics and advertising

We place functional cookies, which are necessary for example for your shopping cart, language choice, account and checkout, without consent (Article 11.7a(3) ePrivacy Directive). We place analytical and marketing cookies only when you give consent in our cookie banner (Article 11.7a(1) ePrivacy Directive, Article 6(1)(a) GDPR). We manage your choice with Cookiebot (Usercentrics A/S, Denmark), which records your choice, a shortened IP address and browser data to be able to prove your consent. You can adjust or withdraw your choice at any time via the cookie icon or the "Cookie settings" link.

With your consent we use:

  • Google Analytics and Google Ads (Google Ireland Limited, Ireland): to measure how our website is used and whether our ads work, including conversion measurement and "enhanced conversions" (where data such as your email address is encrypted (hashed) to Google) and remarketing. Data in Google Analytics is deleted after 14 months.
  • Meta pixel (Meta Platforms Ireland Limited, Ireland): to measure and improve our ads on Facebook and Instagram and remarketing. For collecting and passing on the data we are jointly responsible with Meta (Article 26 GDPR; see facebook.com/legal/controller_addendum). Meta is responsible for what it does with the data afterwards.
  • TikTok pixel (TikTok Technology Limited, Ireland): to measure and improve our ads on TikTok and remarketing.
  • OpenAI advertising pixel (OpenAI Ireland Ltd., Ireland): to measure whether ads in ChatGPT result in a purchase.
  • Microsoft Clarity (Microsoft Ireland Operations Limited, Ireland): heatmaps and pseudonymised recordings of sessions (mouse movements, clicks, scrolling) to make our webshop more user-friendly. What you type in form fields is masked by default.
  • ProfitMetrics (ProfitMetrics ApS, Denmark): links sales to advertising campaigns so we can see which ads are profitable, and passes those conversions to Google and Meta.
  • Shopify analytics (Shopify International Limited, Ireland): overviews of visits, shopping carts and purchases.

4. Who receives your data?

We only share your data if necessary for your order (for example with payment partners and carriers), if the law requires us to (for example the tax authorities), if we have a legitimate interest in doing so or if you have given consent. Parties who process data for us have a data processing agreement with us (Article 28 GDPR). We never sell your data.

5. Data outside the European Economic Area

Some parties are located outside the EEA or have access to data there, especially in the USA (Google, Meta, Microsoft, TikTok, OpenAI, Shopify, Stripe, Klaviyo, Gorgias, Cloudflare, Anthropic), in Canada (Shopify) and in Israel (Loox). For Canada and Israel, the European Commission has decided that protection is adequate. For the USA, such a decision applies to companies certified under the EU-U.S. Data Privacy Framework. If a party is not certified, we use standard contractual clauses from the European Commission (Article 46(2)(c) GDPR).

6. How long we keep your data

  • Order, invoice and payment data: 7 years, because fiscal retention requirements require it (Article 52 Dutch General Tax Act).
  • Customer service questions, chat conversations and returns: as long as you are a customer with us and it is necessary to handle later questions, warranty and returns matters and defend against claims. You can request deletion of this data sooner, unless a legal retention obligation applies.
  • Customer account and loyalty points: as long as your account exists. Order data we must keep will be retained until the retention period expires.
  • Newsletter: until you unsubscribe. We store proof of your consent or unsubscription for 3 years.
  • Cookies and analytics: as specified in the cookie settings, maximum 26 months (Google Analytics: 14 months).

7. Your rights

You have the right to access your data (Article 15 GDPR), have it corrected (Article 16) or deleted (Article 17), restrict processing (Article 18) and receive your data in a standard format or have it transferred (Article 20). You can always withdraw consent given; this applies from that moment (Article 7(3)). Send your request to klantenservice@thefightcompany.nl. We respond within one month. To prevent us passing data to the wrong person, we may ask you to prove who you are, for example by emailing from the email address of your order.

Right to object (Article 21 GDPR). If we use your data based on our legitimate interest, you can always object due to your personal circumstances. We will then stop, unless we have compelling reasons that outweigh your interests or we need the data for a legal claim. You can always object to the use of your data for direct marketing, without giving a reason; we will then not use it for that purpose.

Filing a complaint. If you are not satisfied with how we handle your data, please let us know. You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or with the data protection authority in the country where you live.

8. Security

Our website uses an encrypted connection (https). We protect your data with appropriate technical and organisational measures, including by restricting access to employees and parties who need the data.

9. Changes

We update this privacy notice if our processing or the law changes. The version on this page applies. The Dutch version is legally binding.
Back to top