Polityka prywatności

This Privacy Policy explains how JG Ecom, collects, uses, shares and protects your personal data when you visit www.overkick.com, place an order, or contact us.

We are the data controller for the personal data described in this policy. Our details are listed under Contact at the end of this page.

1. What personal data we collect

Depending on how you use our store, we may collect the following categories of personal data:

• Contact and delivery details: name, email address, postal address, billing address and, if you provide one, a telephone number.
• Order details: the products you order, order number, order date, delivery status, returns and any correspondence about your order.
• Payment details: payment method, transaction reference and payment status. We never receive or store your full card number; this is handled directly by our payment providers.
• Account details: if you create an account, your login details and saved addresses.
• Communication: the content of emails or contact form messages you send us.
• Technical data: IP address, browser type, device type, operating system and the pages you view on our store.
• Marketing preferences: whether you have subscribed to our newsletter and whether you have consented to cookies.

2. Where we get your data

Most data comes directly from you when you place an order, create an account, subscribe to our newsletter or contact us. Technical data is collected automatically when you browse the store, through cookies and similar technologies. We also receive limited data from our service providers, such as payment and shipping partners.

3. Why we use your data, and on what legal basis

Under the General Data Protection Regulation (GDPR) we process personal data only where we have a lawful basis to do so:

• To perform our contract with you (Article 6(1)(b) GDPR): processing your order, taking payment, arranging delivery, handling returns and refunds, and providing customer service.
• To comply with a legal obligation (Article 6(1)(c) GDPR): keeping invoices and transaction records for the periods required by tax and accounting law.
• For our legitimate interests (Article 6(1)(f) GDPR): keeping our store secure, preventing and investigating fraud or misuse, analysing how our store is used, and improving our products and service.
• With your consent (Article 6(1)(a) GDPR): sending marketing emails, and placing analytics or advertising cookies. You may withdraw your consent at any time.

4. Who we share your data with

We do not sell your personal data. We share it only with parties that help us run our store, and only to the extent needed:

• Shopify Inc. — the e-commerce platform that hosts our store and processes orders on our behalf.
• Payment providers — to process your payment and prevent fraud.
• Suppliers and fulfilment partners — to pick, pack and dispatch your order.
• Carriers — to deliver your parcel and provide tracking information.
• Order tracking and customer service tools — to keep you informed about your order and answer your questions.
• Analytics and advertising partners — only where you have given consent through our cookie banner.
• Authorities or advisers — where we are legally required to disclose data, or to establish or defend legal claims.

These parties act as processors on our instructions, or as independent controllers under their own privacy policies. In each case we have appropriate agreements in place.

5. Transfers outside the EEA

Some of our service providers are based outside the European Economic Area, or store data there. Where that happens, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses, so that your data continues to enjoy an equivalent level of protection.

6. How long we keep your data

• Order and invoice data: seven years, in line with Dutch tax law.
• Account data: for as long as your account is active, and for a limited period afterwards.
• Customer service correspondence: up to two years after your enquiry is closed.
• Newsletter data: until you unsubscribe.
• Cookie and analytics data: for the retention period stated in our cookie banner.

After these periods we delete your data or anonymise it so that it can no longer be traced back to you.

7. Cookies

Our store uses cookies and similar technologies. Functional cookies are always active, because the store cannot work without them: they remember your cart, your language and your login. Analytics and marketing cookies are only placed after you consent through our cookie banner. You can change or withdraw your choice at any time through the cookie settings on our website, and you can delete cookies through your browser settings.

8. Your rights

Under the GDPR you have the right to:

• request access to the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, where no legal obligation requires us to keep it;
• ask us to restrict how we process your data;
• object to processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.

To exercise any of these rights, email us at info@overkick.com. We will respond within one month. We may ask you to confirm your identity before we act on a request, so that we do not disclose data to the wrong person. Exercising your rights is free of charge.

9. Complaints

If you believe we handle your personal data incorrectly, please contact us first so that we can try to put it right. You also have the right to lodge a complaint with a supervisory authority.

In the Netherlands this is the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl). If you live in another EU country, you may also complain to the data protection authority in your country of residence.

10. Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and vetted service providers. No system is completely secure, so we ask you not to send sensitive information to us through unsecured channels.

11. Children

Our store is not intended for children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy when our practices change or when new legal requirements apply. The current version is always published on this page, with the date of the last revision at the top.

13. Contact

JG Ecom
Trading as Overkick
Papaverweg 34
1032 KJ Amsterdam
The Netherlands

Chamber of Commerce (KvK) number: 96898720

Email: info@overkick.com