Recommended add-ons
Last updated: 24 April 2026
This Privacy Policy explains how Brake Free Tech EU collects, uses, and shares your personal data when you visit or make a purchase through brakefreetech.eu (the "Store"). We are the data controller for the purposes of the General Data Protection Regulation (GDPR / AVG) and applicable Dutch privacy law.
1. Who we are
Brake Free Tech EU
Nachtwachtlaan 20, 1058 EA Amsterdam, The Netherlands
KvK: 59057882 | VAT: NL002125373B19
Email:
Questions about this policy or how we handle your data? Email with subject line PRIVACY.
2. What data we collect and why
We only collect data we need. The table below sets out each category, the purpose, and the legal basis under Art. 6 GDPR.
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, billing and shipping address, phone number | Processing and fulfilling your order | Art. 6(1)(b) — contract performance |
| Payment details (card type, last 4 digits, transaction ID) | Processing payment — full card data is handled by Shopify Payments / Stripe, not stored by us | Art. 6(1)(b) — contract performance |
| Order history and cart activity | Order management, returns, customer service | Art. 6(1)(b) — contract performance |
| IP address, device type, browser, session data | Security, fraud prevention, platform stability | Art. 6(1)(f) — legitimate interests |
| Site behaviour (pages viewed, products clicked, time on site) | Analytics — understanding how the Store is used | Art. 6(1)(a) — consent (cookie banner) |
| Cross-merchant behavioural data via Shopify Network Intelligence | Fraud detection and platform improvement across Shopify's merchant network | Art. 6(1)(a) — consent (cookie banner) |
| Email address (newsletter) | Sending promotional emails and product updates | Art. 6(1)(a) — consent (opt-in at checkout or signup) |
| Advertising identifiers (Meta Pixel, TikTok Pixel, GA4 events) | Measuring ad performance and retargeting | Art. 6(1)(a) — consent (cookie banner) |
| Product review content (name, star rating, review text) | Displaying reviews on the Store | Art. 6(1)(a) — consent (review invite email) |
| Customer support messages | Resolving your enquiry | Art. 6(1)(b) — contract performance |
We do not collect sensitive personal data (health, religion, ethnicity, etc.).
3. Cookies and tracking technologies
We use cookies and similar technologies on the Store. A cookie banner appears on your first visit — you can accept, reject, or customise tracking at that point. You can change your preferences at any time via the "Manage Cookies" link in the Store footer.
Strictly necessary cookies (session management, cart, checkout) do not require consent and are always active.
Analytics, advertising, and Shopify Network Intelligence cookies are only set after you give consent.
4. Processors and third parties we share data with
We use the following third-party services to operate the Store. Each acts as a data processor under a data processing agreement with us.
| Processor | Role | Privacy information |
|---|---|---|
| Shopify Inc. (Canada / USA) | E-commerce platform, checkout, payments, order management, hosting. Also processes cross-merchant behavioural data via Shopify Network Intelligence for fraud detection and platform improvement (consent-gated). | |
| Klaviyo Inc. (USA) | Email marketing and transactional email | |
| Judge.me (USA) | Product reviews — collects reviewer name, email, and review content | |
| Google LLC (USA) — Google Analytics 4 | Site analytics (consent-gated) | |
| Meta Platforms Ireland Ltd. (Ireland) — Meta Pixel | Advertising measurement and retargeting (consent-gated) | |
| TikTok (Ireland / Singapore) — TikTok Pixel | Advertising measurement and retargeting (consent-gated) | |
| Gorgias Inc. (USA) | Customer support chat and ticketing | |
| Cloudflare Inc. (USA) | Content delivery network and edge processing |
We do not sell your personal data. We do not share it with parties outside this list except where required by law.
5. International transfers
Some processors above are based in the United States. Where personal data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses (SCCs) as the transfer mechanism, or on an adequacy decision where one exists.
6. How long we keep your data
| Data type | Retention period |
|---|---|
| Order and transaction records | 7 years (Dutch tax law — Art. 52 AWR) |
| Account data | Until you close your account, plus 1 year |
| Support correspondence | 2 years from resolution |
| Analytics data | Up to 14 months (GA4 default) |
| Marketing email preferences | Until you unsubscribe or request deletion |
When the retention period expires, data is deleted or anonymised.
7. Your rights
Under the GDPR you have the following rights in relation to your personal data:
To exercise any of these rights, email with subject line PRIVACY REQUEST. We will respond within one month as required by Art. 12 GDPR. We may need to verify your identity before processing the request.
You will not be charged for exercising your rights and will not face any discrimination as a result.
8. Complaints
If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the Dutch data protection authority:
Autoriteit Persoonsgegevens
autoriteitpersoonsgegevens.nl
T: +31 (0)70 888 85 00
EU residents outside the Netherlands may contact their own national supervisory authority. A full list is available at .
9. Children
The Store is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, email and we will delete it promptly.
10. Security
We implement technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data in transit is encrypted via TLS. Payment card data is tokenised by Shopify Payments — we never see or store full card numbers.
No security measure is infallible. If you have reason to believe your interaction with us is no longer secure, please notify us immediately at .
11. Changes to this policy
We may update this policy when our practices change, new processors are added, or legal requirements change. Material changes will be notified by email to customers with active accounts. The "Last updated" date at the top of this page always reflects the current version.
Recommended add-ons
