Privacy Policy
Privacy Policy
Last updated: 20 October 2026
Touch Ritual respects your privacy. This Privacy Policy explains how we collect, use, store and share personal data when you visit www.touchritual.store, place an order or contact us. We handle personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Who We Are
Business name: Touch Ritual
Business address: Blokkerhoek 30, 8232 BG Lelystad, The Netherlands
Email: info@touchritual.store
Website: https://www.touchritual.store
Chamber of Commerce (KVK) number: 99689456
VAT number: NL005403918B29
Touch Ritual is responsible for the processing of personal data described in this Privacy Policy.
2. What Personal Data We Collect
Depending on how you use our website, we may collect:
- Contact and delivery details: your name, billing address, delivery address, email address and, if you provide it or it is needed for delivery, telephone number.
- Order details: products purchased, order number, order value, payment status, returns and customer service messages.
- Payment information: payment status and transaction details supplied by our payment provider. We generally do not receive or store your full payment card details.
- Website and device data: IP address, browser and device information, pages visited, and information about how you use our website.
- Cookie and preference data: information stored by cookies or similar technologies, according to your cookie choices.
- Marketing preferences: whether you have chosen to receive marketing messages and your related preferences.
Please only provide personal data that is necessary for your order or enquiry.
3. Why We Use Your Data and Our Legal Bases
We use personal data for the following purposes:
- To process and deliver orders, take payment, provide order updates and handle returns. Legal basis: performance of a contract.
- To answer questions and provide customer support. Legal basis: performance of a contract where relevant, or our legitimate interests in responding to enquiries.
- To meet legal and tax obligations, including keeping required business records. Legal basis: compliance with a legal obligation.
- To protect our website, prevent fraud and resolve disputes. Legal basis: our legitimate interests, where these interests do not override your rights.
- To understand and improve website performance. Where this uses non-essential cookies or similar technologies, we will ask for consent where required by law. The legal basis for any related personal-data processing will be explained where applicable.
- To send marketing emails. We will do this only where we have a valid legal basis and any consent required by law. You can unsubscribe at any time.
Where we rely on legitimate interests, those interests include operating and protecting our business, responding to customers and preventing misuse.
4. Who We Share Data With
We share personal data only where necessary and with appropriate safeguards. Depending on the services used to operate the store, recipients may include:
- Shopify, which hosts and supports our online store.
- Avada Cookie Consent – to manage cookie preferences.
- MyParcel – to create shipping labels and track shipments.
- Payment service providers, to process payments and refunds.
- Delivery and shipping providers, to deliver orders and manage returns.
- IT, security, customer service, analytics or marketing providers, where we use these services.
- Professional advisers or public authorities, where necessary to meet legal obligations or protect legal rights.
These providers may process personal data only as permitted by applicable law and the arrangements governing their services.
We do not state that every category above is used in every transaction; the recipients depend on the services involved.
5. International Data Transfers
Some service providers may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we will use a lawful transfer mechanism where required, such as an adequacy decision or appropriate safeguards under data protection law.
You can contact us at info@touchritual.store if you would like more information about relevant safeguards, where this applies.
6. How Long We Keep Your Data
We keep personal data only for as long as necessary for the purposes explained in this policy, including legal, accounting, tax and dispute-resolution requirements.
- Order, invoice and tax records: kept for the period required by applicable tax and accounting law. Dutch tax rules generally require relevant business records to be kept for seven years.
- Customer service messages and complaints: kept for as long as needed to handle the enquiry and any related legal claims.
- Marketing preferences: kept until you unsubscribe or the data is no longer needed, subject to any records we need to keep to respect your choice.
- Cookie and analytics data: kept for the period set by the relevant cookie or service, as described in our cookie settings or notice.
Retention periods can vary depending on the type of data and our legal obligations.
7. Your Privacy Rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- Request access to your personal data.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data.
- Ask us to restrict certain processing.
- Object to processing based on legitimate interests.
- Receive certain data in a portable format.
- Withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect processing carried out before withdrawal.
- Lodge a complaint with a data protection authority.
To exercise your rights, email info@touchritual.store. We may need to verify your identity before responding. We will respond within the time limit required by law.
If you are in the Netherlands, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at https://autoriteitpersoonsgegevens.nl/. If you live in another EEA country, you may also contact your local data protection authority.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies that are necessary for the website and checkout to work. Other cookies, such as analytics or advertising cookies, may also be used if enabled.
Where consent is required, non-essential cookies will only be used after you have given consent. You should be able to refuse optional cookies as easily as you can accept them and change your choice later through the cookie settings, where available.
For details about the cookies actually used by our store, their purposes and durations, please consult the cookie banner or cookie settings on our website.
9. Marketing Emails
If we send you marketing emails, you can unsubscribe using the link in the email or by contacting info@touchritual.store. We will stop sending marketing emails where required by law, although we may retain limited information to record and respect your opt-out.
Order and service emails, such as order confirmations and delivery updates, are not marketing emails.
10. Children's Privacy
Our online store is intended for a general audience and is not specifically directed at children. If you believe a child has provided personal data in circumstances where it should not have been collected, please contact us at info@touchritual.store so we can review the matter.
11. Security
We use appropriate technical and organisational measures intended to protect personal data. No method of internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.
12. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please read the privacy policies of those websites before providing personal data to them.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, website, services or legal requirements. The latest version will be published on www.touchritual.store with the updated date.
14. Contact Us
If you have questions about this Privacy Policy or how we handle personal data, contact:
Touch Ritual
Blokkerhoek 30
8232 BG Lelystad
The Netherlands
Email: info@touchritual.store
Website: https://www.touchritual.store
KVK number: 99689456
VAT number: NL005403918B29