Privacy Policy

Carder Essentials

Last updated: 9 August 2026

Article 1 – Who we are
Article 2 – Scope of this Privacy Policy
Article 3 – Personal data we collect
Article 4 – How we collect personal data
Article 5 – How we use personal data
Article 6 – Legal bases for processing
Article 7 – Orders and payments
Article 8 – Customer accounts
Article 9 – Email and SMS marketing
Article 10 – Cookies, analytics and advertising technology
Article 11 – Shopify and Shopify Network Intelligence
Article 12 – Klaviyo
Article 13 – Who we share personal data with
Article 14 – International transfers of personal data
Article 15 – Retention periods
Article 16 – Security
Article 17 – Your privacy rights
Article 18 – Opting out of marketing and targeted advertising
Article 19 – Children’s data
Article 20 – Third-party websites and services
Article 21 – Changes to this Privacy Policy
Article 22 – Complaints
Article 23 – Contact

Article 1 – Who we are

Carder Essentials is responsible for the processing of personal data as described in this Privacy Policy.

Trade name: Carder Essentials
Legal company name: Carder Essentials

Registered address:
Oosterdorpsstraat 35
3871 AA Hoevelaken
The Netherlands

Email address: support@carder-essentials.com

Website: carder-essentials.com and other domain names used by Carder Essentials.

Carder Essentials sells its products to customers in the Netherlands and other countries worldwide.

In this Privacy Policy, Carder Essentials, “we”, “us” and “our” are used to refer to Carder Essentials.

By “you” and “your”, we mean, among others, visitors to our websites, customers, account holders and other persons who communicate with Carder Essentials.

Article 2 – Scope of this Privacy Policy

In this Privacy Policy, we explain what personal data Carder Essentials collects, why we process this data, who we may share it with and what rights you have.
This Privacy Policy applies when you:
- visit our website;
- place an order;
- create or use a customer account;
- contact us;
- subscribe to our newsletter;
- participate in promotions or campaigns;
- interact with our advertisements;
- or otherwise use our services.
This Privacy Policy applies to carder-essentials.com and to other websites or domain names operated by Carder Essentials that refer to this Privacy Policy.
Because Carder Essentials sells worldwide, local privacy laws may apply in addition to Dutch and European privacy legislation.
Where mandatory local privacy legislation provides you with additional rights, those rights remain fully applicable.

Article 3 – Personal data we collect

Depending on how you interact with Carder Essentials, we may process the following categories of personal data, among others.

3.1 Contact details

These may include:

first and last name;
email address;
telephone number;
billing address;
delivery address;
country and place of residence.

3.2 Order and transaction data

These may include:

order number;
products ordered;
order amount;
discounts applied;
shipping method;
delivery details;
returns and refunds;
order history;
payment status;
billing information.

3.3 Payment data

For the processing of payments, payment providers may process information such as:

selected payment method;
payment confirmation;
transaction reference;
billing information;
certain bank or card details.

Carder Essentials generally does not receive all complete payment card details processed by a payment provider.

3.4 Account data

When you create a customer account, we may process information including:

name;
email address;
telephone number;
addresses;
order history;
account preferences;
information required for authentication and account security.

You may place orders with Carder Essentials either through a customer account or as a guest.

3.5 Shopping and usage data

We may collect information about how you use our website and online store, including:

pages and products viewed;
products you add to your shopping cart;
search queries;
purchases;
interactions with the website;
referring website or advertisement;
click behaviour;
date and time of visits;
session data.

3.6 Technical data

These may include:

IP address;
browser type;
device type;
operating system;
device and browser settings;
general location derived from an IP address;
cookie identifiers;
advertising identifiers;
network and connection information.

3.7 Marketing data

When you consent to marketing, we may process, for example:

email address;
telephone number where SMS marketing is offered;
marketing preferences;
newsletter subscription;
interactions with marketing messages;
opened emails;
clicked links;
purchase and interest data.

3.8 Customer service and communications

When you contact us, we may process the information you provide, including:

emails;
messages;
photographs or videos;
questions;
complaints;
warranty requests;
return information.

3.9 Fraud and security data

We may process information necessary to detect and prevent fraud, misuse, unauthorised payments, account misuse and other suspicious activity.

Article 4 – How we collect personal data

We collect personal data in various ways.

Directly from you

For example, when you:

place an order;
create a customer account;
complete a form;
subscribe to marketing;
contact our customer service;
submit a return or warranty claim.

Automatically

When you use our website, we may collect data through, among other things:

cookies;
pixels;
tags;
SDKs;
local storage;
similar tracking technologies.

From third parties

We may receive data from parties we use to operate our online store, including:

Shopify;
payment providers;
banks;
carriers;
marketing and advertising platforms;
Klaviyo;
analytics providers;
fraud prevention services;
Shopify apps and other software providers used by us.

Article 5 – How we use personal data

We may use personal data for the following purposes, among others:

processing and delivering orders;
processing payments;
handling returns, refunds and warranty matters;
creating and managing customer accounts;
answering questions and complaints;
providing customer service;
sending transactional messages, such as order and shipping confirmations;
managing, securing and improving our website and online store;
analysing how visitors use our website;
personalising the shopping experience;
running and measuring advertisements;
displaying relevant advertisements, where consent or another valid legal basis is available;
sending marketing communications where legally permitted;
preventing and investigating fraud, misuse and security incidents;
complying with tax, administrative and other legal obligations;
establishing, exercising or defending legal claims;
improving our products, services and marketing.

Article 6 – Legal bases for processing

Where the General Data Protection Regulation (GDPR) applies, we process personal data only where there is a valid legal basis for doing so.

Depending on the purpose, this may be:

Performance of a contract

Where processing is necessary, for example, to:

process your order;
handle a payment;
ship products;
process a return;
manage a customer account;
provide customer service in connection with an order.

Legal obligation

Where we are required to process or retain data in order to comply with, for example, tax, administrative or other legal obligations.

Consent

Where you have given consent for, for example:

certain marketing communications;
SMS marketing;
non-essential cookies;
certain forms of tracking or personalised advertising.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Legitimate interests

We may process personal data where this is necessary for a legitimate business interest and your privacy interests or fundamental rights do not outweigh that interest.

This may relate, for example, to:

security of our website;
fraud prevention;
improvement of our services;
certain internal analyses;
protection of our legal interests.

Where consent is legally required, we do not rely solely on legitimate interests for the processing.

Article 7 – Orders and payments

To fulfil orders, we process personal data necessary to perform the purchase agreement.
Carder Essentials uses, among other services, Shopify Payments.
Depending on your device, country and availability, payment methods may be offered such as:
- iDEAL;
- credit card;
- Apple Pay;
- and other payment methods made available through our payment infrastructure.
Payment data may be processed directly by Shopify, payment providers, card networks, banks and other parties necessary to execute the payment.
These parties may be independently responsible for certain processing activities involving personal data and may apply their own privacy terms.
We also process payment and transaction data for administration, fraud prevention, refunds and the handling of disputes.

Article 8 – Customer accounts

You may create a customer account with Carder Essentials, but where available you may also place an order as a guest.
Through an account, data may be stored as necessary, for example, to:
- view orders;
- manage addresses;
- make future purchases easier;
- use certain account features.
You are responsible for handling your account and access credentials with due care.
If you suspect that someone has gained unauthorised access to your account, please contact us at support@carder-essentials.com.

Article 9 – Email and SMS marketing

Email marketing

Carder Essentials uses Klaviyo for, among other things, email marketing and marketing automation.
We may send you commercial emails when:
- you have given consent; or
- this is otherwise permitted under applicable law.
Marketing messages may relate, for example, to:
- new products;
- offers;
- discounts;
- product recommendations;
- abandoned shopping carts;
- news;
- promotions.
You may unsubscribe at any time using the unsubscribe link at the bottom of our marketing emails.
Unsubscribing from marketing does not affect necessary transactional communications regarding, for example, orders, payments, returns or account security.

SMS marketing

Carder Essentials may offer SMS marketing in the future.
If we introduce SMS marketing, we will process your telephone number for this purpose only where permitted by applicable law and, where required, after you have given consent.
Merely entering a telephone number for shipping, delivery or an order does not automatically mean that you consent to SMS marketing.
When SMS marketing is offered, we will also provide an easy way to opt out.

Article 10 – Cookies, analytics and advertising technology

Carder Essentials uses cookies and similar technologies.
These technologies may be divided into categories including:

Essential cookies

These are necessary for the technical operation of the online store, for example for:

shopping cart functionality;
checkout;
security;
account functionality;
language and basic settings.

Functional cookies

These may be used to remember preferences and certain functionality.

Analytics cookies

These may help us understand how visitors use our website, which pages are visited and how we can improve the website.

Marketing and tracking cookies

These may be used to:

measure advertisements;
optimise advertising campaigns;
build audiences;
display relevant advertisements;
measure interactions between our website and advertising platforms.

Carder Essentials intends to use online advertising and tracking technologies.
For this purpose, we may use services provided by, for example, search engines, social media platforms, advertising networks and analytics providers.
The specific advertising and analytics tools we use may change from time to time.
Where consent is legally required for non-essential cookies or tracking technologies, these will only be activated after the user has given consent.
You can manage your cookie preferences through the cookie settings on our website, where this functionality is available.
Refusing non-essential cookies does not affect your ability to use necessary online store functions, although certain personalised features may work less effectively.

Article 11 – Shopify and Shopify Network Intelligence

Our online store is hosted and technically supported by Shopify.
Shopify processes personal data to enable our online store, checkout, payments, security and other Shopify services.
Shopify may process personal data in countries outside the country in which you live.
Carder Essentials currently has Shopify Network Intelligence enabled.
When Shopify Network Intelligence is enabled, Shopify may use customer data together with other information within the Shopify network to enable so-called Enhanced Services.
These services may be used, among other things, for:
- personalisation;
- improvement of Shopify services and store performance;
- security and fraud prevention;
- improvement and measurement of advertisements;
- advertising targeting where legally permitted.
Other Shopify merchants do not thereby gain direct access to Carder Essentials customer data.
For certain processing activities, Shopify acts as a processor on behalf of Carder Essentials. For other Shopify services, Shopify may process data for its own purposes in accordance with the applicable Shopify terms and privacy statements.
Where applicable privacy law requires this, we or Shopify provide options to object to or opt out of certain forms of sharing, sale or use for targeted advertising.

Article 12 – Klaviyo

Carder Essentials uses Klaviyo for marketing, email communications and marketing automation.
Depending on the features we use, Klaviyo may process data such as:
- name;
- email address;
- telephone number where applicable;
- purchase history;
- products viewed;
- shopping cart information;
- marketing preferences;
- interactions with emails;
- click and website behaviour.
We may use this information to make communications and offers more relevant.
For marketing communications and tracking, we request consent where this is necessary under applicable law.
Klaviyo may process personal data outside the European Economic Area.
For international data transfers, Klaviyo uses applicable legal mechanisms and safeguards.

Article 13 – Who we share personal data with

We do not sell your personal data as a standalone commercial product.

We may, however, share personal data with parties where this is necessary for our business operations or services.

These parties may include:

Shopify;
Shopify Payments and other payment providers;
banks and card networks;
Klaviyo;
carriers and delivery services;
IT and hosting providers;
cloud and storage services;
customer service providers;
analytics providers;
advertising and marketing platforms;
fraud prevention and security services;
accountants and financial service providers;
legal advisers;
Shopify apps and other software providers that we use for our online store;
public authorities where we are legally required to provide data.

We provide personal data to these parties only to the extent necessary or legally permitted.

Where a third party processes personal data on our behalf, we enter into appropriate arrangements regarding the processing and security of personal data where required.

Article 14 – International transfers of personal data

Because Carder Essentials operates worldwide and uses international service providers, personal data may be processed outside the Netherlands and outside the European Economic Area.
This may be the case, for example, with Shopify, Klaviyo, advertising platforms, cloud providers and other international service providers.
Where the GDPR applies and personal data is transferred to a country for which no adequacy decision applies, we or our service providers ensure, where required, that appropriate safeguards are in place.
This may, for example, take place through:
- Standard Contractual Clauses approved by the European Commission;
- an applicable adequacy decision;
- the EU-U.S. Data Privacy Framework where applicable;
- or another legally permitted transfer mechanism.
Where necessary, we assess which additional measures are appropriate for international data transfers.

Article 15 – Retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected, unless we are legally required to retain it for longer.

The exact retention period depends on the type of data and the purpose of the processing.

We apply, among other things, the following principles:

Order and financial administration

Data forming part of our tax and financial records is retained for as long as required under applicable tax legislation.

OSS/IOSS and international VAT administration

Where certain transactions fall under an applicable EU One Stop Shop or Import scheme, longer statutory retention periods may apply.

Customer accounts

Account data may be retained for as long as the account is active or for as long as reasonably necessary to provide account services.

After an account is deleted, certain data may be retained for longer if necessary due to legal obligations, fraud investigations, warranty matters or legal claims.

Marketing data

Marketing data is retained for as long as you remain subscribed to the relevant marketing service or for as long as we have another valid legal basis for doing so.

When you unsubscribe, we may retain limited information to ensure that you do not receive unwanted marketing again.

Customer service

Customer service communications may be retained for as long as reasonably necessary to handle questions, returns, warranty matters, complaints or legal disputes.

Technical and analytics data

The retention period for this data depends on the relevant cookie, analytics service or technology.

Article 16 – Security

Carder Essentials takes appropriate technical and organisational measures to protect personal data against, among other things:
- loss;
- misuse;
- unauthorised access;
- unauthorised disclosure;
- alteration;
- destruction.
In doing so, we also make use of the security measures of our technical service providers, including Shopify.
However, no digital service or data transmission can guarantee absolute security.
If a security incident occurs, we act in accordance with applicable law and inform affected persons and/or supervisory authorities where legally required.

Article 17 – Your privacy rights

Depending on the law applicable to you, you may have certain rights regarding your personal data.

Under the GDPR, these include, among others:

Right of access
You may ask which personal data we process about you.
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
You may ask us, under certain circumstances, to delete personal data.
Right to restriction of processing
You may, under certain circumstances, ask us to temporarily restrict processing.
Right to data portability
For certain data, you may have the right to receive a machine-readable copy of your personal data.
Right to object
You may, under certain circumstances, object to processing based on legitimate interests.
Right to withdraw consent
Where processing is based on consent, you may withdraw that consent at any time.
Right to object to direct marketing
You may always object to the use of your personal data for direct marketing.
Rights relating to automated decision-making
Where applicable, additional rights may apply where decisions are made solely by automated means and have significant effects on you.

Privacy requests may be sent to:

support@carder-essentials.com

We may request additional information where reasonably necessary to verify your identity.

We handle privacy requests within the time limits required by applicable law.

Article 18 – Opting out of marketing and targeted advertising

Email

You may unsubscribe from marketing emails using the unsubscribe link at the bottom of every commercial email.

SMS

If Carder Essentials offers SMS marketing in the future, we will also provide an easy way to opt out.

Cookies

Where available, you can change or withdraw consent for non-essential cookies through the privacy or cookie settings on our website.

Targeted advertising and data sharing

In certain countries and regions, you may have the right to opt out of the use or sharing of personal data for targeted advertising.

Where legally applicable, we provide appropriate privacy controls for this purpose.

Where applicable, our website may process supported browser or device privacy preferences, including mechanisms such as Global Privacy Control.

Article 19 – Children’s data

Carder Essentials does not specifically target its services at young children.
We do not knowingly collect personal data from children where consent from a parent or legal guardian is required under applicable law.
If you suspect that a child has provided personal data to us without valid consent, please contact us at support@carder-essentials.com.
Where legally required, we will take appropriate steps to delete such data.

Article 20 – Third-party websites and services

Our website may contain links or connections to websites, social media, payment providers or other third-party services.
Carder Essentials does not have full control over how independent third parties process personal data.
When you use an external website or service, the privacy policy of that third party may apply.
We therefore recommend reviewing the privacy policy of the relevant third party.

Article 21 – Changes to this Privacy Policy

Carder Essentials may amend this Privacy Policy from time to time.
This may be necessary, for example, due to:
- changes in legislation;
- new Shopify functionality;
- new payment methods;
- new marketing technology;
- new apps or service providers;
- changes in our business operations.
The most recent version will be published on our website.
The date on which the Privacy Policy was last updated is shown at the top of this page.
Where a change legally requires this, we will additionally inform affected persons or request consent again.

Article 22 – Complaints

If you have questions or complaints about how Carder Essentials processes your personal data, we ask that you first contact us at:

support@carder-essentials.com

Where the GDPR applies, you also have the right to lodge a complaint with the competent data protection supervisory authority.
For Carder Essentials, the competent Dutch supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
If you live in another country, you may, depending on applicable law, also have the right to contact the data protection supervisory authority in your own country.