Privacy Policy

The Second Bag Boutique

Last updated: 27/02/'26

1. Introduction

The Second Bag Boutique (“we”, “us”, “our”) respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR / AVG).

This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase from www.thesecondbagboutique.com.

2. Company Information

The Second Bag Boutique
Registered in Veldhoven, The Netherlands
KVK: 86114352
VAT: NL004192832B10
Email: info@thesecondbagboutique.com

3. Personal Data We Collect

When you visit or make a purchase from our website, we may collect the following personal data:

Order & Account Information

  • First and last name
  • Billing address
  • Shipping address
  • Email address
  • Phone number
  • Order details

Payment Information
Payments are processed securely by third-party payment providers. We do not store full credit card details.

Technical Data

  • IP address
  • Browser type
  • Device information
  • Cookies and usage data

4. How We Use Your Data

We process your personal data for the following purposes:

  • Processing and delivering orders
  • Payment processing
  • Customer service communication
  • Fraud prevention and security
  • Legal and tax compliance
  • Improving our website and services
  • Marketing (only where consent has been given)

5. Legal Basis for Processing

Under GDPR, we process your data based on:

  • Performance of a contract (order processing)
  • Legal obligations (tax/accounting requirements)
  • Legitimate business interests (fraud prevention, site improvement)
  • Consent (newsletter and marketing communication)

You may withdraw consent at any time.

6. Data Sharing

We may share your personal data with trusted third parties such as:

  • Payment providers
  • Shipping carriers
  • IT and hosting providers (e.g., Shopify)
  • Accounting or administrative service providers
  • Government authorities where legally required

We do not sell or rent personal data to third parties.

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR.

7. Data Retention

We retain personal data only as long as necessary for:

  • Fulfilling contractual obligations
  • Tax and accounting requirements
  • Handling disputes or claims

After this period, data will be securely deleted or anonymized.

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time

Requests can be submitted to:
info@thesecondbagboutique.com

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Cookies

Our website uses cookies to ensure proper functionality, improve user experience, and analyze website traffic.

Where required by law, you will be asked to provide consent for non-essential cookies.

You can adjust your browser settings to refuse cookies. Please note that disabling certain cookies may affect website functionality.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

  • Unauthorized access
  • Loss
  • Misuse
  • Disclosure

However, no online transmission can be guaranteed to be 100% secure.

11. Changes to This Policy

We reserve the right to update this Privacy Policy when necessary. The most recent version will always be available on our website.