Privacy policy

The Pack — Privacy Policy Last updated: May 2026

Who We Are

The Pack is a cycling accessories brand based in the Netherlands. We sell direct-to-consumer through our online store at thepack.cc. This policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR).

What Data We Collect

When you place an order, we collect the following:

  • Full name and delivery address
  • Email address and, where provided, phone number
  • Payment information (processed and stored securely by our payment provider — we never store your card details)
  • Order history and product preferences
  • IP address and browser data collected automatically via cookies

When you visit our website without making a purchase, we collect anonymised analytical data to understand how our store is used. See our cookie settings for full details.

Why We Collect It

We use your data solely for legitimate business purposes:

  • Processing, fulfilling, and delivering your order
  • Communicating with you about your order, including shipping updates and customer service
  • Complying with legal obligations (tax records, consumer rights law)
  • Improving our website and product offering based on anonymised usage patterns
  • Sending you marketing communications, only if you've opted in and you can unsubscribe at any time

We do not sell your data to third parties. Period. We share data only with the service providers who need it to fulfil your order, our shipping carrier and payment processor (Stripe via Shopify) and only to the extent necessary.

How Long We Keep Your Data

Order and transaction data is retained for 7 years as required by Dutch tax law. Marketing preferences are respected immediately upon withdrawal of consent. You can request deletion of all other personal data at any time.

Your Rights Under GDPR

You have the right to:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten")
  • Portability — receive your data in a portable format
  • Objection — object to processing based on legitimate interest
  • Restriction — ask us to limit how we process your data

To exercise any of these rights, email maikel@thepack.cc. We will respond within 30 days. If you feel your rights have not been respected, you have the right to lodge a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.