Privacy policy

Effective Date: 29/01/2026

Strap-Up Fitness operates the online store strapupfitness.com This Privacy Policy explains how we collect, use, and protect your personal data when you use our Site and purchase our products.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Dutch GDPR Implementation Act (UAVG), and other applicable laws.

1. Data Controller

The data controller responsible for your personal data is:

Strap-Up Fitness
Hoge Zand 39, Unit 1.01, 2512EL, Den Haag, Nederland
support@strapupfitness.com
KvK (Chamber of Commerce) Number: 96591366
BTW (VAT) Number: NL823807071B01

2. Personal Data We Collect

We may collect and process the following categories of personal data when you interact with our Site:

  • Identity Information: name, surname

  • Contact Information: email address, phone number, billing & shipping address

  • Payment Information: payment method details (processed securely via third-party providers such as Shopify Payments, PayPal, etc. – we do not store full payment card details)

  • Order Information: products purchased, order history, delivery details

  • Account Information: if you create an account, login details and preferences

  • Technical Data: IP address, browser type, operating system, device information, cookies

  • Marketing & Communication Preferences: newsletter sign-ups, promotions opted into

3. How We Use Your Data

We process your personal data only when we have a legal basis under GDPR. Your data may be used for:

  • Fulfilling and delivering your orders (performance of a contract)

  • Processing payments and preventing fraud (legal obligation / legitimate interest)

  • Providing customer service and support (performance of a contract)

  • Managing your account (performance of a contract)

  • Sending marketing emails/newsletters with your consent (consent)

  • Improving our website, products, and customer experience (legitimate interest)

  • Complying with tax, accounting, and legal obligations (legal obligation)

4. Legal Basis for Processing

We rely on the following lawful bases under GDPR:

  • Consent (Article 6(1)(a))

  • Performance of a contract (Article 6(1)(b))

  • Legal obligations (Article 6(1)(c))

  • Legitimate interests (Article 6(1)(f))

5. Sharing of Data

We only share your data when necessary, for example:

  • Shopify (our e-commerce platform, hosting, payment processing)

  • Payment providers (Shopify Payments, PayPal, Klarna, credit card processors)

  • Shipping carriers (PostNL, DHL, UPS, etc.)

  • IT and marketing service providers (email newsletter tools, analytics providers)

  • Legal or regulatory authorities when required by law

All third-party providers we work with are GDPR-compliant and process data on our behalf under Data Processing Agreements (DPAs).

6. International Data Transfers

Your personal data may be transferred outside the EEA when processed by Shopify and other service providers (e.g., servers in Canada or the U.S.). In such cases, we ensure adequate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Policy:

  • Order information: 7 years (required by Dutch tax law)

  • Account information: until you delete your account

  • Marketing data: until you withdraw your consent or unsubscribe

8. Your Rights (GDPR Rights)

Under GDPR, you have the following rights:

  • Right of access – request a copy of your personal data

  • Right to rectification – correct inaccurate or incomplete data

  • Right to erasure (“right to be forgotten”) – request deletion of your data

  • Right to restrict processing – limit how we use your data

  • Right to data portability – receive your data in a structured format

  • Right to object – to processing for marketing or legitimate interests

  • Right to withdraw consent – at any time, where processing is based on consent

To exercise your rights, contact us at: support@strapupfitness.com

You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority)at https://autoriteitpersoonsgegevens.nl.

9. Cookies

We use cookies and similar technologies to improve our Site, analyze traffic, and personalize your shopping experience.

For more information, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, secure servers, and limited access protocols.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “Last updated” date.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at:

Strap-Up Fitness
Email: support@strapupfitness.com