Privacy Policy

Last updated: 26 September 2026

This Privacy Policy explains how SARKY. handles your personal data when you visit our website, contact us or place an order. We aim to use only the data we need and to explain clearly what we do with it.

Who is responsible

SARKY. (trading as SARKY Fashion), Vosmaerstraat 11, 2524 SK Den Haag, the Netherlands, is the controller for the processing described here. You can contact us at info@sarkyfashion.com.

What data we process and where it comes from

Most data comes directly from you. Some is collected automatically when you use our website.

Identity and contact data: name, email address, phone number (if you give it).
Order data: billing and delivery address, items ordered, order history, payment status and delivery details.
Payment data: payments are processed by payment providers. We receive the result of the payment and limited information about the payment method, but we do not store your full card details.
Customer support data: messages you send us, including withdrawal requests, and our replies.
Technical data: IP address, device and browser information and how you use our website, collected through cookies and similar technologies.
Marketing data: your email address and preferences if you sign up for our emails.

Why we use your data and on what legal basis

To take and deliver your order (process payments, arrange shipping, send order and shipping updates, handle returns and refunds). Legal basis: performance of our contract with you.
To provide customer support and handle complaints. Legal basis: performance of a contract, or our legitimate interest in answering your questions.
To meet legal obligations, such as tax and accounting rules and consumer law. Legal basis: legal obligation.
To prevent fraud and keep our shop secure. Legal basis: our legitimate interest in protecting our business and customers.
To send you marketing emails. Legal basis: your consent. You can withdraw it at any time.
To improve our website and measure how it is used, and for optional cookies. Legal basis: your consent where required, otherwise our legitimate interest in running a functioning website.

Who we share data with

We do not sell your personal data. We share it only with parties that help us run the shop, and only as far as needed:

our shop platform provider, Shopify, which hosts our store and checkout and processes orders and customer data for us;
payment providers and payment methods you choose at checkout, such as Klarna, card payment providers and PayPal, which act as independent or joint controllers for their own payment processing;
fulfilment partners and shipping carriers, which receive your name, delivery address, contact details and order contents so they can prepare and deliver your parcel;
email and communication services we use for customer support, including Microsoft 365 for our business mailbox;
authorities, advisers and accountants where required by law or to protect our rights.

Transfers outside the European Economic Area

Some of these providers, or their subprocessors, may process data outside the European Economic Area, for example in the United States or Canada. Where this happens, we rely on the safeguards the law provides, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified companies) or Standard Contractual Clauses.

How long we keep your data

We keep data only as long as we need it for the purposes above. Order and payment data that forms part of our administration is kept for 7 years, as required by Dutch tax law. Customer support messages are kept for as long as needed to deal with your request and any follow-up, and then deleted or anonymised. Marketing data is kept until you unsubscribe or withdraw your consent.

Cookies and similar technologies

We use cookies and similar technologies that are needed for the website to work, for example to remember your cart, complete checkout and keep the shop secure. With your consent, we and our platform provider also use cookies to analyse how the website is used and for marketing. You can accept or decline these in the cookie banner and change your choice at any time. You can also block cookies in your browser settings, although parts of the website may then not work properly.

Marketing emails

We only send marketing emails if you signed up for them. Every marketing email contains an unsubscribe link, and you can also ask us to stop at info@sarkyfashion.com. Order and shipping messages are not marketing and will still be sent.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

access your personal data and receive a copy;
have inaccurate data corrected;
have your data erased, where the law provides for it;
restrict the processing of your data in certain cases;
object to processing based on our legitimate interest, and to direct marketing at any time;
receive the data you gave us in a structured, commonly used format (data portability), where the processing is based on consent or a contract;
withdraw your consent at any time, without affecting processing that took place before.

To use your rights, email info@sarkyfashion.com. We will respond within one month. We may ask you to confirm your identity first.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can put things right. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in the EU country where you live or work.

Automated decisions

We do not take decisions about you that have legal or similarly significant effects based solely on automated processing. Our payment providers and platform may use automated fraud checks. If an order is stopped because of such a check, you can contact us and ask for it to be reviewed by a person.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Children

Our website is not aimed at children, and we do not knowingly collect personal data from children under 16 without the consent of a parent or guardian.