Privacy Policy ByMetz

Version 2026-4: valid from 24 October 2026

ByMetz respects the privacy of everyone who visits our website, places an online order or makes a purchase in our store. In this Privacy Policy, you can read which personal data we process, why we process it, who we share it with, how long we keep it and which rights you have.

---

1. Who is responsible

V.O.F. By Metz, trading under the name ByMetz
Winkelcentrum Woensel 59
5625 AD Eindhoven
The Netherlands

Email address: info@bymetz.nl
Chamber of Commerce number: 72092343
VAT identification number: NL858982869B01

For all privacy-related questions, you can email info@bymetz.nl.

---

2. Which data we use, why and for how long

Purpose	Which data	Legal basis	Retention period
Your online order: payment, shipping, invoice and tracking	Name, address, email address, telephone number (for the delivery driver), ordered products, payment status	Performance of the agreement	7 years (legal retention obligation)
Purchases in the store	Purchase and payment status; your name and email address only if you want a receipt by email or save credit	Performance of the agreement	7 years (legal retention obligation)
Customer account and ByMetz Baggies (store credit)	Name, email address, purchases, accumulated and used credit	Performance of the agreement	As long as your account exists; credit transactions for 7 years
Returns and cancellations	Name, email address, order number, country, the content and time of your cancellation	Legal obligation and performance of the agreement	Together with the order, 7 years
Customer service, complaints, warranty and repairs	Your messages, photos, proof of purchase and contact details	Performance of the agreement and our legitimate interest in providing good service	As long as needed to handle your question and any follow-up questions about it
Reminder about an incomplete order	Email address, name, products in your shopping cart	Our legitimate interest (service message about your own order)	Until the reminders have been sent or you complete the order
Newsletter, promotions and reminders about viewed products	Email address, name, what you viewed or put in your shopping cart	Consent	Until you unsubscribe
Invitation to leave a review	Name, email address, order number	Our legitimate interest in honest reviews	According to the privacy policy of Valued Shops
Website statistics	IP address (shortened), device, browser, pages visited	Consent (statistics cookies)	Up to 14 months
Measuring visits and advertising without cookies	Cookie-free signals: page viewed, time, browser and device type, whether you arrived through an advertisement, the order number and amount of an online purchase, and your IP address as with every website visit	Our legitimate interest in measuring the reach of our website and advertising	According to Google's privacy policy
Measuring and displaying advertisements	Cookie IDs, pages visited, purchases and, for a purchase, encrypted contact details, your IP address and browser type	Consent (marketing cookies)	See chapter 5
Security and fraud prevention	IP address, device data, order and payment details	Our legitimate interest in maintaining a safe store	As long as needed for this purpose
Accounting and tax returns	Invoice and payment details	Legal obligation	7 years

We do not process special categories of personal data, such as health information. We never sell your data.

---

3. Emails we send you

• About your order: order confirmation, invoice, shipping and delivery notifications, and after an online purchase one email with your invoice and store credit. These emails are part of your order.
• Incomplete order: if you leave your email address at checkout and do not complete your order, we will send you no more than two reminders: after half an hour and after three days. They only show the products from your own shopping cart. A discount code is included only if you signed up for our emails.
• Newsletter and viewed products: only if you sign up for them. You may then also receive one reminder about a product you viewed or put in your shopping cart, no more than once every 14 days.
• Confirmation of your cancellation: if you cancel an online purchase using the button "Cancel the agreement here", you will immediately receive an acknowledgement of receipt with the date and time.

Every reminder and newsletter contains an unsubscribe link. After unsubscribing, you will no longer receive reminders. In reminder emails, we track which links were clicked and whether an order was placed afterwards, so we can see whether the emails are useful. If you signed up for our emails, we also use a small image to track whether the email was opened.

---

4. Who we share data with

We only share data with parties we need to operate your order and our store, and only the data they need for that purpose. We have agreements with parties that process data on our behalf about how to protect it.

Party	Purpose
Shopify	Online store, checkout, payments (Shopify Payments), customer accounts and checkout in our store
Klarna	Paying later or in instalments, only if you choose this. Klarna is responsible for its own credit assessment.
DPD, PostNL and Sendcloud	Delivery, shipping labels, tracking and the returns portal
ChannelDock and our fulfilment partner	Storage and shipping of some orders
Google Workspace	Our email (info@bymetz.nl)
Resend	Sending emails from our own systems, such as invoices, reminders and confirmation of a cancellation
Railway	Hosting our own systems for orders, stock, administration and customer contact
Anthropic	AI assistant that helps us read and answer emails and process orders. An employee checks every response before it is sent to you.
Brands and repair partners	Only for a warranty or repair request, with the data needed for that purpose
Valued Shops	Invitation to review your experience
Google (Analytics, Ads, Merchant Center, Business Profile)	Statistics and advertising: with cookies only with your consent, without consent only cookie-free signals (see chapter 5); reviews of our store
Meta (Facebook and Instagram)	Measuring and displaying advertisements, only with your consent
Cloudflare	Security and forwarding part of our domains
Our accountant and Basecone	Accounting and tax returns
bol	If you order through bol, bol is responsible for this itself. bol gives us the data we need to deliver your order.

Sometimes we must provide data because the law requires it, for example to the Dutch Tax and Customs Administration.

Outside the European Union. Some of these parties (such as Shopify, Google, Meta, Anthropic, Resend, Railway and Cloudflare) also process data outside the European Economic Area, mainly in the United States and Canada. This only happens on a legal basis: an adequacy decision by the European Commission (such as for Canada and companies participating in the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

---

5. Cookies and similar technologies

We ask for your choice when you first visit our website. Without your consent, we do not place cookies for statistics or marketing and do not load code from Meta. The Google tag (Google Analytics and Google Ads) does load, but then runs in consent-free mode: it does not place or read cookies and only sends separate cookie-free signals without a cookie ID. Such a signal may indicate, for example, that a page was viewed, that something was added to the shopping cart or that something was bought online (with the order number and amount, without your name or contact details), together with the time, browser type and whether you arrived through an advertisement. We remove the recognition code for an advertisement click. Google sees your IP address, as with every visit to a website, and uses these signals to estimate how many visits and purchases our website and advertisements generate. You can change your choice at any time via Cookie settings at the bottom of every page.

Type	Purpose	From whom	Examples and duration
Necessary	Shopping cart, login, checkout, security and remembering your cookie choice	Shopify	Always on, because the store cannot work without it
Preferences	Remembering your language, country and previous choices	Shopify	Only with consent
Statistics	Measuring how the website is used so we can improve it	Google Analytics 4, Shopify	For example _ga and _ga_*, up to 2 years; only with consent
Marketing	Measuring which advertisements lead to a visit or purchase and showing advertisements that match your interests	Google Ads, Meta	For example _gcl_au, _fbp and _fbc, around 3 months; only with consent

After a purchase. If you have given consent for marketing, we share an online purchase with Google Ads and Meta so they can measure which advertisement led to the purchase. Your email address, telephone number, name, town or city, postcode and country are sent in encrypted form (hashed), so they can only match them to an account they already know. With Meta, this happens through a secure connection from our server (Conversions API). We also share your IP address, browser type and the Meta cookies from our website (_fbp and _fbc), so Meta can match the purchase to the advertisement you clicked. We delete the data we temporarily store for this purpose after 48 hours. Without consent for marketing, Meta receives nothing about your purchase, and Google only receives the cookie-free signal described above, without your contact details.

For the data Meta collects through the Meta pixel on our website, ByMetz and Meta Platforms Ireland Ltd. are jointly responsible. What Meta does with this data afterwards is covered by Meta's privacy policy.

---

6. AI in our store

We use AI to help you faster and better. An AI assistant (Anthropic) helps us read emails, prepare replies and process orders; an employee checks every response before it is sent. We also use AI for product descriptions and translations; no personal data is included. We do not make decisions about you based solely on automated processing.

---

7. Security

We take appropriate technical and organisational measures to prevent the loss and misuse of your data, such as a secure connection (https), access to customer data only for people who need it for their work and regular backups. If something nevertheless goes wrong with your data, we will report it as required by law.

---

8. Your rights

You have the right to:

• access your data;
• have incorrect data corrected;
• have your data deleted, unless we are legally required to keep it;
• restrict its processing;
• receive your data in a commonly used file format (data portability);
• object to processing based on our legitimate interest, and always object to the use of your data for direct marketing;
• withdraw your consent. For cookies, do this via Cookie settings at the bottom of every page; for emails, use the unsubscribe link. Anything we did before you withdrew your consent remains lawful.

Email your request to info@bymetz.nl. We will respond within one month, usually sooner. To make sure the request comes from you, we may ask you to confirm it from the email address known to us.

---

9. Complaint about the use of your data

If you are not satisfied with how we handle your data, please let us know first via info@bymetz.nl. You also always have the right to submit a complaint to the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl) or to the privacy supervisory authority in the country where you live.

---

10. Reviews

We believe it is important that reviews provide an honest picture of our products and service. That is why they are managed independently by Valued Shops. We only send an invitation to write a review to customers who bought from us. Valued Shops has measures in place to check the authenticity of reviews. We do not reward customers for writing a review: no discounts or gifts are given.

---

11. Changes

We update this Privacy Policy when our working methods or the law changes. The date of the latest version is always shown at the top. We will inform you about important changes on the website or by email.