Legal

Privacy Policy

What we collect, why we collect it, who we share it with, and how you stay in control.

Last updated: 1 September 2026

1. Who is responsible for your data

The data controller for the personal data described in this policy is:

Forgewell Cookware
Kralingseweg 266, 3066 RA Rotterdam, The Netherlands
Email: info@forgewellcookware.com
Chamber of Commerce (KvK) number: [TO BE ADDED]

For any privacy question or request, write to the address above. We answer privacy requests within 30 days.

2. What we collect

Information you give us

• Order data: name, billing and delivery address, email address, phone number where provided, and the contents of your order.
• Payment data: handled by our payment providers. We receive confirmation that a payment succeeded, plus the last four digits and the card type. We never see or store your full card number.
• Account data: if you create an account, your login details and saved addresses.
• Communications: the content of emails, contact form messages and support conversations.
• Marketing preferences: your email address if you subscribe to our newsletter, and whether you have opted in or out.

Information collected automatically

• Device and browser data: IP address, browser type and version, operating system, time zone and screen size.
• Usage data: pages viewed, products looked at, search terms, referring site, and how long you stay.
• Cookies and similar technologies: described in detail in our Cookie Policy.

We do not knowingly collect data from children under 16, and we do not collect special categories of personal data such as health or biometric data.

3. Why we use it, and on what legal basis

4. Cookies

We use cookies and similar technologies to keep your basket working, remember your preferences, understand how the store is used, and measure advertising. Strictly necessary cookies are always on. Everything else runs only after you consent. Full detail, including how to change your choice, is in our Cookie Policy.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who need it to do their job for us, under contracts that oblige them to protect it:

• Shopify, our ecommerce platform, which hosts this store and processes orders.
• Payment providers, to take and secure your payment, for example Shopify Payments, PayPal or Klarna depending on your choice at checkout.
• Fulfilment partners and carriers, to pick, pack and deliver your order and to handle returns.
• Email and marketing tools, to send order notifications and, where you have consented, newsletters.
• Analytics and advertising platforms, where you have consented, to understand traffic and measure campaigns.
• Professional advisers and authorities, where we are legally required to disclose data, or to establish or defend legal claims.

6. International transfers

Some of our providers are established outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA we rely on an adequacy decision by the European Commission, or on the Standard Contractual Clauses together with supplementary safeguards. You can request a copy of the relevant safeguards by emailing us.

7. How long we keep it

• Order and invoice data: 7 years, as required by Dutch tax law.
• Account data: for as long as your account is open, then deleted or anonymised.
• Support correspondence: up to 3 years after the last contact.
• Marketing data: until you unsubscribe, and then a minimal suppression record so we do not contact you again.
• Analytics data: generally up to 26 months, depending on the tool.

8. Your rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Rectification of data that is inaccurate or incomplete.
• Erasure of your data, where we have no overriding legal reason to keep it.
• Restriction of processing in certain circumstances.
• Data portability, to receive your data in a structured, machine readable format.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, without affecting processing already carried out.

To exercise any of these, email info@forgewellcookware.com. We may ask you to confirm your identity before we act. There is no charge, and we respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live elsewhere, you may complain to your own national authority.

9. Marketing email

We send marketing email only to people who have asked for it. Every message contains an unsubscribe link that works immediately, and you can also simply email us to be removed. Transactional messages such as order confirmations, shipping notifications and return updates are part of fulfilling your order and are sent regardless.

10. Security

Our store runs over an encrypted HTTPS connection, and payment pages are handled by PCI DSS compliant providers. We limit access to personal data to the people who need it to do their work. No system is perfectly secure, but if a data breach ever affects your personal data and poses a risk to you, we will notify you and the relevant supervisory authority as required by law.

11. Automated decision making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Payment providers may run automated fraud checks as part of approving a transaction.

12. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or for legal reasons. The date at the top of this page shows when it was last revised. Material changes will be communicated on the site, and where required, by email.