Privacy Policy

Effective Date: September 22, 2026

At Bath Floor and More, we respect your privacy and are committed to handling your personal information responsibly, transparently, and securely.

This Privacy Policy explains what personal information we may collect when you visit our website, contact us, create or use an account where applicable, place an order, or otherwise interact with Bath Floor and More. It also explains why we use your information, how we protect it, how long we retain it, and the rights available to you under applicable privacy law.

Bath Floor and More processes personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

1. Information We Collect

We collect only the information that is reasonably necessary for the purposes described in this Privacy Policy.

Depending on how you interact with our website, the information we may collect can include:

Information You Provide Directly

This may include:

• Full name

• Billing address

• Delivery address

• Email address

• Telephone number

• Order details

• Customer service communications

• Information submitted through contact forms or live chat

• Information you provide when requesting assistance with an order, return, refund, or other service

Order and Transaction Information

When you place an order, we may process information relating to your purchase, including:

• Products purchased

• Order number

• Order date

• Order value

• Delivery information

• Payment status

• Return and refund information

Payment card details are processed through the applicable payment service used during checkout. We do not need to retain complete payment card information when it is handled directly by the relevant payment provider.

Technical and Usage Information

When you visit our website, certain technical information may be collected automatically, depending on the technologies and services active on our website.

This may include:

• IP address

• Browser type

• Device type

• Operating system

• Website pages visited

• Referring website

• Date and time of website access

• Basic technical information required to operate and secure the website

We do not use technical information to collect more personal information than is reasonably necessary for the relevant purpose.

2. How We Use Personal Information

We may use personal information for the following purposes:

• Processing and fulfilling orders

• Processing payments

• Arranging delivery

• Managing returns and refunds

• Providing customer support

• Responding to questions and requests

• Communicating with customers about orders

• Maintaining and improving our website

• Preventing fraud, abuse, and unauthorised activity

• Protecting the security of our website and services

• Maintaining business and transaction records

• Complying with legal and regulatory obligations

• Sending marketing communications where you have provided the required consent or where another lawful basis permits us to do so

We use personal information only for appropriate and defined purposes and do not collect information that is unnecessary for those purposes.

3. Legal Bases for Processing

Where required by the GDPR, we process personal information on an applicable legal basis.

Depending on the circumstances, these legal bases may include:

Performance of a Contract

We may need to process your name, contact details, delivery information, and order information to process and fulfil your purchase and provide related services.

Legal Obligation

We may process information where necessary to comply with legal, tax, accounting, regulatory, or other legal requirements.

Legitimate Interests

We may process certain information where necessary for legitimate business interests, such as maintaining website security, preventing fraud, protecting our services, handling customer communications, and improving our operations, provided that those interests do not override applicable privacy rights.

Consent

Where consent is required, we will request it before carrying out the relevant processing.

You may withdraw consent where processing is based on consent. Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

4. Payment Information

We offer payment methods displayed during checkout, which may include AfterPay, PayPal, Visa, Mastercard, debit cards, and credit cards.

Payments may be processed through third-party payment service providers.

When you make a payment, relevant transaction information may be shared with the applicable payment provider as necessary to authorise and process the transaction, prevent fraud, and comply with legal obligations.

Customers should review the privacy information provided by the applicable payment provider for information about how that provider handles personal data.

5. Sharing Personal Information

We do not sell customers' personal information.

We may share personal information with service providers where necessary to operate our business and provide services to customers.

Depending on the services we use, these may include:

• Payment service providers

• Shipping and delivery providers

• Website hosting and technology providers

• Customer support and communication providers

• Website security and fraud-prevention providers

• Professional advisers

• Service providers that assist with website operation, maintenance, or technical services

• Authorities or other parties where disclosure is required by law

Where third-party processors process personal information on our behalf, we take appropriate steps to ensure that processing is carried out in accordance with applicable data protection requirements.

We do not permit service providers to use customer information for purposes that are incompatible with the services they provide to us.

6. International Data Transfers

Some service providers may process personal information outside the European Economic Area (EEA).

Where personal information is transferred outside the EEA, we will take appropriate measures required by applicable data protection law to protect the information and ensure that the transfer has an appropriate legal basis and safeguards.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

The applicable retention period may depend on the type of information and the reason it was collected.

For example, certain transaction and accounting records may need to be retained for a legally required period, while other information may be deleted when it is no longer necessary.

We regularly consider whether personal information is still required and take reasonable steps to delete or anonymise information when it is no longer needed.

Dutch GDPR guidance states that businesses should not retain personal data for longer than necessary and should determine retention periods according to the purpose and applicable legal requirements.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the website, remember preferences, provide essential functionality, maintain security, and, where applicable, understand website usage or support marketing activities.

Where consent is legally required for non-essential cookies or similar technologies, we will request consent before placing or using them for those purposes.

You may be able to manage or withdraw cookie preferences through the cookie settings available on our website or through your browser settings.

The specific cookies and technologies used may change as our website and services develop.

9. Marketing Communications

If you subscribe to marketing communications, we may use your contact information to send you information about products, offers, or other updates where permitted by applicable law.

Where consent is required, marketing communications will only be sent after the required consent has been provided.

You may unsubscribe from marketing communications at any time by using the unsubscribe option included in the relevant communication or by contacting us.

We will not make continued marketing communication a condition of purchasing products from us.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Our website uses secure connections where personal information is transmitted.

Access to personal information is limited to persons and service providers who need the information for legitimate business purposes.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Google also requires merchants to collect personal information responsibly and securely, including protecting payment information through appropriate secure technology.

11. Your Privacy Rights

Depending on the circumstances and applicable law, you may have the right to:

• Request access to your personal information

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information

• Request restriction of processing

• Object to certain processing

• Withdraw consent where processing is based on consent

• Request data portability where applicable

• Lodge a complaint with the competent data protection authority

Some rights are subject to legal conditions and exceptions.

To exercise a privacy right, please contact us using the contact information provided at the end of this Privacy Policy.

Dutch GDPR guidance confirms that individuals may, among other things, request access, correction, deletion, restriction, and data portability where the applicable conditions are met.

12. How to Exercise Your Rights

To request access to your information or exercise another applicable privacy right, contact us using:

Business Email: info@bathfloorandmore.shop

Please provide enough information for us to understand and process your request.

We may need to verify your identity before fulfilling certain requests in order to protect your personal information from unauthorised access.

We will handle valid requests within the timeframe required by applicable law.

13. Children's Privacy

Our website is not intended to knowingly collect personal information from children where such collection is not permitted by applicable law.

We do not knowingly request unnecessary personal information from children.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us so that we can review the matter and take appropriate action.

14. Third-Party Websites and Services

Our website may contain links to third-party websites or use third-party services.

This Privacy Policy applies to the processing carried out by Bath Floor and More. Third-party websites and services may have their own privacy policies and terms.

We recommend reviewing the privacy information of any third-party service before providing personal information directly to that service.

15. Data Breaches

If a personal data breach occurs, we will assess the incident and take the measures required under applicable data protection law.

Where notification to the relevant supervisory authority or affected individuals is legally required, we will make the required notification within the applicable timeframe.

16. Privacy by Default

We aim to collect and process only the personal information necessary for the relevant purpose.

We do not require customers to provide unnecessary personal information merely to place an order.

Where optional marketing or similar features require consent, consent will not be assumed through a pre-selected marketing preference where applicable law requires active consent.

Dutch guidance specifically states that online shops should not request more information than necessary and that privacy-friendly default settings should be used.

17. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes to our website, services, data-processing practices, legal requirements, or other relevant circumstances.

The updated version will be published on this page with a revised effective date.

We encourage customers to review this Privacy Policy periodically to remain informed about how personal information is handled.

18. Complaints

If you have a privacy-related question, concern, or complaint, please contact us first so that we can review the matter and assist you.

You also have the right to lodge a complaint with the competent data protection supervisory authority where you believe your personal data has been processed in violation of applicable data protection law.

For customers in the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

19. Business Information

Store Name: Bath Floor and More
Legal Business Name: Bath, Floor and more
Business Contact: +31 62 189 3321
Business Email: info@bathfloorandmore.shop
Live Chat Support: 24/7
Customer Support Hours: Monday – Friday, 9:00 AM – 5:00 PM
Business Address: Diemerparklaan 52-54, 1087 GM Amsterdam, Netherlands
VAT No.: NL856525224B01
Time Zone: Central European Time (CET)