Privacy policy
Last updated: 1 August 2026
This Privacy Policy describes how FilthyBass (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit filthybass.com, use our services, make a purchase, or otherwise communicate with us (collectively, the “Services”). For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected.
Please read this Privacy Policy carefully. If you do not agree with it, please do not use the Services.
Who is responsible for your data
For the purposes of the EU General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG, the data controller is:
FilthyBass
A registered trade name of Langhoor Marchal Consultancy (LMC)
Heerderweg 103, 6224 LB Maastricht, Netherlands
Email: info@filthybass.com
Telephone: +31 6 100 890 29
KVK: 88375692 · VAT: NL004594074B45
We are established in the European Union, so no separate EU representative under Article 27 GDPR is required. We are not required to appoint a Data Protection Officer; privacy questions go to the address above and are handled by the owner.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law. Where a change is significant, we will make you aware of it before it takes effect.
What personal information we collect
The types of personal information we obtain depend on how you interact with our Site and use our Services.
Information you give us directly
- Basic contact details — your name, address, phone number, email address.
- Order information — your name, billing address, shipping address, payment confirmation, email address, phone number.
- Account information — your username, password, and any security questions, if you choose to create an account.
- Shopping information — the items you view, put in your cart, or add to a wishlist.
- Customer support information — whatever you choose to include when you message us, including return and warranty correspondence.
Some features may require you to provide certain information. You may choose not to, but that may prevent you from using those features.
We do not collect or store your payment card details. Card and payment data is handled directly by our payment providers.
Information we collect through cookies
We automatically collect certain information about your interaction with the Services (“Usage Data”) using cookies, pixels and similar technologies (“Cookies”). Usage Data may include device information, browser information, information about your network connection, your IP address, and other information about how you use the Site.
Information we obtain from third parties
- Companies that support our Site and Services, such as Shopify.
- Our payment processors, who collect payment information (e.g. bank account, credit or debit card information, billing address) in order to process your payment and fulfil your order.
- Advertising and analytics partners, where you have consented to those cookies.
Any information we obtain from third parties is treated in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided to us by third parties, nor for any third party’s own policies or practices.
How we use your information, and our legal basis for it
| What we do | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Process your order, take payment, arrange delivery, handle returns and exchanges, manage your account | Contact details, order information, account information | Performance of a contract (Art. 6(1)(b)) |
| Send you order confirmations, shipping notifications and service messages | Contact details, order information | Performance of a contract (Art. 6(1)(b)) |
| Keep invoices and transaction records | Order information, billing details | Legal obligation — Dutch tax law (Art. 6(1)(c)) |
| Answer your questions and provide customer support | Contact details, support correspondence | Legitimate interests — running a responsive business (Art. 6(1)(f)) |
| Detect, investigate and prevent fraud, abuse and security incidents | Order information, Usage Data, IP address | Legitimate interests — protecting the store and our customers (Art. 6(1)(f)) |
| Send marketing emails and show you personalised advertising | Contact details, shopping information, Usage Data | Your consent (Art. 6(1)(a)) — withdrawable at any time |
| Analytics and advertising cookies | Usage Data, cookie identifiers | Your consent (Art. 6(1)(a)) — withdrawable at any time |
| Strictly necessary cookies (cart, checkout, security, load balancing) | Session identifiers | Legitimate interests / necessary to provide a service you requested (Art. 6(1)(f)) |
Where we rely on consent, you can withdraw it at any time — by using the unsubscribe link in any marketing email, by changing your cookie preferences on the Site, or by emailing info@filthybass.com. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects for you.
Cookies and your choices
Like most websites, we use Cookies. For specific information about the Cookies used to power our store with Shopify, see shopify.com/legal/cookies.
Strictly necessary cookies — the ones that keep your cart working, secure checkout and keep the site up — are set without consent because the Site cannot work without them. Analytics, marketing and advertising cookies are only set after you consent via the cookie banner, and you can change or withdraw that choice at any time through the cookie preferences link on the Site.
You can also set your browser to remove or reject Cookies. Blocking Cookies can negatively affect your experience and may cause some features to work incorrectly or become unavailable.
Who we share your information with
We share personal information only where there is a lawful reason to do so:
- Service providers acting on our behalf (processors) — e-commerce platform and hosting (Shopify), payment processing, print and fulfilment partners, shipping carriers, email delivery, analytics and cloud storage. These providers may only use your data on our instructions and under a data processing agreement.
- Marketing and advertising partners, where you have consented. They will use your information in accordance with their own privacy notices.
- Where you ask us to, for example through your use of social media widgets or login integrations.
- In connection with a business transaction such as a merger, acquisition or insolvency.
- To comply with legal obligations, including responding to lawful requests from public authorities, to enforce our terms, and to protect our rights and the rights of our users.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising without your consent.
Categories of personal information disclosed for the purposes above: identifiers such as basic contact details and certain order and account information; commercial information such as order information, shopping information and customer support information; and internet or similar network activity such as Usage Data. We do not use or disclose special-category (sensitive) personal data to infer characteristics about you.
How long we keep your information
| Information | Retention period |
|---|---|
| Order and invoice records (including name, address, transaction details) | 7 years from the end of the financial year, as required by Dutch tax law |
| Customer account data | Until you delete your account, or after 3 years of inactivity |
| Customer support and returns correspondence | 3 years after the matter is closed (covers the 2-year legal guarantee period) |
| Marketing contact details and consent records | Until you unsubscribe, then consent records kept 3 years as proof |
| Analytics and advertising cookie data | Up to 26 months, or the shorter period stated in the cookie banner |
| Website server and security logs | Up to 12 months |
Where we no longer need your information, we delete it or irreversibly anonymise it.
Security of your information
We use appropriate technical and organisational measures to protect your personal information, including encryption in transit (TLS), access controls, and processing only through reputable providers bound by data processing agreements. However, no security measure is perfect or impenetrable, and information you send us may not be secure while in transit. We recommend you do not use unsecured channels to send us sensitive or confidential information.
If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the Dutch Data Protection Authority as required by Articles 33 and 34 GDPR.
International transfers
Some of our service providers process data outside the European Economic Area, including in the United States. Where that happens, we rely on a recognised transfer mechanism: an adequacy decision of the European Commission (including the EU–US Data Privacy Framework where the recipient is certified), or the European Commission’s Standard Contractual Clauses together with supplementary safeguards where needed. You can request a copy of the safeguards we rely on by emailing info@filthybass.com.
Your rights
Depending on where you live, you have some or all of the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.
- Access — request a copy of the personal information we hold about you and details of how we use and share it.
- Rectification — ask us to correct inaccurate or incomplete information.
- Erasure — ask us to delete personal information we hold about you.
- Portability — receive a copy of your information in a machine-readable format, or ask us to transfer it to another provider.
- Restriction — ask us to stop or limit our processing.
- Objection — object to processing based on our legitimate interests, and object to direct marketing at any time, absolutely and free of charge.
- Withdraw consent — where we rely on consent, withdraw it at any time.
- Complain — lodge a complaint with a supervisory authority (see below).
To exercise any of these rights, email info@filthybass.com. We respond within one month, and will tell you if we need to extend that by up to two further months because the request is complex. Exercising your rights is free of charge. We may need to verify your identity before we respond, and we will never discriminate against you for exercising your rights.
You may designate an authorised agent to make a request on your behalf. We will ask that agent for proof you have authorised them, and may need to verify your identity with you directly.
Marketing. You can opt out of promotional emails at any time using the unsubscribe link in any email we send. If you opt out, we will still send non-promotional messages about your account and your orders.
Complaints and supervisory authority
If you have a complaint about how we handle your personal information, please contact us first at info@filthybass.com so we can put it right.
You also have the right to lodge a complaint with a data protection authority. Our lead supervisory authority is the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag, Netherlands
autoriteitpersoonsgegevens.nl
If you live elsewhere in the EU, you may also complain to the supervisory authority in your own country.
User-generated content
The Services may let you post product reviews and other user-generated content. Anything you submit to a public area of the Services is public and accessible by anyone. We cannot control who accesses information you choose to make public, and we are not responsible for the privacy or security of information you make publicly available.
Third-party websites and links
Our Site may link to websites or platforms operated by third parties. If you follow those links, review their privacy and security policies and terms — we do not control them and are not responsible for them. Our inclusion of a link does not imply endorsement.
Children’s data
The Services are not intended for children and we do not knowingly collect personal information from anyone under 16. If you are the parent or guardian of a child who has given us their personal information, contact us at info@filthybass.com and we will delete it. We do not knowingly sell or share the personal information of anyone under 16.
Contact
For any question about our privacy practices or this Privacy Policy, or to exercise any of your rights, email info@filthybass.com, call +31 6 100 890 29, or write to us at Heerderweg 103, 6224 LB Maastricht, Netherlands.