● Your data
Privacy & Cookies
Last updated
We collect the minimum we need to sell you a t-shirt and get it to your door. We do not sell your data, we do not run advertising trackers, and this site sets no tracking cookies at all — which is why you are not being asked to dismiss a cookie banner.
is the data controller for the personal data described below. If you have a question about any of it, email us at .
1. What we collect, and why
When you place an order
Your name, email address, delivery address, billing address, phone number if you give one, and what you bought. We need this to perform the contract with you — that is our legal basis. Payment card details go directly to our payment provider; they never reach our systems.
When you contact us
The contact form on this site does not send anything to a server. It opens your own email application with a message pre-filled, so your message travels directly from you to us. We keep that correspondence so we can answer you and handle any follow-up. Legal basis: our legitimate interest in answering people who write to us.
When you join the mailing list
Your email address, on the basis of your consent. Every email we send has an unsubscribe link, and unsubscribing withdraws that consent immediately.
When you simply browse
Our hosting provider processes your IP address and basic request information in order to serve the page and to protect the site from attack. Legal basis: legitimate interest in operating a secure website. We do not run analytics or advertising scripts.
2. Who else sees it
Only the parties we need to involve to complete your order:
- Our payment provider — to take payment and handle refunds and chargebacks.
- Our shipping carrier — your name and address, to deliver the parcel.
- Our hosting provider — which serves this website.
- Our accountant and the tax authority — invoices, because we are legally required to keep them.
We do not sell, rent or trade personal data. We share it with no one else unless the law obliges us to.
3. Where it goes
We keep processing inside the European Economic Area wherever we can. If a provider processes data outside the EEA, that transfer is covered by an adequacy decision or by the European Commission's Standard Contractual Clauses.
4. How long we keep it
- Order and invoice records — seven years, which is the statutory retention period for tax records.
- Correspondence — two years after the matter is closed.
- Mailing list — until you unsubscribe.
- Server logs — kept briefly by our host and then rotated out.
5. Cookies and local storage
This site sets no cookies. It uses one piece of browser local
storage, resilient.cart.v1, which remembers what is in your bag as
you move between pages. It stays in your browser, is never transmitted to us, and
holds only product codes, sizes and quantities — nothing that identifies you.
Because that storage is strictly necessary to provide a service you asked for, no consent banner is required for it. Clearing your browser data empties your bag.
Our fonts are served from our own domain rather than a third party, so loading this site sends your IP address to no one but our host.
6. Your rights
Under the GDPR you have the right to:
- ask what personal data we hold about you, and get a copy;
- have inaccurate data corrected;
- have your data erased where we no longer need it;
- ask us to restrict how we use it;
- receive the data you gave us in a portable, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, where consent is the basis.
Email us and we will respond within one month. There is no charge. We make no automated decisions about you and we do not profile you.
If you think we have handled your data badly, please tell us first — but you are entitled to complain directly to your national data protection authority. In that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
7. Security
The site is served over HTTPS. Access to order data is limited to the people who need it to fulfil orders. No system is perfectly secure, but if a breach ever affects your rights we will notify you and the supervisory authority as the GDPR requires.
8. Children
This shop is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
9. Changes
If we change how we handle personal data we will update this page and change the date at the top. Material changes will be announced on the site.