Privacy policy

Last updated: 23 September 2026

RapidSneakers is the webshop of Paarline B.V. This policy explains what personal data we collect when you visit rapidsneakers.com or buy from us, why we collect it, how long we keep it, and what you can do about it. We have written it in plain language on purpose. If anything is unclear, email us and we will explain it.

Who is responsible for your data

The controller of your personal data is:

Paarline B.V., trading as RapidSneakers
Kiotoweg 70
3047 BG Rotterdam
Netherlands

Chamber of Commerce (KvK): 42111729
VAT identification number: NL869784067B01
Email: info@paarline.com
Phone: +31 (0)10 299 0860

We have not appointed a data protection officer. We are not required to. Privacy questions go to the address above and reach the people who can act on them.

What we collect and why

When you place an order

We collect your name, delivery and billing address, email address, phone number if you give one, the items you ordered, the amount you paid, and the payment method you used. We need this to accept your order, get the parcel to you, handle returns and answer questions about the order later. The legal basis is performance of the contract with you (Article 6(1)(b) GDPR).

We never receive your full card number. Card and bank details are entered on the payment provider's own page and stay with the provider. We only see the payment method, the last digits or account reference, and whether the payment succeeded.

When you create an account

We store your email address, an encrypted version of your password, your saved addresses and your order history, so you do not have to type everything again. Legal basis: performance of the contract, and your consent when you chose to open the account.

When you contact us

Emails, contact form messages and anything you send with them stay in our mailbox so we can deal with your question and check back on it later. Legal basis: performance of the contract if it concerns an order, otherwise our legitimate interest in answering people who write to us (Article 6(1)(f) GDPR).

When you subscribe to our email list

We store your email address and whether you opened or clicked our messages. We only send marketing email if you asked for it. Legal basis: your consent (Article 6(1)(a) GDPR). Every message has an unsubscribe link, and unsubscribing takes effect immediately.

When you browse the shop

Our platform records your IP address, browser and device type, the pages you open and the products you look at. Some of this is needed to make the site work at all, for example to keep your cart filled while you move between pages. The rest is aggregated statistics about how the shop is used. Legal basis: our legitimate interest in a working, secure shop, and your consent for anything that is not strictly necessary.

Fraud checks

Our platform and our payment providers screen orders for signs of fraud, using data such as the IP address, the billing and delivery address and the payment result. This protects you as much as it protects us. Legal basis: our legitimate interest in preventing fraud and chargebacks, and our legal obligation to run a sound administration.

Cookies

Our shop uses cookies that are necessary for it to function: keeping your cart, keeping you logged in, remembering your language and country, and protecting the checkout. These are set without asking, because the site cannot work without them.

For anything beyond that, including analytics and any future advertising cookies, we ask for your permission first through the cookie banner. You can change or withdraw that permission at any time. Refusing does not limit what you can buy or how the shop works for you.

We do not currently run Google Analytics, advertising pixels or third-party tracking scripts on this shop. If that changes, we will update this policy and ask for consent before any such cookie is set.

Who else processes your data

We keep the list of parties short and we do not sell personal data to anyone. The companies below process data on our instructions, under a processing agreement, and only for the purpose named:

  • Shopify. Shopify hosts the shop, the checkout and the customer database. Effectively all order and account data passes through Shopify's systems.
  • Payment providers. The provider behind the payment method you choose at checkout handles the transaction itself and the fraud checks around it. Payment providers are independent controllers for parts of that processing and have their own privacy policies.
  • Parcel carriers. The carrier that delivers your order receives your name, address, and email or phone number where you asked for delivery notifications.
  • Our email and support tools. Used to send order confirmations, shipping notifications and newsletters, and to handle support conversations.
  • Our accountant and tax advisers. They see invoice data, because Dutch law requires our books to be auditable.

Beyond this we only pass on data when a law or a court order requires it, or when it is necessary to establish or defend a legal claim.

Data outside the European Economic Area

Some of our suppliers, including Shopify, are established outside the EEA or use infrastructure outside it. When personal data leaves the EEA, the transfer is covered either by a European Commission adequacy decision for the country concerned, or by the European Commission's standard contractual clauses together with additional safeguards. You can ask us which mechanism applies to a particular supplier.

How long we keep it

  • Orders, invoices and payment records: seven years after the end of the financial year, because Dutch tax law requires it.
  • Account data: until you delete your account, or after a long period of inactivity.
  • Support email and contact form messages: two years after the conversation ends, so we can follow up on a warranty or return question.
  • Newsletter subscription: until you unsubscribe. We keep a minimal record of the unsubscribe itself so we do not accidentally add you back.
  • Website statistics: in aggregated form, without anything that identifies you individually.

How we protect it

The shop runs over an encrypted connection. Access to the admin side is limited to the people who need it and is protected by strong authentication. Payment data is handled by certified payment providers and does not sit on our systems.

Your rights

Under the GDPR you can:

  • Ask for a copy of the personal data we hold about you.
  • Have inaccurate data corrected.
  • Ask us to erase your data, where we have no legal ground or legal duty to keep it.
  • Ask us to restrict processing while a dispute about your data is being sorted out.
  • Receive the data you gave us in a common machine-readable format, or have it sent to another party.
  • Object to processing based on our legitimate interest, including any profiling for marketing.
  • Withdraw consent at any time, for the newsletter or for cookies. Withdrawing does not affect anything we did lawfully before.

To use any of these rights, email info@paarline.com from the address linked to your order or account, or write to the postal address above. We may ask a question to confirm you are who you say you are, and we will not ask for more identification than the request needs. You get an answer within one month. If a request is complicated we may extend that by two months, and we will tell you inside the first month if that happens. Handling a request is free.

Complaints

If you think we are mishandling your data, tell us first and we will try to sort it out. You also have the right to complain to the Dutch data protection authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Netherlands
www.autoriteitpersoonsgegevens.nl

If you live in another EU country, you can also complain to the supervisory authority there.

Children

The shop is meant for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, email us and we will delete it.

Changes to this policy

When our processing changes, we update this page and change the date at the top. Material changes to the way we handle your data are announced by email to customers with an account.