Privacy policy

Last updated: 14 November 2026

1. Introduction

Your privacy matters to us. This Privacy Policy explains how Baddest, trading as Balantique (“we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit balantique.com (the “Website”), place an order, create an account, subscribe to our newsletter, or contact us.

We handle personal data in accordance with:

  • the UK General Data Protection Regulation (UK GDPR);
  • the Data Protection Act 2018;
  • the Privacy and Electronic Communications Regulations 2003 (PECR); and
  • where our activities in the Netherlands are in scope, the EU General Data Protection Regulation (EU GDPR).

Please read this policy carefully. If you do not agree with it, please do not use the Website. This policy should be read together with our Cookie Policy, Terms of Service and Shipping Policy.

2. Who We Are (Data Controller)

The “controller” of your personal data is:

Baddest (trading as Balantique)
Leiwater 86, 2715 BD Zoetermeer, Netherlands
Business Registration Number (KVK): 56991762
Email: info@balantique.com
Phone: +31 6 11282267

This is our registered business address, not a visitor or return address. For any privacy question, or to use your data protection rights, contact us using the details above with the subject line “Data Protection”.

3. The Personal Data We Collect

“Personal data” means any information that identifies you or can be linked to you. We may collect the following:

3.1 Information you give us

  • Identity and contact details: name, email address, telephone number, billing address and delivery address.
  • Order details: products purchased, order value, delivery method, order notes, returns, refunds and complaints.
  • Account details: email, password (stored in encrypted form) and saved addresses, if you create an account.
  • Communications: emails, phone calls, messages and any photographs or attachments you send us when you contact customer service.
  • Marketing preferences: whether you have subscribed to our newsletter and your communication choices.
  • Reviews and feedback: any reviews, ratings or survey answers you submit.

3.2 Payment information

Payments are processed securely by our checkout provider (Shopify) and payment providers such as Apple Pay, Google Pay, Shop Pay and the card networks. We do not receive or store your full card number or security code. We receive limited information, such as the payment status, the last four digits of the card and the card type, so we can manage your order and any refund.

3.3 Information collected automatically

When you use the Website, we and our providers may automatically collect:

  • IP address and approximate location (such as city or region);
  • device type, browser type and version, operating system and screen settings;
  • pages viewed, time spent, links clicked, search terms and referring website;
  • cookie identifiers and similar technologies (see our Cookie Policy);
  • basic information about your interaction with emails we send, for example whether you opened them.

3.4 Information from third parties

We may receive information about you from:

  • payment providers and fraud-prevention tools (for example confirmation of payment, risk signals);
  • delivery carriers and tracking providers (delivery status, proof of delivery);
  • analytics and advertising platforms (if you consent to relevant cookies);
  • social media, if you interact with our pages or contact us through them.

3.5 Special category data

We do not intentionally collect “special category” data (for example health, religion or ethnicity) or criminal-offence data. Please do not send us such information. If you do, we will only use it to deal with your enquiry.

4. How and Why We Use Your Personal Data

We only use personal data when the law allows us to. The table below sets out what we use it for and the legal basis we rely on.

Purpose Examples Legal basis
Processing and delivering orders Taking payment, packing, shipping, sending confirmation and dispatch emails Performance of a contract
Order tracking Providing tracking links and delivery updates Performance of a contract
Returns, refunds and warranty Handling cancellations, faulty goods, refunds and replacements Performance of a contract; legal obligation
Customer service Responding to enquiries, complaints and feedback Performance of a contract; legitimate interests
Account management Creating and maintaining your account Performance of a contract
Fraud prevention and security Detecting suspicious orders, protecting the Website Legitimate interests; legal obligation
Legal, tax and accounting Keeping invoices, VAT records, responding to authorities Legal obligation
Marketing Sending newsletters, offers and product news Consent; or legitimate interests (PECR “soft opt-in” for existing customers)
Analytics and improvement Understanding how the Website is used and improving it Consent (non-essential cookies); legitimate interests
Advertising Showing relevant ads on other platforms Consent
Legal claims Establishing, exercising or defending legal claims Legitimate interests; legal obligation
Business changes Sale or restructuring of our business Legitimate interests

Where we rely on legitimate interests, we have considered the impact on you and concluded that our interests do not override your rights. You can ask for details of our assessment and you can object at any time (see section 12).

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

5. Marketing Communications

  • We will send you marketing emails only if you have subscribed or opted in, or if you have bought from us and we are marketing similar products (soft opt-in), and you were given a chance to opt out.
  • You can unsubscribe at any time by using the link at the bottom of any marketing email, or by emailing info@balantique.com.
  • Even if you unsubscribe, we will still send service messages about your orders, such as order confirmations, dispatch updates, returns and refunds.
  • We do not sell your data to third parties for their own marketing.

6. Who We Share Your Personal Data With

We share personal data only where it is necessary and with appropriate safeguards. Recipients include:

Recipient Why we share it
Shopify (and its affiliates) Store platform, hosting, checkout, customer accounts, Shop Pay and related services
Payment providers (Apple Pay, Google Pay, card networks, banks) Taking payments, fraud checks and processing refunds
Delivery carriers and fulfilment partners Delivering your order and providing tracking
Order-tracking services Providing tracking links and delivery notifications
Email and marketing providers Sending order messages and, if you opt in, newsletters
Analytics and advertising providers (for example Google, Meta) Measuring and improving the Website and, with consent, advertising
IT, security and support providers Hosting, maintenance and protection of our systems
Professional advisers (accountants, lawyers, insurers) Professional advice and compliance
Authorities (HMRC, Dutch tax authorities, regulators, police, courts) Where we are legally required or to protect rights and safety
Prospective buyers or successors If our business is sold or reorganised, who must protect your data under this policy

These recipients may act as our processors (using data only on our instructions) or as independent controllers with their own privacy policies. We do not sell your personal data.

7. International Transfers

We are based in the Netherlands, and the UK recognises the European Economic Area as providing adequate protection. Some of our providers (for example Shopify, Google or Meta) may process data in other countries, including the United States and other countries outside the UK or EEA.

Where personal data is transferred outside the UK, we make sure a lawful safeguard applies, such as:

  • UK adequacy regulations (including the UK–US data bridge for certified US organisations);
  • the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
  • another mechanism permitted by UK data protection law.

You can contact us for more information about the safeguards we use.

8. How Long We Keep Your Personal Data

We keep personal data only as long as necessary for the purposes described, including to meet legal, tax and accounting requirements.

Type of data Typical retention period
Order, invoice and VAT records Up to 7 years after the end of the financial year
Customer service emails and complaint records Up to 3 years after the matter is closed (up to 6 years where needed for legal claims)
Returns and refund records Up to 7 years (tax and accounting)
Account information Until you ask us to close your account, or after a long period of inactivity
Marketing subscriber data Until you unsubscribe or withdraw consent; we keep a minimal suppression record so we do not email you again
Website analytics data Generally up to 26 months, or as stated in the Cookie Policy
Cookie data As shown in the Cookie Policy

When data is no longer needed, we delete it or anonymise it securely.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These include:

  • encrypted connections (HTTPS/SSL) on the Website and checkout;
  • use of PCI DSS-compliant payment providers;
  • access controls so only authorised people can see personal data;
  • the use of reputable, security-certified service providers;
  • regular review of our practices.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. Please protect your account by using a strong, unique password and not sharing it.

If a personal data breach is likely to put your rights and freedoms at risk, we will notify you and the Information Commissioner’s Office (ICO) as required by law, within the legal time limits.

10. Automated Decision-Making and Profiling

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Our payment providers use automated fraud screening on transactions. If an order is declined or flagged, you can contact us and we will arrange for a person to review it.

If you consent to marketing or advertising cookies, we or our partners may use limited profiling to show you relevant advertising or measure its effectiveness. You can withdraw your consent at any time through your cookie settings.

11. Cookies and Similar Technologies

We use cookies and similar technologies for essential Website functions (such as your basket and checkout) and, with your consent, for preferences, analytics and advertising. Our Cookie Policy explains the cookies we use, why, and how to manage your choices. You can change your cookie settings at any time using the cookie settings option on the Website or through your browser.

12. Your Data Protection Rights

Under UK data protection law you have the following rights:

  1. Right to be informed – to know how we use your data (this policy).
  2. Right of access – to ask for a copy of the personal data we hold about you (a “subject access request”).
  3. Right to rectification – to have inaccurate or incomplete data corrected.
  4. Right to erasure – to ask us to delete your data in certain circumstances (for example when it is no longer needed). This is not absolute, as we must keep some records for legal reasons.
  5. Right to restrict processing – to ask us to pause using your data in certain circumstances.
  6. Right to data portability – to receive data you gave us in a structured, commonly used, machine-readable format, or to have it transferred to another organisation where technically feasible.
  7. Right to object – to processing based on legitimate interests, and at any time to direct marketing.
  8. Right to withdraw consent – where we rely on your consent.
  9. Rights relating to automated decisions – as described in section 10.

How to use your rights

Email info@balantique.com with the subject “Data Protection Request” and tell us which right you want to use. To protect your data, we may ask for proof of identity before acting on a request. You may also use an authorised representative; we will ask for proof of their authority.

Our response

We will respond within one month. We may extend this by up to two further months if your request is complex or you have made several requests, and we will tell you if so. We do not normally charge a fee, but we may charge a reasonable fee or refuse a request that is clearly unfounded or excessive, and we will explain why.

13. Children’s Privacy

Our Website is intended for adults. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has given us personal data, please contact us and we will delete it promptly.

14. Third-Party Websites and Services

The Website may contain links to third-party websites and services, such as our Instagram page, payment pages or order-tracking pages. We do not control these and are not responsible for their privacy practices or content. We encourage you to read their privacy policies before sharing your data.

15. Your Responsibilities

Please make sure the personal data you give us is accurate and up to date, and tell us if it changes. Do not give us another person’s personal data unless you have the right to do so.

16. Complaints

If you have a concern about how we handle your data, please contact us first at info@balantique.com so we can try to put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

If you are located in the EU or EEA, you may also complain to your local data protection authority or to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

17. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices, technology or the law. The latest version is always available on the Website, showing the “Last updated” date at the top. If we make significant changes, we will take reasonable steps to tell you, for example by notice on the Website or by email.

18. Contact Us

For any question about this Privacy Policy or how we use your personal data, contact us at info@balantique.com or +31 6 11282267 during customer service hours. We aim to respond within 2 business days.

Company Information:

Store Name: Balantique
Registered Business Name: Baddest

Business Registration Number (KVK): 56991762

Business Address: Leiwater 86, 2715 BD Zoetermeer, Netherlands
(This is our registered business address and our returns address. It is not a visitor address.)
Returns address: Balantique Returns, Leiwater 86, 2715 BD Zoetermeer, Netherlands

Email: info@balantique.com
Phone: +31 6 11282267

Customer Service: (UK Time)
Monday - Friday: 9:00 AM – 6:00 PM

We aim to respond to all enquiries within 2 business days.