Privacybeleid

WorldLegs Privacy Policy at WorldLegs, we take care of our customers’ privacy with complete transparency. We collect only the essential information to provide a smooth and secure experience, always in compliance with the GDPR (EU General Data Protection Regulation).

1. Who is responsible for the Site (Data Controller)
   WorldLegs acts as the data controller responsible for processing personal data on the WorldLegs NL | Streetwear & Fitness Apparel website.
   Responsible:
   WorldLegs – contact@worldlegs.eu
   Partner of Development: Karmawebworks

2. What data is collected
   We collect only essential and minimal data:
   Identification and contact data: Name, email, phone, delivery address.
   Order data: Product details, quantity, purchase history.
   Technical data: IP address, device type, browser (via cookies).
   Interaction data: Pages visited, clicks (for analytics).
   Consent data: Preferences for marketing/newsletter.
   We do not collect: Sensitive data (health, ethnic origin, etc.) or unnecessary information.

3. What these data are used for (Purposes)
   Each piece of data has a specific and legitimate purpose.
   Order processing: Shipping, tracking and customer support.
   Communication: Order updates, customer support.
   Website improvement: Navigation analysis (essential cookies).
   Marketing: Newsletters and promotions only with explicit consent.
   Security: Fraud prevention.

4. How long the data are kept (Retention Period)
   Order data: 10 years (tax/legal obligations).
   Contact/support data: 5 years after last interaction.
   Essential cookies: Until session ends.
   Marketing/analytics cookies: 11 months (or until revoked).
   Automatic deletion at the end of the period or upon request.

5. With whom they may be shared (Recipients)
   We share only with trusted and necessary partners, under data protection contractual clauses:
   Payment platforms (e.g., Mollie, PayPal).
   Carriers (e.g., DHL, PostNL).
   Service providers (e.g., Google Analytics, Security Plugins).
   We never sell data for commercial purposes.
   Transfers outside the EU follow Standard Contractual Clauses or Privacy Shield.

6. Your rights under the GDPR
   You have full control over your data (Articles 15-22 GDPR):
   Access: Find out what data we hold.
   Rectification: Correct inaccurate information.
   Erasure (right to be forgotten): Delete unnecessary data.
   Objection: Refuse marketing or processing.
   Portability: Receive your data in digital format.
   Restriction: Limit use temporarily.
   Withdrawal of consent: At any time, free of charge.

7. How to exercise your rights
   Send a request to contact@worldlegs.eu.
   We will respond within 30 days (extendable for complex cases). No cost, except for abusive requests.

Specific Information on Tools and Technologies used
Cookies: We use essential cookies (site functionality), performance cookies (Google Analytics – anonymized), and marketing cookies (remarketing). Consent banner on first visit. Manage in “Cookie Settings”.
Contact Form: Collects name, email and message for contact. Stored for 1 year.
Google Analytics: Tracks anonymized visits (IP masked). Opt-out via browser or Google Analytics Opt-out tools.
Social Networks: Sharing buttons (e.g., Instagram, Facebook, Tiktok) – data sent to platforms if you interact.
Security Plugins: E.g., Cloudflare – IP logs for DDoS protection (retained 24h).
Newsletter: Via Mailchimp – only with consent. Unsubscribe option in every email.
Marketing Tools: Facebook/Instagram pixels for personalized ads (consent required).

Policy updated on [xx/xx/xxxx]. Legal changes will be notified by email or banner.
Thank you for your trust! Your privacy is at the heart of WorldLegs.