Last updated: 22 October 2026
We handle your personal data with care and comply with the General Data Protection Regulation (GDPR). Below you can read which data we process, why, for how long and what your rights are.
1. Who is responsible?
Rumors Vintage & Design B.V., Haarlemmerstraat 99 A, 1013 EM Amsterdam, the Netherlands, Chamber of Commerce (KvK) 77714857. Privacy questions: [email protected] or +31 20 427 93 93.
2. Which data, for what purpose and on what basis?
| What we do | Data | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Processing, shipping and invoicing your order | name, address, email address, phone number, items ordered, amount | performance of the contract | 7 years (statutory tax retention) |
| Handling payment | payment status, payment method chosen (we do not see your card or bank details; Mollie processes those) | performance of the contract | 7 years (statutory tax retention) |
| Customer account | name, email address, password (encrypted), addresses, order history, wishlist | performance of the contract | until you delete your account or ask us to |
| Customer service, returns and complaints | your messages, order details, any photos | performance of the contract and legitimate interest | 2 years after resolution |
| Newsletter | email address | consent (you can unsubscribe at any time via the link in every email) | until you unsubscribe |
| Website statistics (Google Analytics via Google Tag Manager) | click and browsing behaviour, device and browser data, shortened IP address | consent via the cookie banner | up to 14 months |
We do not sell your data to third parties and do not make decisions based solely on automated processing.
3. Who do we share data with?
Only with parties needed to run your order and our online shop. We have agreements with them on security and confidentiality.
Some parties (such as Google) may process data outside the European Economic Area. This only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
4. Cookies
You can change your choice at any time via "Manage cookies" at the bottom of the website, and delete cookies in your browser settings.
5. Security
The website uses a secure connection (https). Access to personal data is limited to staff who need it for their work.
6. Your rights
You have the right to access, correct or delete your data, to restrict processing, to object and to data portability. You can withdraw consent at any time. Send your request to [email protected]; we will respond within one month. To prevent misuse, we may ask you to verify your identity.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the supervisory authority in your own country.
7. Changes
We may update this privacy policy. The most recent version is always on this page.
Your cart is currently empty
