Privacy policy

Violent Design Culture (VDC)
Effective Date: 14 November 2025

This Privacy Policy explains in detail how Violent Design Culture (“VDC”, “we”, “us”, “our”) collects, processes, stores, shares, and protects your personal data when you use our website, purchase our products, or interact with our services.
VDC operates in full compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Dutch AVG, and all applicable European privacy laws.

By accessing our website or placing an order, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

 

1. Definitions

1.1 “Personal Data”
Any information relating to an identified or identifiable natural person, including but not limited to names, contact details, payment information, IP addresses, device identifiers, and order history.

1.2 “Processing”
Any operation performed on personal data, whether automated or not, including collection, storage, use, modification, transfer, and deletion.

1.3 “Controller”
VDC is the Data Controller responsible for determining the purposes and means of processing personal data.

1.4 “Third Party”
Any natural or legal person that processes personal data on behalf of VDC, such as payment processors, logistics partners, hosting platforms, analytics providers, or apps integrated with Shopify.

 

2. Scope & Applicability

2.1 Applicability of this Policy
This Privacy Policy applies to all visitors, customers, account holders, and users of the VDC website, whether they make purchases, browse the website, create accounts, interact with cookies, or engage with our marketing communications.

2.2 Relationship with Terms of Service
This Privacy Policy must be read together with our Terms of Service, which outlines the legal conditions of using our platform, including age restrictions and product limitations.

2.3 Geographic Scope
VDC primarily operates within The Netherlands, while also serving customers in the EU/EEA, United Kingdom, and internationally (including the USA and Canada). Different jurisdictions may impose additional privacy rights, which VDC honors to the extent required by local laws.

 

3. Categories of Personal Data We Collect

3.1 Data You Provide Directly
This includes information supplied when placing an order, creating an account, or contacting customer support:

  • Full name
  • Shipping and billing address
  • Email address
  • Phone number
  • Payment details (processed securely via third parties)
  • Order information
  • Account credentials (encrypted)
  • Customization requests
  • Self-defense product declarations (age confirmation)

Please note that while we serve customers globally, our Return & Refund Policy applies only to returns from within the European Union.

3.2 Automatically Collected Data
Through cookies, analytics tools, and website technologies:

  • IP address
  • Browser type and version
  • Device identifiers
  • Session behavior, clicks, viewed pages
  • Geographic location (approximate)
  • Referral sources
  • Advertising interactions

3.3 Data from Third-Party Integrations
Including:

  • Shopify Platform Data
  • Payment processors (Shopify Payments, Mollie, PayPal, Klarna, Google Pay, Apple Pay, Visa, Mastercard, Maestro, Bancontact, iDEAL, UnionPay, American Express)
  • Marketing platforms (Meta/Facebook, Instagram, TikTok, Google, Pinterest, Snapchat)
  • Analytics tools (Google Analytics, TikTok Pixel, Meta Pixel)
  • Order tracking tools (Track123)
  • Rewards system (Gameball)

3.4 Sensitive Data
We do not intentionally collect sensitive data unless legally required for verifying age for restricted items. If such data is voluntarily submitted, it will be processed strictly in accordance with GDPR rules. We currently do not request or store government-issued IDs.

 

4. Purposes of Processing

4.1 Order Processing & Fulfilment
To process and deliver orders, send confirmations, handle returns, and provide customer support.

4.2 Legal Compliance
To comply with Dutch tax regulations, consumer laws, product restrictions (e.g., 18+ items), fraud prevention, and accounting obligations.

4.3 Account Creation & Maintenance
To maintain personal accounts, order history, reward progression (Gameball), and user preferences.

4.4 Marketing & Advertising
To display personalized promotions, retarget ads, offer discounts, and measure campaign effectiveness via:

  • Meta/Facebook
  • Instagram
  • Google Ads
  • TikTok Ads
  • Pinterest Ads
  • Snapchat Ads

4.5 Security & Fraud Prevention
To detect suspicious activity, prevent unauthorized access, and secure transactions.

4.6 Website Optimization & Analytics
To analyze performance, design improvements, behavior flows, and customer experience.

 

5. Legal Basis for Processing (GDPR)

5.1 Performance of Contract (Art. 6(1)(b))
Processing required to fulfil your order, provide services, or manage your account.

5.2 Legal Obligation (Art. 6(1)(c))
To comply with Dutch tax law, bookkeeping requirements, product regulations, and legal age restrictions.

5.3 Legitimate Interests (Art. 6(1)(f))
For fraud prevention, website security, analytics, and improving customer experience.

5.4 Consent (Art. 6(1)(a))
For marketing cookies, email marketing opt-ins, and advertising pixels (Meta, TikTok, Google).

5.5 Protection of Vital Interests
In rare cases, where safety concerns justify processing.

 

6. Third Parties With Whom We Share Data

6.1 Shopify (Platform Provider)
Shopify hosts our store and processes order data, analytics, operational logs, and security information.

6.2 Payment Gateways
Including:

  • Shopify Payments
  • Mollie (iDEAL, Bancontact)
  • PayPal
  • Klarna
  • Google Pay
  • Apple Pay
  • Visa
  • Mastercard
  • Maestro
  • American Express
  • UnionPay

These parties process your payment information securely. VDC does not access full card details. If an order is canceled, we may deduct a €3.95 processing fee to cover payment processing costs. This is reflected in the transaction records we store.

6.3 Marketing & Analytics Providers
Meta, TikTok, Google Analytics, Pinterest, Snapchat, YouTube, etc.

6.4 Logistics & Delivery Partners
Couriers may require names, addresses, and tracking information.

6.5 Order Tracking Services
Track123 provides public tracking updates to customers.

6.6 Rewards System
Gameball processes account, points, and reward activity.

 

7. International Transfers

7.1 Transfers Outside the EU/EEA
Some partners (e.g., Shopify, Meta, TikTok, Google) process data in the USA or other countries.

7.2 Safeguards
Transfers rely on:

  • EU–US Data Privacy Framework (where applicable)
  • Standard Contractual Clauses (SCCs)
  • Additional contractual/technical measures

 

8. Cookies & Tracking Technologies

8.1 Types of Cookies Used

  • Essential (required for checkout and security)
  • Functional (preferences, account management)
  • Analytical (Google Analytics, Shopify Analytics)
  • Marketing (Meta Pixel, TikTok Pixel, Snapchat, Pinterest Tag)

8.2 Consent Mechanism
Users may accept or reject non-essential cookies through our Shopify cookie banner.

 

9. Data Retention

9.1 General Data
Retained until user requests deletion.

9.2 Legal Obligations
Tax documents, invoices, and accounting records must be stored for 7 years (Dutch law).

9.3 Marketing Data
Stored until consent is withdrawn.

 

10. Security Measures

We employ industry-standard safeguards including encryption, firewalls, access restrictions, secure payment channels, and Shopify’s PCI-DSS–compliant infrastructure.

 

11. Your Rights Under GDPR

You may exercise at any time:

11.1 Right of Access
Obtain a copy of your data.

11.2 Right to Rectification
Correct inaccurate information.

11.3 Right to Erasure (“Right to be Forgotten”)

11.4 Right to Restrict Processing

11.5 Right to Object
Including objection to marketing.

11.6 Right to Data Portability

11.7 Right to Withdraw Consent

11.8 Right to Lodge a Complaint
With the Dutch Authority (Autoriteit Persoonsgegevens).

 

12. Minors & Age Restrictions

12.1 General Use
Website access allowed from age 16.

12.2 Restricted Items (18+)
Knives, defense sprays, tactical tools, vests, and other items legally restricted may not be purchased by anyone under 18.

12.3 No ID Verification (Currently)
Users are responsible for providing truthful age information.
Suspicious underage orders may be canceled.

 

13. Liability

VDC is not responsible for misuse of products, illegal activities, or attempts to impersonate authorities.
See Terms of Service for full details.

 

14. Changes to This Policy

We may update this Privacy Policy at any time. Updates will be published on this page with a revised effective date.

 

15. Contact Information

For privacy requests, data access, or questions: info@violentdesignculture.com

 

16. Ownership Disclosure

Violent Design Culture (VDC) is a brand owned by Monaco Legacy, registered in the Netherlands.