​1. Who We Are

This privacy policy applies to the services of Society of Rituals, registered in the Netherlands. We respect the privacy of all users of our site and ensure that the personal information you provide is treated confidentially and in accordance with the General Data Protection Regulation (GDPR) and the Dutch AVG (Algemene Verordening Gegevensbescherming).
 

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Name and contact details (email, phone, address)

• Payment and order information

• Information about your use of our website (cookies, IP address, device info)

• Any personal information you actively provide (e.g., in contact forms, emails)

We do not intentionally collect data from visitors under the age of 16 unless they have permission from a parent or guardian.
 

3. Why We Process Your Data (Legal Basis)

We only process your data when permitted by law. This includes processing under the following legal bases:

• Contract performance: e.g., to fulfill your order or provide digital content

• Legal obligation: e.g., to comply with Dutch tax or accounting laws

• Consent: e.g., for newsletter subscriptions (you may withdraw consent at any time)

• Legitimate interest: e.g., for site analytics, fraud prevention
   

4. How We Use Your Information

Your personal data may be used to:

• Fulfill your order or provide services

• Process payments securely

• Respond to customer service inquiries

• Improve and personalize your user experience

• Send transactional or service-related emails

• Comply with legal obligations (e.g., tax law)
   

5. Third-Party Processors

We only share your data with trusted service providers necessary for our operations (e.g., payment providers, hosting companies, email platforms). These third parties are data processors under the GDPR and are bound by confidentiality agreements and data protection safeguards.

We do not sell or rent your personal data to third parties.
 

6. Data Transfers Outside the EEA

We aim to store and process your data within the European Economic Area (EEA). If data is transferred outside the EEA (e.g., by a US-based email provider), we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or Data Processing Agreements.
 

7. Cookies and Tracking

We use cookies to improve site performance and analyze visitor behavior. You will be prompted to accept or decline non-essential cookies in compliance with Dutch cookie regulations (Telecommunicatiewet).

You can also manage cookies via your browser settings.
 

8. Retention Periods

We retain personal data:

• For as long as necessary to fulfill the purposes for which it was collected

• For the legally required period (e.g., 7 years for tax records in the Netherlands)

• Until you request deletion (where applicable under GDPR)
   

9. Your Rights Under Dutch and EU Law

Under the AVG/GDPR, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion (“right to be forgotten”)

• Withdraw consent at any time (e.g., unsubscribe from newsletters)

• Object to processing based on legitimate interests

• Data portability (transfer your data to another provider)

• File a complaint with the Dutch supervisory authority:
  Autoriteit Persoonsgegevens – www.autoriteitpersoonsgegevens.nl

You can exercise your rights by contacting us at support@societyofrituals.com.
 

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including secure connections (SSL), access controls, and encrypted payment systems.
 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law or service offerings. You should review this page periodically. Continued use of the website after updates constitutes acceptance.
 

12. Contact

For questions, data requests, or concerns:
📧 support@societyofrituals.com
📍 James Cookstraat 19-3

1056 RW, Amsterdam

The Netherlands