Privacy Policy

1. General information

This Privacy Policy describes the principles of processing personal data by the Xpand Gaming store, in accordance with the GDPR (EU) and the Dutch AVG Act.

The data controller is:

Xpand Gaming
Address: Pieter Biggestraat 35A 3257AR Ooltgensplaat
KVK: 98926802
BTW: NL005361884B35
Email: info@xpandgaming.com
Phone: +31682328477

2. What data do we process?

Depending on how you use the store, we may process:

Data provided during purchase:

  • name and surname
  • delivery address
  • email address
  • phone number
  • invoice details (company, KVK, BTW)

Technical and statistical data:

  • IP address
  • device and browser type
  • cookies
  • website activity (products displayed, clicks, session time)

Details required for payment:

They are transferred directly to payment operators (e.g. Klarna, in3, Mollie, PayPal).
The store does not have access to payment card numbers or bank details.

3. For what purposes do we process data?

A. Order fulfillment

  • shopping service
  • payment confirmation
  • delivery of goods
  • contact regarding order fulfillment

B. Maintaining a customer account

  • purchase history
  • login data management

C. Complaint and warranty handling

  • verification of applications
  • customer contact

D. Marketing (with consent)

  • newsletter
  • information about promotions
  • personalized ads (Google, Facebook)

E. Statistics and Security

  • website traffic analysis
  • detection of abuse and fraud
  • improving store performance

4. Legal basis for processing

In accordance with the GDPR, we process data on the basis of:

  • Article 6, paragraph 1(b) – performance of the contract (purchase, delivery, complaints)
  • Article 6, paragraph 1(c) – legal obligations (invoices, accounting)
  • Article 6 paragraph 1(f) – legitimate interest (statistics, security, fraud prevention)
  • Article 6, paragraph 1(a) – voluntary consent (newsletter, marketing cookies)

5. Who do we transfer data to?

Your data may be transferred:

Payment operators:

  • Klarna
  • in3
  • Mollie
  • PayPal (optional)
  • iDEAL / Bancontact

Courier companies:

  • PostNL
  • DHL
  • DPD
  • UPS
    (only if the order concerns mail-order products)

Technical service providers:

  • Shopify (store hosting)
  • Google (statistics, analytics)
  • Meta (ads, Facebook pixel)

Data is not sold to third parties.

6. Cookies

The store uses cookies to:

  • page and cart activities
  • login support
  • analytics (Google Analytics)
  • personalized advertising (Meta, Google)

The customer can manage cookies through browser settings.

7. Data storage period

  • Order data – 7 years (NL tax requirement)
  • customer account details – until the account is deleted
  • marketing data – until consent is withdrawn
  • complaint data – up to 3 years after the end of the procedure

8. Customer rights (GDPR/AVG)

Every customer has the right to:

  • access to your data
  • data rectification
  • deletion of data (“right to be forgotten”)
  • processing restrictions
  • data transfer
  • filing an objection

To exercise your rights, please contact us by email:
📩 info@xpandgaming.com

9. Newsletter and marketing

If a customer subscribes to the newsletter:

  • receives marketing messages
  • can unsubscribe at any time
  • consent is voluntary and is not required to place an order

10. Data security

The store uses technical and organizational measures to ensure data protection, including:

  • connection encryption (SSL/HTTPS)
  • Shopify security
  • restricting access to data
  • fraud prevention procedures

11. Data of minors

The store does not knowingly collect data from persons under 16 years of age.

12. Changes to the privacy policy

The Store reserves the right to update the Privacy Policy.
The updated version will always be visible on the website.

13. Contact

In matters relating to personal data, please contact:

📩 info@xpandgaming.com
📞 +31682328477