Privacy Policy

Last updated: 22 August 2026

This Privacy Policy explains how Pichel E-com, trading under the brand Key & Hide, collects, uses, stores and shares personal information when you visit our website, purchase our products, contact us or otherwise interact with Key & Hide.

We take the protection of your personal information seriously and process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Dutch privacy legislation.

1. Who we are

For the purposes of applicable data protection legislation, the controller responsible for the personal information described in this Privacy Policy is:

Legal business name: Pichel Ecom
Trading name / brand: Key & Hide
Registered address: Pastoorsacker 82, 1865SB, Heemskerk
Chamber of Commerce (KvK) number: 86742825
VAT number: [VAT NUMBER]
Email: Info@keyandhide.com

In this Privacy Policy, "Key & Hide", "Pichel E-com", "we", "us" and "our" refer to Pichel E-com trading as Key & Hide.

2. Personal information we collect

Depending on how you interact with our website and services, we may collect the following categories of personal information.

Contact information

This may include:

• first and last name;

• billing address;

• shipping address;

• email address;

• telephone number; and

• other contact information you provide to us.

Order and transaction information

This may include:

• products purchased;

• order number;

• order date;

• order value;

• discounts used;

• payment status;

• shipping information;

• returns;

• refunds;

• warranty claims; and

• communication concerning an order.

Payment information

When you make a purchase, payment information is processed by the payment provider used for your transaction.

Depending on the payment method selected, this may include:

• payment method;

• transaction identifier;

• payment status;

• billing information; and

• certain payment-related information.

We generally do not receive or store complete credit or debit card details ourselves. Such information is normally processed directly by authorised payment providers.

Account information

If customer accounts are available on our website, we may process information relating to your account, such as:

• name;

• email address;

• saved addresses;

• order history;

• account preferences; and

• authentication information.

Device and technical information

When you use our website, certain technical information may automatically be collected, including:

• IP address;

• browser type;

• device type;

• operating system;

• language settings;

• approximate location derived from your IP address;

• cookie identifiers;

• session identifiers;

• referring website;

• pages viewed;

• date and time of visits; and

• interactions with our website.

Shopping and browsing behaviour

Where permitted by law and, where required, after obtaining your consent, we may collect information such as:

• products viewed;

• searches performed;

• products added to your shopping cart;

• abandoned shopping carts;

• purchases;

• interaction with advertisements;

• interaction with promotional campaigns; and

• navigation through our website.

Communications with us

If you contact us, we may process information contained in:

• emails;

• contact forms;

• customer service enquiries;

• complaints;

• return requests;

• warranty requests;

• social media messages; and

• other communications.

Personalisation information

If you order a personalised Key & Hide product, we may process information necessary to fulfil that request, such as:

• initials;

• names;

• personalised text;

• engraving or embossing instructions; and

• other customisation information supplied by you.

Please avoid providing sensitive personal information as part of a personalisation request.

3. How we collect personal information

We may collect personal information:

Directly from you

For example when you:

• place an order;

• create an account;

• contact customer service;

• request a return;

• sign up for marketing;

• enter information at checkout;

• personalise a product; or

• otherwise provide information to us.

Automatically

Certain information may be collected automatically when you visit our website through technologies such as:

• cookies;

• pixels;

• tags;

• local storage;

• server logs; and

• similar technologies.

From service providers and partners

We may receive information from parties that assist us in operating our business, including:

• Shopify;

• payment providers;

• shipping carriers;

• advertising platforms;

• analytics providers;

• fraud-prevention providers; and

• other service providers.

4. Why we process your personal information

We only process personal information when we have a lawful basis to do so.

Processing and fulfilling orders

We process personal information to:

• accept and process your order;

• receive payment;

• deliver products;

• provide order confirmations;

• provide shipping updates;

• process returns and refunds;

• handle warranty claims; and

• provide customer service relating to your purchase.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

Customer service

We may use your information to:

• answer questions;

• respond to complaints;

• resolve problems;

• investigate delivery issues;

• process returns; and

• otherwise communicate with you.

Legal basis: performance of our contract with you and/or our legitimate interest in operating an effective customer service function.

Legal and administrative obligations

We process certain information to comply with obligations relating to matters such as:

• accounting;

• taxation;

• invoicing;

• consumer protection;

• product safety;

• fraud prevention; and

• requests from competent authorities.

Legal basis: compliance with a legal obligation.

Fraud prevention and security

We may process personal information to:

• detect suspicious transactions;

• prevent payment fraud;

• protect our website;

• protect our customers;

• prevent abuse of our services; and

• investigate security incidents.

Legal basis: our legitimate interests in protecting our business, customers and services and, where applicable, compliance with legal obligations.

Improving our website and services

We may analyse how our website and services are used in order to:

• identify technical problems;

• improve website functionality;

• understand customer behaviour;

• improve our products;

• optimise the shopping experience; and

• measure general website performance.

Where this involves non-essential cookies, tracking technologies or identifiable user behaviour, we will obtain consent where required by law.

Legal basis: legitimate interests and/or consent, depending on the processing activity.

Marketing communications

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may use your contact details to send information about:

• Key & Hide products;

• new collections;

• promotions;

• special offers;

• product launches; and

• other Key & Hide news.

We may also send marketing communications to existing customers where permitted by applicable law.

You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us.

Legal basis: consent and/or our legitimate interests where direct marketing is otherwise permitted by applicable law.

Advertising

With your consent where required, we may use advertising and tracking technologies to:

• measure advertising performance;

• understand whether an advertisement resulted in a purchase;

• create advertising audiences;

• retarget website visitors;

• prevent repeated or irrelevant advertisements; and

• display more relevant advertisements.

This may involve sharing certain identifiers and website activity with advertising platforms such as Meta.

Legal basis: consent where required by applicable law.

5. Shopify

Our online store is hosted and powered by Shopify.

Shopify provides the e-commerce infrastructure that allows us to operate our website, process orders and provide our services.

As a result, Shopify may process information including:

• contact details;

• account information;

• device and browser information;

• website activity;

• order information;

• shipping information;

• transaction information; and

• payment-related information.

Depending on the specific Shopify service, Shopify may process personal information on our behalf and/or for purposes determined by Shopify itself.

Shopify's own processing of personal information is governed by its applicable privacy policies and contractual arrangements.

More information about Shopify's privacy practices can be found at:

https://www.shopify.com/legal/privacy

6. Payment service providers

Payments are processed through the payment methods made available at checkout.

Depending on the payment option selected, personal information may be shared with the relevant payment provider in order to:

• process the payment;

• authenticate the transaction;

• prevent fraud;

• process refunds; and

• comply with financial regulations.

Payment providers process certain information in accordance with their own privacy policies.

The payment methods actually available to you will be displayed during checkout.

7. Shipping and fulfilment

In order to deliver your purchase, we may share necessary personal information with:

• postal services;

• parcel delivery companies;

• fulfilment providers;

• warehouse providers; and

• logistics partners.

This information may include:

• your name;

• shipping address;

• email address;

• telephone number;

• order or parcel reference; and

• information required to deliver the shipment.

Where we use PostNL or another shipping carrier, that carrier may process your personal information in accordance with its own privacy policy.

We only provide shipping partners with information reasonably necessary to perform the delivery.

8. Meta, Facebook and Instagram

Key & Hide may use services provided by Meta Platforms, including Facebook and Instagram.

Where enabled, and subject to your cookie and tracking preferences, our website may use technologies such as the Meta Pixel and related Meta Business Tools.

These technologies may collect or receive information such as:

• IP address;

• browser information;

• device information;

• cookie or advertising identifiers;

• pages visited;

• products viewed;

• products added to cart;

• purchases;

• transaction value; and

• interactions with advertisements.

Where Meta Advanced Matching or similar functionality is enabled, certain customer information may be converted into a hashed format before being transmitted to Meta.

We use this information for purposes including:

• advertising measurement;

• campaign attribution;

• advertising optimisation;

• audience creation; and

• personalised or retargeted advertising.

Non-essential Meta tracking technologies will only be used where we have a valid legal basis and, where required, after you have provided consent.

Meta may process information in accordance with its own privacy policies and terms.

You can change your cookie preferences through the cookie settings available on our website.

9. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information stored on or accessed from your device.

We may use different categories of cookies.

Strictly necessary cookies

These cookies are necessary for the website to function properly.

They may be used for functions such as:

• shopping cart functionality;

• checkout;

• security;

• fraud prevention;

• remembering privacy preferences; and

• website functionality.

Where permitted by law, these cookies do not require consent because they are necessary to provide the website or service requested by you.

Analytics cookies

Analytics cookies help us understand how visitors use our website.

Where consent is legally required, these cookies will not be activated until you have provided that consent.

Marketing and advertising cookies

Marketing cookies and similar technologies may be used to:

• track website activity;

• measure advertisements;

• create audiences;

• personalise advertising; and

• retarget website visitors.

Where required by law, these technologies are only activated after you have provided your consent.

You can accept, reject or change your preferences through our cookie banner or cookie preference centre.

Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Additional details about individual cookies and their duration may be provided in our separate Cookie Policy or cookie preference centre.

10. Who we share personal information with

We do not disclose personal information to third parties without a legitimate reason.

We may share personal information with categories of recipients including:

• Shopify;

• payment service providers;

• banks and financial institutions;

• shipping carriers;

• fulfilment partners;

• IT and hosting providers;

• customer support providers;

• accounting and bookkeeping providers;

• professional advisers;

• analytics providers;

• advertising platforms;

• fraud-prevention providers;

• government authorities; and

• law enforcement or regulatory authorities where legally required.

Third parties that process personal information on our behalf are required, where applicable, to process that information in accordance with appropriate contractual and legal safeguards.

Some recipients may act as independent data controllers for their own processing activities.

11. Sale or sharing of personal information

We do not sell personal information in exchange for monetary payment.

However, depending on your country or region, certain disclosures of personal information to advertising or technology providers for personalised or targeted advertising may legally be classified as a "sale", "sharing" or similar activity.

Where applicable law provides a right to opt out of such processing, we will provide the appropriate mechanism to exercise that right.

12. International data transfers

Some of our service providers may process personal information outside the Netherlands or outside the European Economic Area ("EEA").

For example, technology providers may operate infrastructure or businesses in countries including:

• the United States;

• Canada; and

• other countries outside the EEA.

Where personal information is transferred outside the EEA, we take steps to ensure that an appropriate legal mechanism is used where required.

Depending on the circumstances, this may include:

• an adequacy decision adopted by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• supplementary contractual, organisational or technical safeguards; or

• another lawful international transfer mechanism.

13. How long we retain personal information

We do not keep personal information for longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Retention periods depend on the type of information and the reason for processing.

Order and financial administration

Information that forms part of our financial and tax administration is generally retained for at least 7 years where required under Dutch tax legislation.

Where different statutory retention rules apply, including certain EU VAT schemes, a longer period may apply.

Customer service information

Customer service correspondence is retained only for as long as reasonably necessary to resolve the enquiry, protect our legal interests and comply with applicable obligations.

Account information

If you have a customer account, information may be retained for as long as your account remains active and thereafter for an appropriate period where necessary for legal, administrative or fraud-prevention purposes.

Marketing information

Information used for marketing is retained until:

• you unsubscribe;

• you withdraw your consent;

• your information is no longer necessary for the marketing purpose; or

• we determine that continued retention is no longer appropriate,

subject to information we may need to retain to record your opt-out preference.

Cookie and analytics information

Retention periods for cookies and similar technologies vary according to the individual technology.

Further information may be provided through our cookie preference centre or Cookie Policy.

When information is no longer required, we will delete or anonymise it where reasonably possible.

14. Security

We take appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;

• unlawful processing;

• alteration;

• disclosure;

• loss;

• destruction; and

• misuse.

Measures may include, where appropriate:

• access controls;

• authentication;

• secure connections;

• restricted access to customer information;

• software and platform security;

• monitoring; and

• contractual safeguards with service providers.

No method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security.

15. Your privacy rights

If the GDPR applies to you, you may have the following rights.

Right of access

You can ask whether we process personal information about you and request a copy of that information.

Right to rectification

You can ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you can ask us to delete your personal information.

This right is not absolute. For example, we may be required to retain certain information to comply with tax or other legal obligations.

Right to restriction of processing

In certain circumstances, you can request that we restrict the processing of your personal information.

Right to data portability

Where legally applicable, you may request certain personal information in a structured, commonly used and machine-readable format and may have the right to transmit it to another controller.

Right to object

You may object to certain processing based on our legitimate interests.

You may object to processing for direct marketing purposes at any time.

If you object to direct marketing, we will stop using your personal information for that purpose.

Right to withdraw consent

Where processing is based on your consent, you can withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights relating to automated decision-making

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Key & Hide does not currently intend to make decisions about customers solely through automated processing that produce such legal or similarly significant effects.

16. Exercising your rights

To exercise any of your privacy rights, contact us at:

[PRIVACY / CUSTOMER SERVICE EMAIL]

Please clearly describe your request.

We may ask you to provide information reasonably necessary to verify your identity before processing your request.

We will respond without undue delay and generally within one month, as required by applicable data protection law.

In certain complex cases, this period may legally be extended. If this occurs, we will inform you as required by law.

Exercising your privacy rights is generally free of charge.

We may refuse or charge a reasonable fee for requests only where permitted by law, for example where a request is manifestly unfounded or excessive.

17. Complaints

If you believe that we have processed your personal information unlawfully, please contact us first so that we can investigate and attempt to resolve the matter.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In the Netherlands, the supervisory authority is:

Autoriteit Persoonsgegevens
The Dutch Data Protection Authority
Website: https://www.autoriteitpersoonsgegevens.nl/

If you live in another EEA country, you may also be entitled to contact the data protection authority in your country of residence.

18. Marketing preferences

You can stop receiving promotional emails from us at any time by:

• clicking the unsubscribe link contained in the email; or

• contacting us at Info@keyandhide.com.

You may still receive non-marketing communications after unsubscribing, including:

• order confirmations;

• shipping notifications;

• return information;

• refund information;

• account security notifications; and

• legally required communications.

19. Social media

If you interact with Key & Hide through social media platforms such as Instagram or Facebook, both Key & Hide and the relevant social media provider may process information relating to that interaction.

The social media provider's own processing is governed by its privacy policy.

Please be aware that information you publicly post on social media may be visible to others.

20. Personalised products

If you provide us with initials, names or other information for the purpose of personalising a product, we use that information to manufacture and fulfil your personalised order.

Please only provide information that you are legally entitled to provide.

Do not submit:

• sensitive personal information;

• offensive or unlawful content;

• information infringing another person's rights; or

• information that is unnecessary for personalising the product.

21. Children's privacy

Our website and products are not specifically directed at children under the age of 16.

We do not knowingly seek to collect personal information directly from children under 16 on the basis of consent.

If you believe that a child has provided personal information to us without the necessary authorisation, please contact us so that we can assess and, where appropriate, remove the information.

22. Third-party websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party service before providing personal information.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example because of:

• changes to our services;

• new technologies or service providers;

• changes to our business operations; or

• changes in applicable law.

The latest version will always be published on our website.

Where appropriate, we may provide additional notice of material changes.

The date at the top of this Privacy Policy indicates when it was last updated.

24. Contact us

For questions about this Privacy Policy, the use of your personal information or the exercise of your privacy rights, please contact:

Key & Hide
A brand operated by Pichel Ecom

Address: Pastoorsacker 82
Email: Info@keyandhide.com
Chamber of Commerce (KvK): 86742825
VAT number: [VAT NUMBER]