Privacy policy
Last updated: 1 October 2026 (previous version: 1 January 2026)
Purple Race Labs B.V. (“Purple Race Labs”, “we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, and the rights you have.
Article 1. Who we are
Purple Race Labs B.V.
Handelskade Noord 1,
7547 AV Enschede
The Netherlands
Email: contact@purpleracelabs.nl
We act as the data controller for personal data collected through our website.
Article 2. What data we collect
We collect only the data necessary to provide our services.
a) Information you provide directly
• Name
• Address
• Email address
• Payment details (processed securely by third-party processors, not stored by us)
• Order history
• Support communications
b) Data collected automatically
• IP address
• Device type and browser information
• Website usage data (cookies; analytics)
c) Optional data
• Newsletter subscription preferences
• Feedback or reviews
Article 3. How we use your data
We use your data for:
• Processing and delivering orders
• Providing customer support
• Handling warranty or return requests
• Improving our website and products
• Preventing fraud and ensuring security
• Sending optional marketing emails (only with your consent)
• Legal and compliance obligations (tax, bookkeeping)
We do not sell personal data to third parties.
Article 4. Legal basis for Processing (EU GDPR)
We process your data under one or more of the following legal bases:
• Performance of a contract (e.g., shipping your order)
• Compliance with legal obligations
• Legitimate interests (e.g., fraud prevention, website analytics)
• Your consent (e.g., newsletter signup)
Article 5. Sharing your data
We may share your data with:
• Payment processors
• Shipping carriers
• IT and hosting providers
• Customer service tools
• Professional advisers (legal, tax, accounting)
• Authorities when legally required
All partners operate under strict data processing agreements.
We do not share your data outside the EU/EEA unless appropriate safeguards (e.g., SCCs) are in place.
Article 6. Cookies
We use cookies for: website functionality; shopping cart operation; analytics (e.g., visitor patterns) — for statistical purposes only, no automated profiling; optional marketing tools.
Strictly necessary cookies (e.g., shopping cart, session management) are placed automatically as they are essential for our website to function.
All other cookies — including analytics cookies and optional marketing tools — are only placed after you have given your prior, explicit consent via our cookie consent banner. You may withdraw your consent at any time via the cookie settings link in the website footer.
Article 7. Data retention
We retain data only as long as necessary:
• Order data: up to 7 years (Dutch tax retention requirement under Dutch Tax Decree 2021)
• Customer support data: up to 3 years (Dutch civil law limitation period)
• Marketing data: until you unsubscribe
• Analytics: 24 months
Article 8. Your rights
Under GDPR, you have the right to:
• Access your data
• Correct your data
• Delete your data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time
• File a complaint with your local data authority
To exercise these rights, please contact us at: privacy@purpleracelabs.nl
Article 9. Children’s privacy
Our products and website are not intended for children under 16. We do not knowingly collect children’s data.
Article 10. Data security
We use technical and organizational measures to protect your data, including:
• Encrypted website traffic (HTTPS)
• Secure payment processing via certified providers
• Access restrictions
• Regular monitoring and updates
Article 11. Changes to this policy
We may update this Privacy Policy in accordance with Article 15 of our General Terms and Conditions. For material changes — in particular changes that affect the purposes for which we process your personal data or the legal basis for processing — we will notify you in advance by email. Changes that introduce new processing purposes or alter the legal basis for processing require your separate, active consent under the GDPR; a contractual change notification does not substitute for that consent. The updated version will always indicate the “last updated” date and will be made available on our website