Privacy policy

Privacy Policy — Hangry Crumbs

Last updated: October 2026

1. Introduction

Hangry Crumbs operates this online store and website, including the related content, features, products and services (collectively, the “Services”). Our online store is powered by Shopify, which enables us to offer and sell our homemade cookies and other baked goods.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, use our Services, place an order or otherwise communicate with us.

We process personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

Please read this Privacy Policy carefully. If you have questions about how we handle your personal information, you can contact us using the details provided at the end of this policy.

2. Who Is Responsible for Your Personal Information?

Hangry Crumbs is the controller of the personal information described in this Privacy Policy, where applicable under data protection law.

Business details

Trading name: Hangry Crumbs
Legal form: Sole proprietorship
Business address: Kievitweg 11, 9752 VM Haren, The Netherlands
Chamber of Commerce (KvK) number: 42178722
VAT identification number: NL005558796B17
Website: https://hangrycrumbs.com
Email: info@hangrycrumbs.com
Telephone: +31 6 26758663

3. Personal Information We Collect

The personal information we collect depends on how you interact with our website and Services. This may include the following categories.

Contact and address information

First and last name
Billing and delivery address
Email address
Telephone number, if provided

Order and transaction information

Products you view or purchase
Order number and order history
Order status and payment status
Information relating to cancellations, complaints or refund requests

Payment information

Payments are handled through the payment methods and payment service providers available at checkout. We may receive information such as the payment method, transaction amount and payment status. Full payment card details are generally processed by the relevant payment service provider where applicable.

Account information

If you create an account, we may process your account details, login information and saved preferences.

Communications

When you contact us, for example by email or through a contact form, we process the information you provide so that we can respond to your inquiry.

Technical information and website usage

When you visit our website, certain technical information may be collected, such as your IP address, browser type, device information, network information and interactions with our website. The information collected depends on the Shopify features, cookies and other technologies enabled on our store.

Please do not provide personal information that is unnecessary for your order or inquiry.

4. How We Collect Personal Information

We may collect personal information from the following sources:

Directly from you: when you place an order, create an account, subscribe to our newsletter, complete a form or contact us.
Automatically through our website: through technical information, cookies and similar technologies.
Through service providers: when Shopify, payment providers, delivery services or other service providers process information needed to operate our store and fulfil orders.
From other parties: where the collection is lawful and necessary for the purposes described in this policy.

5. How We Use Your Personal Information

We use personal information only where we have a valid legal basis for doing so.

Processing and delivering orders

We use your information to receive and fulfil orders, process payments, arrange delivery, provide order updates and resolve issues relating to your purchase.

Legal basis: performance of our contract with you. We may also process certain information to comply with legal obligations.

Operating and improving our website

We use relevant information to operate our online store, maintain your shopping cart, troubleshoot technical issues and improve the functionality and usability of our website.

Legal basis: performance of a contract, compliance with legal obligations or our legitimate interests in maintaining a functional and secure online store, depending on the processing involved. Where consent is required for cookies or similar technologies, we obtain it before using them.

Customer service and communication

We use your contact details and the information in your messages to answer questions, handle complaints and assist you with your order.

Legal basis: performance of a contract, compliance with legal obligations or our legitimate interests in providing customer service, depending on the circumstances.

Newsletters and marketing

If we offer newsletters or other marketing communications, we use your information to send them where we have a valid legal basis. We obtain consent where required by law. You can unsubscribe from marketing communications at any time using the unsubscribe link provided or by contacting us.

If we use personalised advertising or marketing cookies, we process information for these purposes only where permitted by applicable law. Where prior consent is required, we will request it before activating the relevant technologies.

Legal basis: consent where required, or another lawful basis where permitted.

Security and fraud prevention

We may use relevant information to identify suspicious transactions, investigate suspected fraud, prevent misuse and protect our store, customers and business.

Legal basis: our legitimate interests in protecting our online store and preventing fraud, or compliance with a legal obligation.

Legal and regulatory obligations

We may process and retain information to meet tax, accounting and other legal requirements. We may also use information where necessary to establish, exercise or defend legal claims.

Legal basis: compliance with a legal obligation or, where applicable, our legitimate interests.

6. How We Share Personal Information

We do not sell your personal information to third parties. We may share it where necessary to provide our Services, meet legal obligations or pursue another lawful purpose.

Recipients may include the following.

Shopify

Our online store is hosted by Shopify. Shopify processes information to provide the platform, store features and related services. Depending on the Shopify features used, Shopify may also process certain information for its own purposes.

Read more in the Shopify Consumer Privacy Policy.

Payment service providers

Your selected payment provider processes the information necessary to complete your payment and, where applicable, prevent fraud.

Delivery services

We share the information necessary to deliver your order with our delivery service, DHL. This may include your name, delivery address and relevant shipping or contact information.

Technical service providers

We may use service providers for website management, hosting, security, customer support, email communications and data analysis. They process personal information to the extent necessary to provide their services.

Marketing and analytics providers

If we enable these services, certain information may be shared with the relevant providers for analytics or marketing. Where consent is required, these services will only be activated after you have given consent.

Authorities and legal parties

We may disclose information when required by law or where necessary for legal proceedings, protecting our rights or preventing fraud and misuse.

Business transfers

If our business or part of it is transferred, for example through a sale or restructuring, personal information may be transferred where legally permitted.

Recipients may process information under their own privacy policies and, where applicable, under agreements governing their processing on our behalf.

7. Shopify and International Data Transfers

Shopify may process personal information in locations outside the Netherlands and potentially outside the European Economic Area (EEA). Other service providers may also process information internationally.

Where personal information is transferred outside the EEA to a country without an applicable adequacy decision, we will rely on an appropriate legal transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses.

For more information about Shopify’s privacy practices, visit:

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies. Some are necessary for the website to function, for example to maintain your shopping cart and enable checkout.

Other cookies may be used to analyse website usage or support marketing and personalised advertising.

Where the law requires prior consent for non-essential cookies or similar technologies, we will request your consent before activating them. You should be able to refuse or withdraw consent for these technologies. Refusing non-essential cookies should not unnecessarily prevent you from using our online store.

You can manage your cookie preferences through the cookie settings available on our website, if enabled. Further information about the cookies we use, their purposes and their retention periods should be provided in our Cookie Policy.

9. Third-Party Websites and Services

Our website may contain links to third-party websites or services, including payment providers and social media platforms.

When you visit an external website, that website’s own privacy policy applies. We are not responsible for the privacy practices or security of websites that we do not control.

Please review the relevant privacy policy before providing personal information to a third party.

10. Children’s Information

Our online store is not specifically directed at children. We do not knowingly collect children’s personal information where there is no valid legal basis to do so.

If you are a parent or legal guardian and believe that a child has provided us with personal information unlawfully, please contact us at info@hangrycrumbs.com. We will review the request and take appropriate action where necessary.

11. Security of Your Information

We take appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure or alteration.

No method of electronic storage or transmission is completely secure. Although we take reasonable steps to protect your information, we cannot guarantee absolute security.

Do not share your passwords or other confidential login details with others. Please contact us if you suspect that your information has been used without authorisation.

12. Retention of Personal Information

We retain personal information only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law or necessary to handle legal matters.

Retention periods depend on the type of information and the purpose for which it is used. In general:

Order and customer information: for as long as necessary to fulfil orders, provide customer service and resolve disputes.
Accounting and tax records: for the period required by applicable law. Many Dutch business records are subject to a seven-year retention period, although different rules may apply to particular records.
Account information: while your account remains active and afterwards for as long as necessary for a legitimate purpose or legal obligation.
Customer service communications: for as long as necessary to resolve your inquiry or complaint and any related follow-up.
Marketing information: until you unsubscribe or withdraw your consent, where consent is the legal basis, or until the applicable retention period expires.
Technical and cookie information: according to the retention periods of the relevant systems and cookies, as described in our Cookie Policy and the information provided by the relevant service providers.

When information is no longer necessary and there is no legal reason to retain it, we will delete or anonymise it appropriately.

13. Your Privacy Rights

Under the GDPR, you may have the following rights, depending on the circumstances:

Right of access

You can request access to the personal information we hold about you and obtain a copy of it.

Right to rectification

You can request that inaccurate or incomplete personal information be corrected.

Right to erasure

In certain circumstances, you can request that we delete your personal information. We may need to retain certain information to comply with legal obligations.

Right to restriction of processing

In certain circumstances, you can request that we restrict the use of your personal information.

Right to data portability

In certain circumstances, you can request to receive personal information you provided to us in a commonly used digital format or ask us to transfer it to another organisation.

Right to object

You can object to certain processing based on our legitimate interests. You can always object to the use of your personal information for direct marketing.

Right to withdraw consent

Where we process your information based on consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us at info@hangrycrumbs.com. We may need to verify your identity before handling your request. We will respond within the time limits required by law.

You will not be unlawfully discriminated against for exercising your privacy rights.

14. Newsletter and Marketing Preferences

If you receive marketing communications from us, you can unsubscribe using the link included in the communication, where available, or by emailing us.

We may still send non-marketing messages that are necessary for your order, payment, account or customer service.

15. Automated Decision-Making

We may use Shopify features or other service provider tools to automate certain processes, such as order processing or the identification of suspicious transactions.

Where applicable, we will comply with legal requirements concerning automated decision-making and profiling. Additional safeguards apply where a decision is based solely on automated processing and produces legal effects concerning you or similarly significantly affects you.

16. Complaints

If you have questions or complaints about how we process your personal information, please contact us first at info@hangrycrumbs.com so that we can review your concerns.

You also have the right to lodge a complaint with the Dutch data protection authority:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

Website: https://autoriteitpersoonsgegevens.nl/

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, website features, service providers or legal requirements.

The latest version will be published on our website. The date at the top of this policy indicates when it was last updated.

18. Contact

If you have questions about this Privacy Policy, want to exercise your privacy rights or need further information about how we process personal information, please contact us:

Hangry Crumbs

Kievitweg 11
9752 VM Haren
The Netherlands

Email: info@hangrycrumbs.com
Telephone: +31 6 26758663
Website: https://hangrycrumbs.com