Privacy Policy
Privacy Policy
W.F. Retail B.V. (R2) — EN — Last updated: May 2026
We know that you put your trust in us. We therefore see it as our responsibility to protect your privacy. On this page, we explain what personal data we collect when you use our website, why we collect it, how we use it, how long we keep it, and what rights you have.
This privacy policy applies to all products and services of W.F. Retail B.V., operating under the name R2 / R2 Amsterdam. R2 is not responsible for the privacy practices of other websites or services. By using this website, you accept this privacy policy. For our General Terms and Conditions, please refer to r2.amsterdam/pages/general-terms-and-conditions.
1. Who We Are
W.F. Retail B.V., trading as R2 / R2 Amsterdam
Jacob de Graeflaan 2, 1181 DN Amstelveen, The Netherlands
webshop@r2.amsterdam — +31 (0)20 26 23 864
Chamber of Commerce: 63132168 — VAT: NL855106116B01
W.F. Retail B.V. is the Data Controller for all personal data processed in connection with r2.amsterdam.
2. What Data We Collect and Why
2.1 Order Processing
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
To process your order, arrange delivery, handle payments, and manage returns and exchanges, we collect:
- Name and address
- Email address
- Phone number
- Payment information
- Order and transaction history
2.2 Customer Account
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
If you create an account on r2.amsterdam, we store your name, email address, address details, and order history in order to provide account functionality.
2.3 Loyalty Program
Legal bases: performance of a contract (Art. 6(1)(b) GDPR) for core program administration; consent (Art. 6(1)(a) GDPR) for date of birth processing; legitimate interest (Art. 6(1)(f) GDPR) for fraud prevention.
If you participate in the R2 Loyalty Program, we collect and process the following data in addition to your account data:
- Points balance and transaction history
- Tier status and spend history
- Voucher issuance and redemption history
- Referral activity
- Date of birth (only if voluntarily provided, for the purpose of issuing a Birthday Voucher)
This data is processed via LoyaltyLion Ltd., which acts as a Data Processor on our behalf. See Section 5 for details.
Loyalty profile data (points balance, tier, date of birth) is retained for 2 years after your last qualifying purchase. After this period, your personal data is anonymized or erased. Order and transaction data is retained for 7 years to comply with Dutch tax law.
You may withdraw your consent for date of birth processing at any time by contacting us at webshop@r2.amsterdam. Withdrawing consent means you will no longer receive a Birthday Voucher, but does not affect your continued participation in the Loyalty Program.
2.4 Newsletter and Marketing Communications
Legal basis: consent (Art. 6(1)(a) GDPR).
If you subscribe to our newsletter, we use your email address to send you updates about new arrivals, offers, and promotions. You can unsubscribe at any time via the link in any newsletter email, or by contacting our customer service.
2.5 Legitimate Interest
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
We may use your data for the following purposes where we have a legitimate interest in doing so, provided this does not override your privacy interests:
- Customer satisfaction surveys and product reviews
- Website analytics and improvement
- Fraud prevention and security
- Customer service communications
2.6 Legal Obligations
Legal basis: legal obligation (Art. 6(1)(c) GDPR).
In some cases we are required by law to process and retain certain data, for example for tax and accounting purposes (7-year retention under Dutch law) or when fraud is suspected.
3. How Long We Keep Your Data
We do not keep personal data longer than necessary for the purpose for which it was collected. The following retention periods apply:
- Order and transaction data: 7 years from the date of the transaction, in accordance with Dutch tax law (Belastingdienst).
- Customer account and profile data: 2 years after your last purchase. After this period, personal data is anonymized or erased.
- Loyalty program profile data (points, tier, date of birth): 2 years after your last qualifying purchase.
- Newsletter subscription data: retained until you unsubscribe.
- Customer service communications: up to 2 years after the matter is resolved.
After the applicable retention period, personal data is either deleted or anonymized. Anonymized data may be retained for analytical purposes.
4. Cookies
Our website uses cookies — small text files placed on your device — to analyze how visitors use the website, to remember preferences, and to enable certain features. The information generated by cookies may be transferred to our own secured servers or those of third parties.
You can configure your browser to refuse cookies or to notify you when a cookie is sent. Please note that some features of the website may not function correctly if cookies are disabled. The main cookies we use relate to website analytics (Google Analytics 4), advertising measurement (Google Ads, Meta Pixel), and platform functionality (Shopify). For information about managing cookies, please refer to your browser settings or the opt-out tools provided by the relevant platforms.
5. Third Parties and Data Processors
We share personal data with third parties only where necessary to provide our services, or where required by law. All third-party processors are bound by data processing agreements and may only process data on our documented instructions.
E-commerce & order management
- Shopify Inc. — e-commerce platform and order management. Shopify acts as a Data Processor for all customer and order data stored in our store. Shopify’s Data Processing Addendum applies.
Payments
- Shopify Payments — integrated payment processing via Shopify. Payment data is handled in accordance with Shopify’s privacy policy.
- Mollie B.V. — payment service provider. Order and payment data is shared with Mollie to process transactions. Mollie’s own privacy policy applies.
- PayPal (Europe) S.a.r.l. et Cie, S.C.A. — payment service. If you choose to pay via PayPal, your payment and order data is shared with PayPal. PayPal’s own privacy policy applies.
- Klarna Bank AB — Buy Now, Pay Later payment service. If you choose to pay via Klarna, your payment and order data is shared with Klarna. Klarna’s own privacy policy applies.
Marketing & analytics
- Klaviyo Inc. — email marketing platform. Your name and email address are shared with Klaviyo to send transactional and marketing emails. Klaviyo acts as a Data Processor. Data may be stored outside the EU; Klaviyo is EU-U.S. Data Privacy Framework certified.
- Google Analytics 4 (Google LLC) — website analytics. We use GA4 to analyze how visitors use our website. Data is collected via cookies and anonymized where possible. Google may process data outside the EU. You can opt out via your browser settings or Google’s opt-out tools.
- Google Ads (Google LLC) — advertising. We use a Google Ads tag to measure the effectiveness of our advertising campaigns. This involves the collection of anonymized conversion data.
- Meta Ads (Meta Platforms Ireland Ltd.) — advertising. We use the Meta Pixel to measure the effectiveness of our campaigns on Facebook and Instagram. This involves standard event tracking based on your website behavior.
Loyalty & customer experience
- LoyaltyLion Ltd. — loyalty program platform. LoyaltyLion processes loyalty profile data (name, email, date of birth, points and transaction history) as a Data Processor on our behalf.
- Wishlist King — wishlist functionality for registered customers. If you save products to a wishlist while logged in to your account, this data is stored via Wishlist King.
- Returnista — returns portal. When you submit a return via our returns portal, your name, order details, and return information are processed by Returnista.
- WebwinkelKeur — customer review platform. If you leave a review, your name, place of residence, and email address are shared with WebwinkelKeur. WebwinkelKeur publishes your name and place of residence on its own website.
We do not sell personal data to third parties, nor do we share data with third parties for their own marketing purposes.
6. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data:
- Right of access: you may request a copy of the personal data we hold about you.
- Right to rectification: you may request correction of inaccurate or incomplete data.
- Right to erasure: you may request deletion of your personal data, subject to legal retention obligations.
- Right to restriction of processing: you may request that we limit how we process your data in certain circumstances.
- Right to data portability: you may request your data in a structured, machine-readable format.
- Right to object: you may object to processing based on legitimate interest, including direct marketing.
- Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at webshop@r2.amsterdam. We will respond within one month. We may ask you to verify your identity before processing your request.
If you believe your rights have not been respected, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
7. Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Where third-party processors are used, we ensure they maintain equivalent security standards through contractual obligations.
8. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The date of the most recent update is shown at the top of this page. We recommend reviewing this policy periodically.
9. Contact
For any questions about this privacy policy or how we handle your personal data, please contact us:
W.F. Retail B.V. (R2 Amsterdam) — Jacob de Graeflaan 2, 1181 DN Amstelveen
webshop@r2.amsterdam — +31 (0)20 26 23 864
R2 Amsterdam — r2.amsterdam