Last updated: 11 August 2026

By Shir B.V., located at Nobelstraat 15 BU8, 2693 BC 's-Gravenzande, the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 89771869 (hereinafter: "we", "us" or "By Shir"), values the protection of your personal data and is transparent about our use of cookies. In this statement we explain which personal data we collect, why we do so, how long we keep it, which cookies we use, and what rights you have.

This statement applies to the webshop www.byshir.com and to the personal data we process from our customers, website visitors and newsletter subscribers.

Personal data

What data do we collect?

We process the following personal data, depending on how you interact with us:

• Name and address details (to process and ship orders)
• Email address (for order confirmations, customer service and, with your consent, newsletters)
• Phone number (for shipping updates and customer service)
• Payment details (processed by our payment provider Mollie; we do not store full payment details ourselves)
• Order history
• Browsing behaviour and cookie data on our website (see Part 2 of this statement)
• Communication via customer service, for example via email, WhatsApp or contact form

Why do we process this data?

We use your data for the following purposes:

• Processing, shipping and handling your order
• Customer service and after-sales support
• Sending newsletters and personalised offers (only with your consent)
• Improving our website, products and services
• Personalising your shopping experience, for example through targeted content or recommendations
• Complying with legal obligations, such as our fiscal record-keeping duty

The processing of your data is based on the performance of the contract we enter into with you when you place an order, on your consent (for example for the newsletter and marketing cookies), on a legal obligation, or on our legitimate interest in improving and securing our webshop.

How long do we keep your data?

We do not keep your personal data longer than necessary:

• Order data: 7 years, due to our fiscal record-keeping obligation
• Newsletter data: until you unsubscribe
• Other customer data: a maximum of 2 years after the last contact

Who do we share your data with?

To provide our services, we share your data with the following parties:

• Lightspeed, the platform on which our webshop runs
• PostNL, for shipping your order
• Mollie, our payment provider, for processing payments (including when you choose to pay later with Klarna via Mollie)
• Klaviyo, for sending newsletters and personalised email/SMS marketing
• Google Analytics, Meta (Facebook/Instagram) and Hotjar, for website analytics and advertising purposes. More information can be found in Part 2 of this statement.
• Other service providers who support our business operations, such as accounting software

Some of these parties, such as Google and Meta, may process data on servers outside the European Economic Area (EEA). In that case, we ensure that this transfer complies with applicable laws and regulations, for example because these parties have adopted appropriate safeguards such as the EU Standard Contractual Clauses.

We never sell your personal data to third parties.

Security of your data

We take appropriate technical and organisational measures to protect your personal data against loss or unlawful processing, such as encrypted connections (SSL) on our website and restricted access to personal data within our organisation.

Children's data

Our website and products are not specifically aimed at children under the age of 16. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you suspect that we have nevertheless collected data from a minor without consent, please contact us so that we can remove this data.

Part 2: Cookies

What are cookies?

A cookie is a small text file that is stored on your computer, tablet or smartphone when you visit our website. Some cookies are necessary for the website to function properly, others are used to analyse your visit or to show you relevant advertisements.

Consent

On your first visit to our website, we ask for your consent to place non-essential cookies. Functional cookies, which are necessary for the webshop to work, are always placed. Other cookies are only placed once you have given your consent. You can withdraw your consent at any time by adjusting your cookie preferences or by removing cookies through your browser settings.

Functional cookies

Our webshop runs on the Lightspeed platform (formerly SEOshop). This platform places functional cookies that are necessary for the website to work properly, for example to remember your shopping cart, keep you logged in, and store your cookie preferences. Without these cookies, the webshop will not function correctly. No consent is required for placing these cookies, as they are necessary for providing our service.

Payment cookies

We use Mollie to process payments. Through Mollie you can, among other things, pay with Klarna (pay later). Mollie and Klarna may place cookies that are necessary to process the payment correctly, prevent fraud, and securely process your payment details. These cookies are only placed at the moment you complete an order.

Analytical cookies

We use Google Analytics and Hotjar to analyse how visitors use our website. This gives us insight into which pages are popular, how visitors navigate through the website, and where there is room for improvement.

• Google Analytics collects anonymised data about general visitor behaviour on our website, even if you do not accept cookies, without this being traceable to you as an individual. This is done in a manner compliant with the GDPR. Only once you accept cookies does Google Analytics additionally place a cookie on your device to recognise and analyse your visit to our website in more detail.
• Hotjar is only loaded after you have accepted cookies. Hotjar then uses cookies to generate anonymous heatmaps and session recordings, allowing us to see how visitors interact with our website (for example, where they click and scroll). Hotjar does not record sensitive personal data such as passwords or payment details.

Marketing and advertising cookies

Only after you have accepted cookies do we place cookies to show advertisements that match your interests, both on our own website and on third-party websites.

• Meta Pixel (Facebook/Instagram) is only loaded after you have accepted cookies. The pixel places a cookie that allows us to see whether you visited our website after seeing an advertisement on Facebook or Instagram, and enables us to show targeted advertisements to visitors and similar audiences.

WhatsApp

On our website you will find a clickable link to our WhatsApp number. This is a regular link and not an embedded script; no cookie is placed on your device through this. Only once you actually start a WhatsApp conversation with us does WhatsApp's privacy policy apply to that communication.

Cookie retention period

Cookies are not stored longer than necessary for the purpose for which they were placed. Functional cookies generally expire at the end of your session or after a short period. Analytical and marketing cookies may, depending on the provider, be stored for up to a maximum of 2 years.

Part 3: Your rights, changes and contact

Your rights

With regard to your personal data and cookies, you have the following rights:

• Right of access: you can request which personal data we process about you
• Right to rectification: you can have incorrect or incomplete data corrected
• Right to erasure: you can ask us to delete your data, unless we have a legal ground to retain it
• Right to restriction: you can ask us to temporarily limit the processing of your data
• Right to object: you can object to the processing of your data, for example for marketing purposes
• Right to data portability: you can ask us to transfer your data to another party
• Right to withdraw consent: if processing is based on your consent (for example for the newsletter or marketing cookies), you can withdraw it at any time

Would you like to exercise any of these rights? Please contact us using the details at the bottom of this page. We will respond to your request within 4 weeks.

Are you not satisfied with how we handle your data? Then you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may amend this statement from time to time, for example when legislation changes or when we start using new services or tools. The most up-to-date version can always be found on our website.

Contact

Do you have questions about this statement or about how we handle your data? Please contact us via:

By Shir B.V.
Nobelstraat 15 BU8
2693 BC 's-Gravenzande, the Netherlands

KVK: 89771869
Phone: +316 15681370
Email: [email protected]