Privacy policy
Privacy policy
Refurbished.nu is a trade name of Global Tech Solutions B.V. We are the data controller for the personal data processed through this online shop. This privacy policy explains which data we process, why we do so, how long we keep it and what rights you have.
Data controller
Global Tech Solutions B.V.
Ginnekenstraat 120, 4811 JK Breda, the Netherlands
Chamber of Commerce (KVK) number: 92979912
VAT number: NL866237276B01
E-mail: info@refurbished.nu
Telephone: +31 76 303 1107
The data we process
- Contact details: your name, e-mail address, telephone number, billing address and delivery address.
- Order details: the products you order, return or exchange, your order number and your order history.
- Payment details: the payment method chosen, the transaction status and the payment confirmation. We do not receive full card numbers or bank account details, these are processed solely by our payment providers.
- Account details: your username, your password in encrypted form and your preferences, if you create an account.
- Correspondence: the content of your e-mails, WhatsApp messages and other contact with our customer service.
- Device and usage data: your IP address, browser type, device type and your behaviour on the website, collected through cookies and similar techniques.
- Trade-in data: if you sell a device to us, we additionally process your date of birth, identification details, bank account number and the IMEI number of the device.
Why we process your data
- Performance of the contract. To process your order, handle the payment, ship the product, deal with returns and warranty and answer your questions. Legal basis: performance of the contract.
- Legal obligations. To comply with our tax retention obligation, the invoicing obligation, the margin scheme and the registration obligation in the second-hand dealers' register when buying used devices. Legal basis: legal obligation.
- Customer service and business operations. To improve our service, secure the website and prevent fraud. Legal basis: legitimate interest.
- Marketing. To send you newsletters and offers and to show you relevant advertising. Legal basis: your consent, or our legitimate interest in the case of existing customers. You can unsubscribe at any time via the link at the bottom of every e-mail.
- Analytics and cookies. To measure and improve use of the website. Legal basis: your consent, except for strictly necessary cookies.
Who we share your data with
We do not sell your data. We share it only with parties needed to deliver our service or where the law requires us to:
- Shopify, which hosts this shop and processes order and account data.
- Payment providers, including Mollie and Shopify Payments, and the pay-later provider you choose.
- Carriers, PostNL and DHL, which need your name, address and telephone number in order to deliver.
- Our accountant and tax advisers, for our administration.
- Competent authorities, where we are legally obliged to do so, including the police in connection with the registration obligation for devices we buy in.
Cookies
We use functional cookies that are necessary for the shopping cart and the checkout process to work. We also use analytics and marketing cookies, but only after you have given consent. You can change your choice at any time via the cookie settings on the website or through your browser settings.
Relationship with Shopify
This shop runs on Shopify. Shopify processes data about your visit and your orders in order to provide and improve the service. In doing so, your data may be sent to Shopify and shared with parties outside your own country. For certain enhanced features Shopify acts as an independent data controller. More information can be found in the Shopify privacy policy for customers.
How long we keep your data
- Order and invoice data: 7 years, under the tax retention obligation.
- Warranty data: until the end of the 24-month warranty period, plus the statutory limitation period.
- Trade-in registration of used devices: for as long as the statutory registration obligation requires.
- Account data: for as long as your account exists. You can ask us to delete it.
- Correspondence with customer service: no more than 2 years after your query has been dealt with.
- Marketing data: until you unsubscribe, and after that only the fact that you unsubscribed.
Transfers outside the European Economic Area
Some of our providers process data outside the EEA. In that case we base the transfer on an adequacy decision of the European Commission or on standard contractual clauses, so that your data remains protected.
Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections and restricted access to customer data. No measure offers complete certainty. Please therefore do not send us sensitive data through unsecured channels.
Children's data
Our shop is not aimed at children. We do not knowingly collect data from people under the age of 16. If you are a parent or guardian and believe your child has provided us with data, please contact us and we will delete it. We buy devices only from people aged 18 or over.
Your rights
You have the right to:
- access your data
- have inaccurate data corrected
- have your data deleted, insofar as we are not legally required to keep it
- have the processing restricted or to object to it
- receive your data in a portable format
- withdraw consent given earlier, without this affecting processing carried out before the withdrawal
Send your request to info@refurbished.nu. We respond within one month. To prevent misuse, we may ask you to prove your identity.
Complaints
If you disagree with the way we process your data, please contact us first. If we cannot resolve the matter together, you can lodge a complaint with the Dutch data protection authority, Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ The Hague, autoriteitpersoonsgegevens.nl, or with the data protection authority in your country of residence.
Changes
We may amend this privacy policy, for example in response to changes in legislation or in our practices. The current version is always available on this page, together with the date of the most recent change.
Last updated: 20 September 2026
