Last updated: 18 October 2026
This policy explains what personal data CRSRD collects, why, how long we keep it, and what your rights are. We keep it short and only collect what we need.
1. Who we are
CRSRD is an online shop for gaming mousepads, registered with the Dutch Chamber of Commerce (KvK) under number 42189280. CRSRD is the controller of your personal data.
Email: crsrdinfo@gmail.com
2. What we collect, why, and for how long
Drop waitlist and drop emails
What: your email address and when you signed up.
Why: to email you when a CRSRD drop (a new product release) is coming or goes live.
Legal basis: your consent, which you give by joining the list.
How long: until you unsubscribe or ask us to delete it.
Orders
What: your name, shipping and billing address, email address, phone number (if you give it), what you ordered, and payment status.
Why: to process, ship and deliver your order, and to handle returns, withdrawals, warranty claims and customer service.
Legal basis: performing our contract with you, and our legal obligation to keep financial records.
How long: 7 years, because Dutch tax law requires us to keep financial records for that long.
Payments
Payments are processed by Shopify Payments. We never see or store your full card number.
Customer service
What: the messages you send us and the details needed to help you.
Why: to answer your questions and solve problems.
Legal basis: performing our contract with you, or our legitimate interest in helping you.
How long: up to 2 years after our last contact, unless the messages are part of an order record.
Website use
What: technical data such as your IP address, browser, device and the pages you visit.
Why: to run the shop securely, prevent fraud, and see basic visitor statistics in Shopify.
Legal basis: our legitimate interest in a safe, working shop. Non-essential cookies are only used with your consent (see section 6).
3. The emails we send
If you join the waitlist, we only email you about drops: announcements of new product releases and when they go live. We do not send general promotional emails, text messages or post.
If you order, we also send emails about your order, such as the order confirmation and shipping updates. Every drop email has an unsubscribe link, and you can also unsubscribe by emailing us.
4. Who we share your data with
We never sell your personal data. We only share it with the services we need to run the shop, and only the data they need:
- Shopify: our shop platform, hosting and checkout.
- Shopify Payments: payment processing.
- Klaviyo: sending drop emails (your email address and signup details).
- Sendcloud: creating shipping labels and tracking (name, address, email address and phone number).
- The delivery company that brings your parcel, such as PostNL or DHL (name, address and contact details for delivery).
- Authorities, such as the Dutch Tax Administration, but only when the law requires it.
These companies process your data on our behalf and are not allowed to use it for their own purposes, except where they act as a separate controller under their own privacy policy (for example, Shopify for fraud prevention).
Shopify Network Intelligence: Shopify may combine data about how you use our shop with data from other Shopify shops to improve products, personalisation and advertising. For this processing Shopify is the responsible party, and you can read more and use your rights in the Shopify Consumer Privacy Policy.
5. Data outside the EU
Some of these services, such as Shopify and Klaviyo, may process data outside the European Economic Area, for example in the United States or Canada. When that happens, your data is protected by recognised safeguards such as the EU-U.S. Data Privacy Framework, an EU adequacy decision, or the European Commission's Standard Contractual Clauses.
6. Cookies
We use cookies that are needed for the shop to work, such as for your cart, checkout and security. We only use analytics or marketing cookies if you agree to them in our cookie banner, and you can change your choice at any time.
When you join the drop waitlist, our page saves only your place in line (a number, never your email address) in your browser, so you still see your place when you come back. You can remove it by clearing your browser data for crsrd.shop.
We currently do not use advertising pixels (such as from Meta or TikTok). If that changes, we will update this policy and ask for your consent first.
7. Security
We protect your data with secure systems from our service providers, encrypted connections and limited access. No system is completely secure, but we take reasonable steps to keep your data safe.
8. Your rights
You have the right to:
- see the personal data we hold about you;
- have incorrect data corrected;
- have your data deleted, unless we must keep it by law (for example, order records for tax purposes);
- restrict or object to how we use your data;
- receive your data in a common format so you can take it elsewhere;
- withdraw your consent at any time, for example by unsubscribing from drop emails.
To use any of these rights, email crsrdinfo@gmail.com. We will reply within one month. We may ask you to confirm your identity first.
9. Complaints
If you are unhappy with how we handle your data, please contact us first so we can fix it. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the data protection authority in your own EU country.
10. Children
Our shop is not aimed at children. If you are under 16, please ask a parent or guardian before joining the waitlist or placing an order.
11. Changes to this policy
We may update this policy, for example when we start using a new service. The date at the top always shows the latest version. If a change matters for you, we will let you know.