Last updated July 2026
This policy explains what personal data Patchy collects, why, and what your rights are. Patchy is the controller of this data.
Patchy is based in the Netherlands. For any privacy question, email service@patchy.co.
We rely on performance of our contract with you (orders), your consent (analytics cookies), our legitimate interests (a secure, working shop) and legal obligations (record-keeping).
We use a few necessary cookies to remember your cart, your currency choice and your cookie preferences. With your consent we also use Google Analytics to measure site usage. You can accept or decline analytics cookies in the banner shown on your first visit — analytics stays switched off until you accept.
We only share data with providers that help us run the shop, under appropriate agreements:
Some providers may process data outside the EU; where they do, appropriate safeguards such as the EU Standard Contractual Clauses are in place.
We keep order and invoice data for as long as the law requires (in the Netherlands, tax records for 7 years). Other data is kept only as long as needed for the purposes above.
You can access, correct, delete or receive a copy of your personal data, object to certain processing, and withdraw consent at any time. To exercise any of these, email service@patchy.co. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We take reasonable technical and organisational measures to protect your data, and payments run over an encrypted connection.
We may update this policy from time to time; the date above shows when it last changed.