Privacy policy

PRIVACY POLICY – TWO ATTITUDES

Last updated: July 2026

At Two Attitudes, we respect your privacy and are committed to protecting your personal data. We process your personal data with care and in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy and data protection laws.

This Privacy Policy explains how Two Attitudes collects, uses and protects your personal data when you visit our website, place an order, contact us or otherwise interact with us.

This Privacy Policy may be updated from time to time. The most recent version will always be available on this page.

1. WHY WE PROCESS YOUR PERSONAL DATA

We collect and use personal data only when necessary for the purposes described in this Privacy Policy.

Depending on how you interact with us, we may process your personal data for the following purposes:

When you contact us

If you contact us by email or through our website, we use the information you provide to respond to your questions, requests or feedback.

When you place an order

When you place an order through our online store, we process the personal data necessary to process and fulfil your order. This may include your name, billing and delivery address, email address, telephone number, order details and payment information.

We use this information to process your payment, prepare and deliver your order, provide customer service and handle returns or exchanges.

When you subscribe to our newsletter

If you subscribe to our newsletter, we use your email address to send you updates, new product launches, drops, news and exclusive offers.

You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting us directly.

Legal obligations

We may process personal data where this is necessary to comply with legal or regulatory obligations, such as accounting, tax, consumer protection or other applicable legal requirements.

Improving our services

We may use certain information to understand how our website is used and to improve our website, products and services. Where required by law, we will ask for your consent before using cookies or other technologies for analytical or marketing purposes.

2. LEGAL BASIS FOR PROCESSING

We only process your personal data where we have a valid legal basis under applicable data protection laws.

Depending on the circumstances, we may process your personal data based on:

  • Your consent, for example when you subscribe to our newsletter or consent to non-essential cookies;

  • The performance of a contract, for example when processing and delivering your order;

  • Compliance with a legal obligation, for example for tax and accounting purposes; or

  • Our legitimate interests, for example to improve our services, maintain the security of our website or communicate with you about our services, provided that your rights and interests do not override these interests.

You may withdraw your consent at any time where processing is based on your consent. Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew your consent.

3. COOKIES

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device when you visit our website.

We use cookies for the following purposes:

Functional cookies

These cookies are necessary for the website to function properly. They may, for example, support features such as the shopping cart, checkout process, security and other essential website functions.

Analytical cookies

Where you have given your consent, we may use analytical cookies, such as Google Analytics, to understand how visitors use our website and to improve the user experience.

Depending on the settings and configuration of the analytics service, information collected may include data such as your IP address, pages visited, duration of your visit, approximate location, device type and browser information.

Where required by applicable law, we will ask for your consent before placing non-essential analytical cookies on your device.

You can manage or withdraw your cookie preferences at any time through the cookie settings available on our website, where applicable. You can also delete or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

4. SHARING YOUR PERSONAL DATA

We may share personal data with trusted third-party service providers where this is necessary to operate our business and provide our services.

These third parties may include:

  • Payment service providers, to securely process payments;

  • Delivery and logistics providers, to deliver your orders;

  • Website hosting and technical service providers, to operate and maintain our website;

  • Email and newsletter service providers, to send communications you have requested or consented to receive;

  • Analytics providers, where applicable and where permitted by law.

These service providers may only process your personal data for the purposes for which we have engaged them and, where applicable, under appropriate data processing agreements or other contractual safeguards.

We do not sell your personal data to third parties.

5. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area (EEA), including in countries that may not provide the same level of data protection as the European Union.

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include an adequacy decision by the European Commission, Standard Contractual Clauses or other legally recognised transfer mechanisms.

6. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting and reporting requirements.

The retention period depends on the type of data and the purpose for which it is processed. For example, information related to orders and transactions may need to be retained for a longer period to comply with legal and tax obligations.

When personal data is no longer required, we will securely delete it or anonymise it where appropriate.

7. YOUR RIGHTS

Depending on applicable law, you have certain rights regarding your personal data.

You may have the right to:

  • Request access to the personal data we hold about you;

  • Request correction of inaccurate or incomplete personal data;

  • Request deletion of your personal data where there is no longer a valid reason for us to retain it;

  • Request restriction of the processing of your personal data in certain circumstances;

  • Object to the processing of your personal data where we rely on legitimate interests as our legal basis;

  • Object to the use of your personal data for direct marketing purposes;

  • Withdraw your consent at any time where processing is based on your consent; and

  • Request to receive your personal data in a structured, commonly used and machine-readable format where the right to data portability applies.

You can also unsubscribe from our newsletter at any time by clicking the unsubscribe link included in our emails.

To exercise your rights or ask questions about your personal data, please contact us at:

Email: info@twoattitudes.com

We may ask you to provide additional information to verify your identity before processing certain requests.

8. DATA SECURITY

We take the protection of your personal data seriously. Two Attitudes takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

We work with trusted service providers and use appropriate security measures, including secure connections such as SSL/TLS encryption where applicable.

However, no method of transmission or storage is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security.

9. CHILDREN'S PRIVACY

Our website and services are not specifically directed at children. We do not knowingly collect personal data from children without appropriate consent from a parent or legal guardian.

If you believe that a child has provided us with personal data without the appropriate consent, please contact us so that we can take appropriate action.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or applicable laws and regulations.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.

11. CONTACT

If you have any questions about this Privacy Policy, how we process your personal data or how to exercise your privacy rights, please contact us:

Two Attitudes

Zandhaai 9
5658 BA Eindhoven
The Netherlands

Email: info@twoattitudes.com

If you are not satisfied with how we handle your personal data or your privacy request, you also have the right to lodge a complaint with the data protection authority in your country of residence. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).