Privacy policy

PRIVACY POLICY CO-FIRE

Last updated: 29 September 2026

Co-Fire respects the privacy of visitors to our website and customers of our online store. We handle personal data with care and process it only to the extent necessary for our services, processing orders, communicating with customers and improving our website and services.

This Privacy Policy explains what personal data we collect, why we process it, how we handle it and what rights you have.

1. Who is responsible for your personal data?

The controller responsible for processing personal data through this website is:

Co-Fire B.V.
Trading name: Co-Fire
Address: Vlagheide 6
Postal code and city: 5466 PZ Veghel
Country: The Netherlands
Chamber of Commerce number: 70464286
VAT number: NL858328112B01

Email: info@co-fire.eu
Telephone: 0031**(0)646303738**
Website: https://co-fire.eu

Hereinafter, this organisation is referred to as "Co-Fire", "we", "us" or "our".

1. What personal data do we collect?

Depending on how you use our website and online store, we may process the following personal data:

• first and last name;
• company name;
• billing and delivery address;
• email address;
• telephone number;
• payment and transaction information;
• order details and purchase history;
• information you provide to us by email, telephone or contact form;
• account information when you create a customer account;
• technical information, such as IP address, browser, device and operating system;
• information about your use of our website, where consent or another valid legal basis applies;
• marketing and communication preferences.

We do not collect more personal data than is necessary for the relevant purpose.

1. How do we use your personal data?

We may use your personal data for the following purposes:

Orders and delivery

We use your information to process your order, process payments, deliver products, provide information about your order and handle any returns or warranty requests.

Customer service

When you contact us, we use the information you provide to answer your question or request.

Invoicing and administration

We process personal data for our financial administration, invoicing, accounting and compliance with legal tax and administrative obligations.

Website and online store

We use certain information to ensure that our website functions properly, monitor security and improve the operation of our online store.

Marketing

Where you have given consent or where this is otherwise legally permitted, we may use your contact details to send you information about Co-Fire products, promotions, news and offers.

You can unsubscribe from commercial emails at any time by using the unsubscribe link in the relevant email.

Analytics and improvement

Where consent is required, we use analytics and tracking technologies only after you have given your consent.

1. What are the legal bases for processing?

We process personal data on the basis of one or more of the following legal grounds under the General Data Protection Regulation (GDPR):

Performance of a contract
Where processing is necessary to fulfil your order, enter into an agreement with you or fulfil our obligations under an agreement.

Legal obligation
Where we are required to process personal data to comply with a legal obligation, such as tax and administrative obligations.

Legitimate interest
Where processing is necessary for a legitimate interest of Co-Fire, such as website security, fraud prevention, customer service or certain forms of direct marketing, where legally permitted.

Consent
Where we require your consent, for example for certain non-essential cookies, tracking technologies or marketing communications.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

1. Shopify

Our online store is technically provided through Shopify.

Shopify processes personal data on our behalf for various aspects of the online store, such as operating the online store, processing orders and providing certain technical services.

Shopify may process and store personal data in accordance with Shopify's terms and privacy policy.

More information about the processing of personal data by Shopify can be found in Shopify's privacy policy.

1. Payments

We use one or more external payment service providers to process payments.

Depending on the payment method you choose, your personal data may be processed by:

• iDEAL/WERO
• Apple Pay, Google Pay
• Klarna
• PayPal
• Bancontact

1. Shipping and delivery

To deliver your order to you, we share the necessary information with our carriers or logistics partners.

This may include your name, delivery address, telephone number, email address and information about your order.

Our carriers/logistics partners include:

• DHL
• HST
• PostNL

1. External service providers and processors

For certain activities, we may use external service providers. These parties may process personal data where this is necessary for their services to Co-Fire.

This may include:

• online store and hosting services;
• payment processing;
• shipping and logistics;
• accounting and administration;
• customer service;
• email marketing;
• website analytics;
• online advertising;
• IT and security services.

Where necessary, we enter into appropriate data processing agreements with these parties or use other appropriate legal arrangements.

1. Marketing and newsletters

When you subscribe to our newsletter or otherwise give consent to marketing, we may use your email address and other necessary information to send you marketing communications.

We manage our email marketing ourselves.

You can unsubscribe at any time using the unsubscribe link at the bottom of our commercial emails.

1. Google and Meta

We may use services provided by Google and/or Meta for analytics, marketing and online advertising.

Depending on your cookie preferences, information about your use of our website may be processed.

Where legally required, we obtain consent in advance for non-essential cookies and similar tracking technologies.

The exact data processed depends on the services and settings that are active within our online store.

Services actually used:

• Google Analytics: yes
• Google Ads: yes
• Google Tag Manager: yes
• Meta Pixel: no
• Meta Conversions API: yes

1. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files that may be stored on your device when you visit our website.

We use cookies for purposes including:

• the technical operation of the website;
• remembering your shopping cart;
• processing orders;
• remembering certain preferences;
• website analytics;
• marketing and personalised advertising where you have given consent.

Where legally required, non-essential cookies are only placed after you have given consent.

You can change your cookie preferences through Cookiebot.

1. How long do we retain personal data?

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless we are legally required to retain data for a longer period.

Data relating to orders and financial administration may, for example, be retained for longer due to statutory tax and administrative retention requirements.

When personal data is no longer necessary, it will be deleted or anonymised where technically and legally possible.

1. Security of personal data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

The online store is technically supported by Shopify and uses appropriate security measures.

However, no method of electronic data transmission or storage is completely secure. Therefore, we cannot guarantee absolute security.

1. Transfer of personal data outside the European Economic Area

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is processed outside the EEA, we ensure, where legally required, that appropriate safeguards are in place for lawful transfers, for example by using an adequacy decision or appropriate standard contractual clauses.

Shopify states that the GDPR does not require personal data to be processed or stored exclusively within Europe, but transfers outside Europe must comply with applicable data protection requirements.

1. Your privacy rights

Under the GDPR, you have various rights concerning your personal data.

Depending on the circumstances, you may:

• request access to your personal data;
• request correction of your personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing activities;
• withdraw your consent where processing is based on consent;
• request data portability where legally applicable.

To process your request, we may ask for sufficient information to verify your identity.

You can send your request to:

info@co-fire.eu

We will generally respond to your request within the statutory period.

1. Complaints

If you have a complaint about the way we handle your personal data, we ask you to contact us first:

info@co-fire.eu

You also have the right to lodge a complaint with the competent data protection supervisory authority.

For the Netherlands, this is:

Autoriteit Persoonsgegevens

Website: https://www.autoriteitpersoonsgegevens.nl

1. Children's privacy

Our website and online store are not specifically aimed at children.

We do not knowingly collect personal data from children without the consent of a parent or legal guardian where this is legally required.

1. Links to other websites

Our website may contain links to third-party websites.

Co-Fire is not responsible for the content or privacy practices of these external websites. We recommend that you read the privacy policy of these websites before providing personal data.

1. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time, for example when our services, website, technologies used or legal obligations change.

The most recent version will be published on this page.

Date of last update: 29 September 2026

1. Contact

Do you have questions about this Privacy Policy or about how we handle personal data?

Please contact us:

Co-fire BV
Co-Fire
Vlagheide 6
5466 PZ Veghel
The Netherlands
Email: info@co-fire.eu
Telephone: 0664303738
Website: https://co-fire.eu