Privacy policy

Effective date: [03-07-2026] 

WanderS (“we”, “us”, “our”) respects your privacy and is committed to protecting the personal data of our business partners, prospective partners, and website visitors. This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have. 

This policy should be read together with our Cookie Policy and Terms & Conditions.

1. Who We Are 

WanderS is a business-to-business (B2B) platform offering curated lifestyle products for resale across multiple categories including travel, outdoor, home, and tech. WanderS is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR). 

Legal Entity: N.S. Menko Holding B.V. 

Address: Kleibultweg 101, 7575 BW Oldenzaal, The Netherlands 

Chamber of Commerce No.: 06086538 

Website: www.reallywanders.com 

Email: info@reallywanders.com 

Purchased a WanderS product as a consumer? Consumer sales take place exclusively through authorized marketplaces and resellers. In that case, the marketplace or seller is the primary controller of your order data; please consult their privacy policy. If you contact us directly, for example via our contact form, we process the data you provide as described in this policy. 

2. What Personal Data We Collect 

a) Account and business information. Collected when you register for a business account: 

• Company name
• Contact person’s full name and job title
• Business registration (Chamber of Commerce or equivalent) and VAT number
• Email address and phone number
• Billing and shipping addresses
• Login credentials (passwords are encrypted and stored by Shopify; we cannot access your password) 

b) Order and payment information.  

• Order history and invoices
• Payment method details, processed securely by third-party payment providers; we do not store full payment card numbers 

c) Website usage information.  

• IP address and approximate location
• Browser and device type
• Pages visited, time spent on site, and referring URLs
• Cookies and similar technologies

d) Communication data.  

• Emails, live chats, contact form submissions, and messages to our customer service or sales teams
• Phone calls or text messages to or from our business numbers
• Newsletter sign-ups, marketing opt-ins, and survey responses
• Feedback, reviews, and other content you submit about your experience 

We do not knowingly collect data from persons under 18, as our platform is intended for business use only. We also do not process special categories of personal data. 

3. Why We Process Your Data and On What Legal Basis 

We process your personal data for the following purposes, each with its legal basis under Article 6 GDPR:

• Performance of a contract: processing and delivering your orders, managing your account, and providing customer support.
• Legal obligation: complying with tax, accounting, and other legal requirements, including invoice retention.
• Legitimate interests: securing our website, preventing fraud and misuse, reviewing new account registrations, improving our website and services, and sending relevant business communications to existing customers about similar products or services.
• Consent: sending marketing emails to prospects and placing analytics and marketing cookies. You can withdraw consent at any time, for example via the unsubscribe link in every marketing email.

Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms. You may object to this processing at any time (see Section 9).

4. Data Sharing and Third Parties 

We do not sell or rent your personal data. We share your data only where necessary with: 

• Service providers, such as Shopify (e-commerce platform and hosting), payment processors, email and communication tools, and logistics and shipping partners. These parties act as processors under a data processing agreement and may only use your data on our instructions.
• Manufacturers and suppliers: where products ship directly from the manufacturer, we share the shipping details needed to deliver your order.
• Our internal teams and affiliated companies, to process orders and provide support.
• Competent authorities, where required by law, court order, or to protect our legal rights. 

5. International Data Transfers 

Some of our service providers and suppliers are located outside the European Economic Area, for example Shopify (with infrastructure in the United States and Canada) and manufacturers in Asia that ship orders directly. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, such as European Commission adequacy decisions or Standard Contractual Clauses, and we limit the data shared to what is necessary for delivery of your order. 

6. Data Retention 

We keep your personal data no longer than necessary for the purposes described in this policy: 

• Account data: retained while your account is active and up to 2 years after your last activity, unless you request earlier deletion.
• Order, invoice, and payment records: retained for 7 years to comply with Dutch tax and accounting law (fiscale bewaarplicht).
• Customer service communications: retained for up to 2 years after the matter is resolved.
• Marketing data: retained until you unsubscribe or withdraw consent. 

Data is reviewed periodically and securely deleted or anonymized when no longer required. 

7. Cookies and Tracking 

We use cookies and similar technologies to enable core website functionality, analyze site performance, and support marketing. Strictly necessary cookies are placed without consent; analytics and marketing cookies are only placed with your consent, which you can manage via the cookie settings link in the website footer. 

For a full overview of the cookies we use, their purposes, and retention periods, please see our Cookie Policy. 

8. Data Security 

We take appropriate technical and organizational measures to protect your data, including: 

• Encrypted password storage and HTTPS-secured browsing
• Carefully selected third-party processors with their own security certifications
• Access controls limiting data access to team members who need it
• Manual review of new account registrations to prevent fraud 

No system is completely secure, but we work continuously to protect your data. In the unlikely event of a data breach that poses a risk to your rights, we will notify the relevant authorities and affected persons as required by the GDPR. 

9. Your Rights Under the GDPR 

You have the following rights regarding your personal data: 

• Access: request a copy of the personal data we hold about you.
• Rectification: correct or update inaccurate or incomplete data.
• Erasure: request deletion of your data where there is no legal ground for continued processing.
• Restriction: request restriction of processing in certain cases.
• Objection: object to processing based on legitimate interests, and to direct marketing at any time.
• Data portability: receive the data you provided to us in a structured, commonly used, machine-readable format.
• Withdraw consent: withdraw consent at any time, without affecting the lawfulness of prior processing. 

To exercise any of these rights, contact us at support@reallywanders.com. We respond within one month. We may ask you to verify your identity before processing your request. 

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl) or the supervisory authority in your own EU member state. 

10. Changes to This Policy 

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the effective date noted at the top. For material changes, we will inform active account holders by email or via a notice on the website.