Privacy policy

Marnora Athleisure B.V., trading as Marnora Sports — Last updated: 2026

1. Who we are

This website is operated by Marnora Athleisure B.V., trading as Marnora Sports, registered in the Netherlands (KVK 97218650 | VAT NL867955880B01). For any privacy-related questions, please contact us at hello@marnorasports.com.

2. What information we collect

• Identity data — name, email address, and billing/delivery address
• Transaction data — order details, payment confirmation, and purchase history
• Technical data — IP address, browser type, and cookies
• Marketing data — your preferences regarding marketing communications.

3. Legal basis for processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal grounds:

• Contractual necessity — to process and deliver your order (Art. 6(1)(b) GDPR)
• Legitimate interests — to improve our products, conduct market research, and maintain website security (Art. 6(1)(f) GDPR)
• Consent — when you opt in to our newsletter or accept non-essential cookies (Art. 6(1)(a) GDPR)
• Legal obligation — to comply with Dutch tax law and financial reporting requirements (Art. 6(1)(c) GDPR)

4. How we use your information

• Order fulfilment — process payments, manage shipping, and handle returns 
• Customer support — respond to enquiries via hello@marnorasports.com
• Marketing — send updates on new drops and studio essentials (only with your explicit consent)
• Optimisation — use cookies to track items in your shopping cart and send reminders if a checkout is not completed

5. Third parties we share data with

We do not sell your personal data. We disclose information only to the following trusted third parties, each of which is necessary for our operations:

• Shopify International Limited (Ireland) — our e-commerce platform and checkout provider. As a Dutch merchant, your customer data is initially processed by Shopify International Limited under Shopify's Data Processing Addendum and Standard Contractual Clauses. Shopify uses Google Cloud Platform as its primary infrastructure provider.
• Shopify Payments — the integrated payment service within our Shopify store, which processes Maestro, Visa, Mastercard, and Bancontact card transactions, as well as Apple Pay and Google Pay. Shopify Payments operates on Stripe's underlying infrastructure (Stripe Payments Europe, Ltd.).
• Mollie B.V. (Netherlands) — payment service provider for iDEAL and Wero transactions. Mollie processes your payment data (name, payment reference, and transaction amount) solely for the purpose of completing your transaction. Mollie's processing is governed by our data processing agreement and Mollie's own privacy policy.
• MyParcel B.V. (Netherlands) for shipping label generation and order management; PostNL and DHL as courier services for order delivery. These partners will receive your name and delivery address solely for the purpose of fulfilling your order. 
• Google Analytics — anonymised website usage analytics. We use Google Analytics with IP anonymisation enabled.
• Shopify Email for newsletters, waitlist communications, and transactional emails. Marketing emails are only sent where you have given explicit consent. In the future, we may additionally use Klaviyo, Inc. (United States) for email marketing and segmentation. If Klaviyo is activated, your email address and purchase history will be shared with Klaviyo under Standard Contractual Clauses, and this Privacy Policy will be updated accordingly. 
• Judge.me (Canada) — for automated post-purchase review invitations. If you have placed an order, Judge.me will receive your name, email address, and order details solely for the purpose of sending a review request. Your participation in leaving a review is voluntary. Judge.me's processing is governed by Standard Contractual Clauses and our data processing agreement.

6. International data transfers

As we use Shopify, your data may be transferred to and stored in countries outside the European Economic Area (EEA), including Canada and the United States. Shopify stores data for European merchants at rest within the EEA where possible. All international transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Chapter V GDPR.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Financial and transaction records are retained for 7 years under Dutch law (Art. 2:10 BW). Marketing data is retained until you withdraw consent. Technical data (e.g. log files) is typically retained for no longer than 12 months.

8. Your rights under GDPR

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Correct inaccurate data (Art. 16 GDPR) • Request erasure — the right to be forgotten (Art. 17 GDPR)
• Object to processing for direct marketing (Art. 21 GDPR)
• Request data portability (Art. 20 GDPR)
• Lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl

To exercise any of these rights, contact us at hello@marnorasports.com. We will respond within one month.

9. Cookies

Our website uses cookies to recognise you, keep track of your shopping cart, and — with your consent — to analyse website usage and send cart reminders. Non-essential cookies are only placed after you have given explicit consent via our cookie banner. You may withdraw cookie consent at any time. Refusing cookies may affect parts of the website's functionality.

The following table provides an overview of the cookies used on our website:

Functional cookies are necessary for the proper operation of our website and cannot be refused. Analytical and marketing cookies are only placed with your explicit prior consent.

10. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption — all data transmitted between your browser and our website is encrypted using SSL/TLS technology
• Access controls — access to personal data within our organisation is limited to authorised personnel on a need-to-know basis
• Data processing agreements — we have entered into data processing agreements (verwerkersovereenkomsten) with all third-party processors listed in Section 5, in accordance with Article 28 GDPR
• Secure infrastructure — our e-commerce platform (Shopify) maintains PCI DSS Level 1 compliance for payment data security

While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. If you have reason to believe that your data may have been compromised, please contact us immediately at hello@marnorasports.com.

Marnora Athleisure B.V., trading as Marnora Sports | KVK/Dutch CoC 97218650 | VAT NL867955880B01 | marnorasports.com | hello@marnorasports.com