1. Data controller
Freeflow Nation is responsible for the personal data described in this statement and operates from the Netherlands. Privacy enquiries can be sent to contact@freeflownation.eu.
2. Data we process
Website and security data
The hosting provider may process IP address, browser and device information, request time, requested resources and error or security logs to deliver and protect the website.
Orders and fulfilment
At checkout, Freeflow Nation processes the customer’s name, email, telephone number, billing and delivery address, ordered products and sizes, payment status and customer-service correspondence needed to conclude and fulfil the purchase. Stripe processes the payment details on its hosted checkout; this website does not receive or store complete card or wallet credentials. The minimum delivery details may be sent to the selected supplier and carrier to produce and deliver the order.
Local preferences
The website stores ffn_privacy_notice_v3 to remember that the privacy notice has been acknowledged, ffn_cart_v2 to keep product identifiers, sizes and quantities in the shopping bag, and ffn_language_v1 to remember the visitor's detected or selected site language. These values stay in the visitor's browser and are not used for tracking.
3. Purposes and legal bases
- Providing, securing and maintaining the website: legitimate interests and technical necessity.
- Processing orders, payments, delivery, returns and customer service: performance of a contract and steps requested before a contract.
- Keeping financial and transaction records: compliance with legal and tax obligations.
- Preventing fraud and handling disputes: legitimate interests and legal claims.
- Optional marketing or analytics: consent, if these tools are introduced later.
4. Recipients
Stripe is the selected payment platform. Personal data may also be shared only where necessary with the hosting provider, garment supplier, carrier, transactional email provider and professional advisers involved in operating the store. Any transfer outside the European Economic Area is handled using the safeguards required by applicable data-protection law.
5. Retention
Order and accounting records will be retained for the statutory Netherlands record-keeping period. Customer-service and dispute records are retained only as long as needed for the request or legal claim. Security logs follow the documented retention period of the selected host. Local preferences remain until the visitor clears the website data or the preference version changes.
6. Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. You can also lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.
7. External platforms
Links to Instagram and YouTube lead to services operated by third parties. Their own privacy terms apply after you follow those links. No social-media tracking code is embedded on this website.
8. Updates
This statement must be updated before adding new payment, analytics, advertising, newsletter, customer-account or support tools. Material changes will be shown with a revised update date.
9. Checkout storage — technical update, 9 September 2026
Paid orders and delivery tasks are stored in a private database on the store server, separate from public website files. This includes the contact and delivery details described above, product sizes and quantities, and payment references, but not complete card details. A temporary session-storage entry named ffn_checkout_* links this browser tab to its checkout. A local ffn_paid_* marker prevents the same purchase from removing shopping-bag items twice; it remains until browser site data is cleared. The current language preference uses ffn_language_v2, replacing the earlier version. These entries are functional, not advertising identifiers.