PRIVACY POLICY

Last updated: January 2026

This Privacy Policy describes how The Kozo Company. (“we”, “our”, “us”) collects, uses, and protects personal data when you visit 8dakozo.com, purchase DAKOZO products, or contact us. The Kozo Company is the owner of the premium luggage brand DAKOZO, registered as a trademark under EUIPO. For more information about data protection in the Netherlands, you can visit the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at: autoriteitpersoonsgegevens.nl.

1. Who We Are

1. Who We Are

The Kozo Company

Kanaalpark 140 2321 JV Leiden The Netherlands

KvK: 97251038

VAT: NL005259373B67

Website: 8dakozo.com

We are the data controller for all personal data processed via this website and our Shopify webshop.

2. Personal Data We Collect

2. Personal Data We Collect

Information you provide:

• Name

• Email address

• Shipping and billing address

• Phone number (optional)

• Order information

• Payment details (processed securely by external providers)

• Messages or requests submitted to customer service

Information collected automatically:

• IP address

• Device type and browser

• Pages visited, time on pages, and interactions (analytics and cookies)

• Referring websites

We only collect the minimum data required to operate the webshop and fulfil your orders.

3. How We Collect Your Data

3. How We Collect Your Data

Via 8dakozo.com & Shopify

When you browse the website, place an order, create an account, or check out as a guest.

Via Framer

When you use landing pages or sign-up forms connected to our brand.

Via Payment Providers

Your payment information is processed by trusted partners: • Shopify Payments • Mollie • Visa • Mastercard • PayPal We never store full card details ourselves.

Via Email Tools

If you subscribe to our updates or newsletters.

4. Why We Process Personal Data

4. Why We Process Personal Data

We use your data for the following purposes:

• Processing and delivering your orders

• Managing payments, refunds, and billing

• Operating and improving our website and user experience

• Providing customer service and support

• Sending marketing updates (only if you subscribed)

• Compliance with Dutch and EU legal obligations

• Fraud detection and security monitoring We do not collect or use more data than necessary.

5. Legal Basis for Processing (GDPR)

5. Legal Basis for Processing (GDPR)

We process data based on:

• Contractual necessity (to process your order)

• Legal obligations (tax, accounting, and compliance)

• Legitimate interests (fraud prevention, business improvement)

• Consent (newsletters, marketing cookies, analytics cookies)

6. Sharing Your Data

6. Sharing Your Data

Your data may be shared with trusted partners such as:

• Shopify (webshop hosting and processing)

• Framer (landing pages)

• Payment processors (Shopify Payments, Mollie, Visa, Mastercard, PayPal)

• Shipping partners and fulfilment warehouses

• Analytics and security tools (Google Tag Manager, Shopify analytics)

We never sell your personal data to third parties.

7. International Data Transfers

7. International Data Transfers

Shopify and certain service providers may store or process data outside the European Economic Area.

When data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions

• Standard Contractual Clauses (SCCs)

• Secure encryption and access controls

8. Cookies and Tracking

8. Cookies and Tracking

We use the following types of cookies:

Functional cookies

Required for operating the webshop, checkout, and website security.

Analytical cookies (with consent)

Used to improve our website performance and understand visitor behaviour.

Tracking and advertising cookies (with consent)

Used only when explicitly accepted through our cookie banner.

Third-party tools may include:

• Google Tag Manager

• Google Analytics (if enabled)

• Shopify analytics

• Meta advertising cookies (if used)

Consent is valid for up to 13 months, after which you may be asked again.

You can disable or manage cookies through your browser settings at any time.

9. Data Retention

9. Data Retention

We keep personal data only for as long as required:

• Order and invoice data: 7 years (Dutch tax law)

• Account data: until you delete your account

• Newsletter data: until you unsubscribe

• Cookie data: according to cookie type

• Customer service messages: as long as needed to resolve your request

10. Your GDPR Rights

10. Your GDPR Rights

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Restrict processing

• Object to processing (including marketing)

• Request data portability

You can exercise these rights at any time by contacting us at: support@dakozo.com

We will respond within one month, with a possible two-month extension for complex cases.

11. Security

11. Security

We use industry-standard security measures to protect your data.

Payment details are encrypted and processed only by certified third-party providers.

12. Trademark Notice

12. Trademark Notice

DAKOZO is a registered EUIPO trademark owned by The Kozo Company.

13. Updates to This Policy

13. Updates to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on 8dakozo.com.