Last updated: 25 September 2026
Who we are
This privacy policy explains how M2Commerce, trading as M2C Products (hereinafter: ‘M2C’, ‘we’ or ‘us’), handles your personal data when you visit magneticbottlebag.com (the ‘Site’), place an order, subscribe to our newsletter, enter a giveaway or otherwise contact us (together: the ‘Services’).
M2Commerce is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR).
· Name: M2Commerce (trading as M2C Products)
· Address: C. Evertsenstraat 67, 1215LK Hilversum, the Netherlands
· Chamber of Commerce (KvK) number: 91846897
· Email: customerservice@magneticbottlebag.com
What data we collect
Data you provide to us
· Contact details: name, address, phone number and email address.
· Order details: billing and shipping address, products ordered and payment confirmation.
· Account details: username, password and other information used to secure your account.
· Customer service data: the content of your messages to us.
· Giveaway data: name, email address and your answers in the entry form. If you win, also your shipping address and, if you wish, your Instagram or Facebook account name.
Data we collect automatically
Using cookies, pixels and similar technologies, we collect information about your device, browser, network connection and IP address, how you use the Site and how you interact with our emails and ads (‘usage data’). See also ‘Cookies’.
Data we receive from others
· Shopify, the platform our online store runs on.
· Payment providers, who process your payment. We do not receive full card or account numbers, only a confirmation of your payment.
· Meta (Facebook and Instagram): if you enter a giveaway through a form in an ad, we receive the details you enter in that form via Meta.
How we use your data
We only use your data for the purposes below, on the legal basis stated from Article 6(1) GDPR, and we keep it no longer than necessary.
|
Purpose |
Data |
Legal basis |
Retention period |
|
Processing and delivering orders, returns and managing your account |
Contact, order and account details |
Performance of a contract (b) |
Account: until you delete it. Orders: see ‘administration’ |
|
Customer service |
Contact and customer service data |
Performance of a contract (b) or legitimate interest (f) |
2 years after last contact |
|
Running giveaways (entry, draw, contacting winners, shipping the prize) |
Giveaway data |
Performance of the contract formed by your entry (b) |
No later than 3 months after the giveaway ends; winners’ data see ‘administration’ |
|
Announcing winners on Instagram and/or Facebook |
First and last name; account name (tag) |
Legitimate interest (f) for the name; consent (a) for the tag |
As long as the post is online; we will amend the post on request |
|
Newsletter for those who subscribe via the Site or a giveaway |
Name and email address |
Consent (a) |
Until you unsubscribe |
|
Newsletter to customers about similar products |
Name, email address and order details |
Legitimate interest (f); you can unsubscribe in every email |
Until you unsubscribe |
|
Analytics and marketing cookies, including the Meta pixel |
Usage data |
Consent via the cookie banner (a) |
As stated in the cookie banner |
|
Showing or excluding ads on Facebook and Instagram for existing customers and newsletter subscribers (Custom Audiences) |
Email address, encrypted (hashed) |
Legitimate interest (f); you can object at any time |
As long as you are a customer or subscriber |
|
Security and fraud prevention |
Usage, order and account details |
Legitimate interest (f) |
As long as necessary for this purpose |
|
Administration and legal obligations |
Order details and winners’ data |
Legal obligation (c) |
7 years (Dutch tax retention obligation) |
Giveaways
M2C occasionally runs giveaways through forms in ads on Facebook and Instagram. The following applies:
· Meta: M2C and Meta Platforms Ireland Ltd. are joint controllers for the collection of data through the ad form. How Meta handles your data is explained in Meta’s privacy policy: facebook.com/privacy/policy.
· Newsletter: you can subscribe to our newsletter through a separate checkbox that is not pre-ticked. As a thank-you, you will receive a discount code. Subscribing is not a condition of entry and does not affect your chance of winning.
· Announcement: we announce winners by first and last name. You can object to your last name being mentioned, in which case we will use your first name only. We only tag your account with your permission. If you withdraw that permission, we will amend the post.
· Terms and conditions: the terms of the current giveaway can be found at magneticbottlebag.com/winactie.
Cookies
Functional cookies are needed for the Site to work and are placed without consent. Analytics and marketing cookies, including the Meta pixel, are only placed if you consent via the cookie banner. You can change your choice at any time in the cookie settings on the Site. More information about Shopify’s cookies is available at shopify.com/legal/cookies.
Who we share your data with
We never sell your data. We only share it where necessary for the purposes above, with:
· Shopify (online store platform, hosting sending the newsletter and other emails);
· Payment providers (processing payments);
· Carriers and fulfilment partners (shipping orders and prizes);
· Meta (giveaway forms, advertising and the Meta pixel);
· Analytics providers (insight into how the Site is used, only with your consent);
· Government authorities, where required by law.
Parties that process data on our behalf do so under a data processing agreement and only on our instructions.
Transfers outside the European Economic Area
Some service providers, such as Shopify (Canada) and Meta (United States), may process your data outside the EEA. We only allow this to countries covered by an adequacy decision of the European Commission, under the EU-US Data Privacy Framework, or on the basis of the European Commission’s standard contractual clauses.
Children
Our Services are not aimed at children under 16 and we do not knowingly collect their data. Giveaway participants under 18 need permission from a parent or legal guardian. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it.
Security
We take appropriate technical and organisational measures to protect your data, such as a secure connection (https) and restricted access. No measure is completely watertight, so please do not send us sensitive information through unsecured channels.
Your rights
Under the GDPR you have the following rights:
· Access: you can ask what data we hold about you and what we do with it.
· Rectification: you can have incorrect data corrected.
· Erasure: you can ask us to delete your data, unless we are legally required to keep it.
· Restriction: you can ask us to temporarily restrict processing.
· Portability: you can receive a copy of your data or have it transferred to another party.
· Objection: you can object to processing based on legitimate interest. You can always object to direct marketing, in which case we will stop immediately.
· Withdrawing consent: you can withdraw any consent at any time, for example via the unsubscribe link in every email or via the cookie settings.
Send your request to customerservice@magneticbottlebag.com. We will respond within one month. To prevent misuse, we may ask you to verify your identity.
Complaints
If you have a complaint about how we handle your data, please contact us first so we can find a solution together. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl). If you live in Belgium, you can contact the Belgian Data Protection Authority (dataprotectionauthority.be).
Changes
We may update this privacy policy, for example if our practices or the law change. We will publish the new version on the Site with an updated ‘Last updated’ date. If the changes are significant and you are on our mailing list, we will inform you by email.
Contact
Questions about this privacy policy or your data? Email customerservice@magneticbottlebag.com or write to M2Commerce, C. Evertsenstraat 67, 1215LK Hilversum, the Netherlands.