Rijnstraat 25, Amsterdam · Effective from 23 May 2026 · v1.0
This Privacy Policy explains how The Forge V.O.F., trading as Arcane Forge, collects, uses, and protects your personal data. We are committed to handling your data responsibly and in full compliance with the General Data Protection Regulation (GDPR / AVG) and applicable Dutch privacy law.
If you have any questions about how we handle your personal data, please contact us at the address above.
We only collect personal data that is necessary for the purposes described below. The table below summarises what we collect, why we collect it, the legal basis under GDPR, and how long we keep it.
| Data | Source | Legal basis | Retention |
|---|---|---|---|
| Name & contact details | Purchase, membership, event registration | Contract fulfilment | Duration of relationship + 2 years |
| Order & payment history | Retail purchases via Shopify | Contract fulfilment | 7 years (Dutch tax law) |
| Membership details | Membership sign-up | Contract fulfilment | Duration of membership + 1 year |
| Event registration data | Event booking | Contract fulfilment | 1 year after event |
| Email address (marketing) | Newsletter / event announcement opt-in | Consent | Until withdrawal of consent |
| Community chat data | Member private chat | Legitimate interest | Duration of membership |
| Event photography | In-store events | Consent (attendance = consent) | Until removal is requested |
We do not use third-party advertising platforms, tracking pixels (such as Meta Pixel or Google Ads), or behavioural analytics tools. We do not sell, rent, or trade your personal data with any third party.
Our online store and in-store point-of-sale system are powered by Shopify Inc. When you make a purchase — online or in store — your order and payment data is processed through Shopify's platform.
We do not currently use any other third-party data processors. If this changes, this policy will be updated and you will be informed where required by law.
With your consent, we may send you marketing communications by email. We send two types:
You can opt in to either or both at the time of purchase, membership sign-up, or event registration. You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting us in store or via our website.
Withdrawing marketing consent does not affect the processing of data required to fulfil your orders, membership, or event bookings.
Under GDPR / AVG, you have the following rights regarding your personal data:
To exercise any of these rights, contact us in store or via our website. We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours and inform affected individuals without undue delay, as required by GDPR.
Arcane Forge events and services are open to all ages. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you believe we have inadvertently collected data from a child under 16 without appropriate consent, please contact us and we will delete it promptly.
Our website is hosted via Shopify. Shopify uses essential cookies required to operate the store (session management, cart, checkout). We do not use any additional tracking, analytics, or advertising cookies beyond those necessary for Shopify's core functionality.
You can manage cookie preferences via your browser settings. Disabling essential cookies may affect the functionality of our online store.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version is always available in store and on our website. Where changes are material, we will notify active members via the community chat or by email.
For any privacy-related questions, requests, or concerns:
You also have the right to contact the Dutch Data Protection Authority directly:
The Forge V.O.F. trading as Arcane Forge · KvK 97531340