Privacy policy

Version: 17 September 2026

1. Who we are

AfricanFabs B.V. is responsible for the processing of personal data described in this policy. It covers our online store at africanfabs.com, africanfabs.co.uk, africanfabs.nl, africanfabs.be, africanfabs.de, africanfabs.fr, africanfabs.es and africanfabs.ch and the associated customer service. Our separate wholesale store, external marketplaces and recruitment procedures are outside its scope.

AfricanFabs B.V.
Aambeeldstraat 2E
1135 GC Edam, The Netherlands
Dutch Chamber of Commerce: 97663778
Email: info@africanfabs.com

2. The data we process

We receive data from you when you order, use an account, subscribe or contact us. We also receive technical data through our store and information from payment, delivery and other providers helping us fulfil your order and provide our services.

Contact and account: name, billing and delivery addresses, email address, telephone number, company name if applicable and account details.
Orders and payments: products purchased, selected sizes, amounts, order history, payment status, transaction references, delivery and returns. Payment providers process the information required for your payment method. We do not receive your full credit card number, but may see the last four digits.
Customer service and reviews: messages, review content and information you provide with them. A specific service enquiry may involve a photograph or body measurement. Please do not send sensitive information that is unnecessary for your enquiry.
Usage and preferences: IP address, approximate location inferred from it, browser, device, cookie and other online identifiers, pages visited, product interactions, referring websites, consent choices, newsletter and back-in-stock preferences, push subscriptions and interactions with marketing messages.

Your name, address, email address, telephone number and relevant order details are required for our ordering process. Without the necessary information, we may be unable to process your order. Marketing subscriptions are voluntary.

3. Purposes and legal bases

Orders and services: we process data for payments, delivery, returns, account management, requested back-in-stock alerts and associated communications to perform our contract with you or take steps at your request before entering into it.
Legal obligations: for tax records and compliance with lawful requests from competent authorities.
Legitimate interests: for security, fraud prevention, handling other enquiries and complaints, protecting legal claims and collecting product feedback. We balance these interests against your privacy rights. Where a message or technology requires consent, we request it.
Consent: for newsletters, marketing emails, push notifications and, where required, analytics, advertising measurement and personalised advertising. You may withdraw consent without affecting the lawfulness of processing already carried out.

We may infer preferences from purchases and interactions to make marketing more relevant. We do not make solely automated decisions producing legal or similarly significant effects on you; potential order refusals are reviewed by a member of staff.

4. Marketing, notifications and reviews

We send marketing emails, including abandoned-cart reminders, to people who have subscribed. You can unsubscribe using the link in each marketing email. Necessary order messages are separate from marketing. Back-in-stock alerts are sent on request. You can disable push notifications in your browser or device settings.

We measure interactions with marketing messages, such as opens and clicks, and use them for evaluation and segmentation, with consent where required. We use Judge.me for product reviews and review requests. Information you submit for a public review may be displayed with that review.

5. Who receives data

We share relevant data with providers of store hosting, payments, shipping, production and fulfilment, customer service, reviews, messaging, analytics, advertising and technical support. These include Shopify, our payment providers Shopify Payments, PayPal, Klarna and Mollie, shipping partners and Printful for certain printed products. External support providers receive access for their work. We also disclose data when required by law or necessary for a legal claim.

Parties processing data on our behalf operate under appropriate data processing arrangements. Some providers, such as payment and advertising platforms, also process certain data for their own purposes as independent controllers. Their own privacy information is then relevant as well.

When using AI tools to help draft customer service replies, we use only anonymised information that cannot be traced back to a customer.

6. Shopify

Our store is hosted by Shopify. Shopify processes data about visits and purchases to operate the store. We also use Shopify Network Intelligence. Through this service, Shopify processes data from interactions with our store, other stores and Shopify to improve and personalise services and support advertising. Applicable consent and opt-out choices apply. Shopify may process data for these services outside your country of residence.

Read the Shopify Consumer Privacy Policy. The Shopify privacy portal explains your rights and how to withdraw consent or object to the relevant processing by Shopify.

7. Cookies and similar technologies

We use cookies, pixels and similar technologies. Necessary technologies support functions such as the shopping cart, security and remembering privacy choices. Others measure site usage and advertising results or enable personalised advertising. Where consent is required, we request it through Pandectes before using these technologies.

We use services including Google Analytics 4, Google Ads, Meta, TikTok, Pinterest and Awin for analytics, advertising or affiliate attribution. Google Tag Manager helps manage tags. In addition to browser technologies, data may be sent directly from our systems to measurement and advertising services; applicable privacy and consent rules also apply to these transfers. Data involved may include online identifiers, device information, visits and purchases. Embedded YouTube videos may send data to Google when loaded or used, with consent where required.

You make your initial choice in the cookie banner. If you want to withdraw consent and cannot reopen the choices, contact info@africanfabs.com. You can also block or delete cookies through your browser; this may affect store functionality. Deleting cookies does not automatically erase data already sent to a provider.

8. International processing

Our providers may process data outside the European Economic Area, including in the United States and Canada. Transfers requiring safeguards must be covered by appropriate measures, such as an applicable adequacy decision or approved standard contractual clauses, supplemented by protective measures where necessary. You may contact us for information about the safeguards for a particular transfer and how to obtain a copy.

9. Retention

Required retention depends on the purpose, our relationship with you, legal obligations and any disputes.

Account data: while your account is maintained to provide account functions and order history. We do not automatically delete accounts solely because of inactivity. You may request closure and erasure; data still needed for legal obligations or claims may be retained.
Orders and records: as needed for fulfilment, returns, warranties and possible claims. Basic tax records are generally kept for seven years; records covered by the OSS scheme are kept for ten years, calculated under the applicable statutory rules.
Customer service: up to two years after resolution, unless an ongoing dispute or legal obligation requires longer retention.
Marketing: while you are subscribed or until the data is no longer needed for that purpose. A limited suppression record may be retained after you unsubscribe to respect your choice.

10. Your rights

Subject to applicable legal conditions, you may request access, correction, erasure, restriction or portability of your data. You may object to processing based on legitimate interests. You may always object to direct marketing, including related profiling, and withdraw consent.

Email info@africanfabs.com to exercise your rights. We verify your identity proportionately; please do not send an identity document unless requested. Under the GDPR, we normally respond within one month. If a permitted extension is needed, we explain why within that month. Erasure is not absolute: statutory retention obligations may take precedence.

You may complain to the Dutch Data Protection Authority or another competent supervisory authority, such as the authority where you live or work.

11. Additional choices for US customers

Depending on applicable state law, you may have additional rights, including opting out of targeted advertising and the sale or sharing of personal data as those laws define these terms. Advertising disclosures may fall within these definitions even without payment for your data. Use the Shopify data-sharing opt-out page available in our store for the relevant regions, or contact us. Where required, applicable browser opt-out signals, such as Global Privacy Control, must also be respected. Where legally permitted, you may use an authorised agent and appeal a refusal of a rights request by contacting us. We will not discriminate against you for exercising an applicable privacy right.

12. Security, children and changes

We use appropriate security measures, including two-factor authentication, limited access rights and secured devices. Our store is not directed at children and we do not knowingly collect children's data in breach of applicable rules. Contact us if you believe this has happened.

We may update this policy when our services or the rules change. The version date appears above. Where necessary, we provide additional notice of significant changes and request fresh consent when required.