Privacy policy
Last updated: September 1, 2026
This Privacy Policy describes how Undercover Otter collects, uses, shares, and protects personal information when you visit undercoverotter.com, make a purchase, contact us, create an account, sign up for communications, or otherwise interact with our store and services.
Undercover Otter is the controller of the personal information described in this Privacy Policy, except where another party processes personal information for its own purposes under its own privacy policy.
Our online store is hosted by Shopify, which provides the ecommerce platform we use to offer our products and services. Shopify processes personal information on our behalf in connection with operating our store and may also process certain information for its own services and purposes under its own privacy terms.
PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with our website and services. It may include:
-
Contact information, such as your name, email address, phone number, billing address, and shipping address.
-
Order and transaction information, such as the products you purchase, order history, discounts, returns, refunds, shipping details, and information associated with your transaction.
-
Account information, if you create or use a customer account.
-
Communications you send to us, including information you provide when contacting us with a question, request, complaint, return, or other customer service inquiry.
-
Marketing preferences, including whether you have chosen to receive marketing communications from us.
-
Device and usage information, such as your IP address, browser and device information, approximate location derived from your IP address, pages or products viewed, referring pages, and information about how you interact with our website.
-
Cookie and similar technology information, as described in the Behavioral Advertising, Analytics and Cookies section of this Privacy Policy.
Payment information is processed by the payment service providers available to you at checkout. Undercover Otter does not generally receive or store your complete payment card details. We may receive information relating to the status and processing of your payment, together with other information necessary to manage your order.
We collect personal information directly from you, automatically when you use our website, and from service providers where necessary to operate our store and provide our services.
HOW WE USE YOUR PERSONAL INFORMATION AND OUR LEGAL BASES
We use personal information for the following purposes:
-
To process and fulfill orders, take payment, arrange shipping, manage returns and refunds, and provide information relating to your purchase. We process this information because it is necessary to perform our contract with you or to take steps at your request before entering into a contract.
-
To communicate with you about orders, questions, requests, complaints, returns, and other customer service matters. Depending on the circumstances, this processing is necessary to perform our contract with you or is based on our legitimate interest in providing customer service and operating our business.
-
To create and manage customer accounts and provide account-related features where these are available.
-
To detect, prevent, and investigate fraud, misuse, security incidents, and other potentially unlawful activity. We process this information based on our legitimate interests in protecting our customers, our store, and our business.
-
To maintain business, accounting, tax, and transaction records and comply with legal obligations that apply to us.
-
To operate, maintain, troubleshoot, and improve our website, services, and customer experience. Where this processing relies on non-essential cookies or similar technologies and consent is required by law, we process the information based on your consent. In other cases, we may rely on our legitimate interests in operating and improving our business where permitted by law.
-
To send marketing communications or use information for advertising purposes where you have provided consent or where otherwise permitted by applicable law. You can withdraw your consent or change your marketing preferences at any time.
-
To establish, exercise, or defend legal claims and protect our legal rights.
Where we rely on legitimate interests, those interests include operating and securing our business, preventing fraud, providing customer support, improving our services, and protecting our legal rights. We consider these interests against your rights and interests before relying on this legal basis.
SHARING YOUR PERSONAL INFORMATION
We share personal information with third parties where necessary to operate our store, provide our services, process orders, communicate with you, and comply with our legal obligations.
These third parties may include:
-
Shopify, which provides the ecommerce platform used to operate our online store.
-
Payment service providers used to process transactions.
-
Shipping, postal, and fulfillment providers used to deliver orders.
-
Email and communication service providers.
-
Analytics, security, fraud prevention, and technical service providers.
-
Marketing and advertising service providers, where applicable and subject to your privacy choices and consent where required.
-
Professional advisers, authorities, or other parties where disclosure is required by law or necessary to establish, exercise, or defend legal claims.
These service providers may process personal information only to the extent necessary to provide their services or as otherwise permitted by applicable law.
We may also disclose personal information where required to comply with applicable laws, regulations, legal processes, or lawful requests from public authorities, or where necessary to protect our rights or the rights of others.
We do not sell personal information in exchange for money. Some privacy laws define certain advertising-related disclosures of personal information more broadly as a “sale” or “sharing.” Where those laws apply, relevant opt-out rights are available as required by applicable law.
INTERNATIONAL DATA TRANSFERS
Some of the service providers we use may process personal information in countries outside the European Economic Area, the United Kingdom, or your country of residence.
Where personal information is transferred internationally, appropriate safeguards are used where required by applicable data protection law.
These safeguards may include transfers to countries that have been recognized as providing an adequate level of data protection, approved Standard Contractual Clauses, or other lawful transfer mechanisms.
Shopify and some of its subprocessors may process personal information internationally in order to provide the ecommerce services used by our store. Shopify uses legal safeguards for international transfers in accordance with applicable data protection laws.
BEHAVIORAL ADVERTISING, ANALYTICS AND COOKIES
We may use cookies, pixels, analytics tools, and similar technologies to understand how visitors use our website, operate and improve our store, measure the effectiveness of marketing, and, where applicable, provide more relevant advertising.
Some cookies and similar technologies are necessary for the website to function. Other technologies may be used for analytics, personalization, or advertising.
Where required by applicable law, non-essential cookies and similar technologies are used only after you have provided consent.
Where privacy or cookie controls are available on our website, you can use them to manage your preferences.
The technologies and service providers used by our store may change over time.
DO NOT TRACK AND PRIVACY PREFERENCE SIGNALS
Some browsers offer a “Do Not Track” or DNT setting. Because there is no universally accepted standard for how websites should respond to DNT signals, we do not generally respond to DNT signals unless required by applicable law.
Some browsers and devices can also send legally recognized privacy preference signals, such as Global Privacy Control.
Where applicable law requires recognition of such a signal and our ecommerce platform supports it, the signal may be treated as a request to opt out of certain sale, sharing, targeted advertising, or similar uses of personal information.
YOUR RIGHTS
Depending on where you live, you may have rights regarding your personal information.
For individuals covered by the General Data Protection Regulation or similar data protection laws, these rights may include:
-
The right to access the personal information we hold about you.
-
The right to correct inaccurate or incomplete personal information.
-
The right to request deletion of personal information in certain circumstances.
-
The right to request restriction of processing in certain circumstances.
-
The right to object to certain processing, including processing based on legitimate interests.
-
The right to object to the use of your personal information for direct marketing.
-
The right to data portability, where applicable.
-
The right to withdraw consent at any time where processing is based on your consent. Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.
-
The right to lodge a complaint with a competent data protection authority.
To exercise any of these rights, please contact us at info@undercoverotter.com.
We may need to verify your identity before processing a request. Certain rights are subject to limitations and exceptions under applicable law, and we may be required to retain some information even after a deletion request.
If you are located in the European Economic Area, you have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or the location of an alleged infringement. As Undercover Otter is based in the Netherlands, you may also contact the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing our services, maintaining business and transaction records, complying with legal, tax, and accounting obligations, resolving disputes, preventing fraud, and enforcing our agreements.
Different types of personal information may be retained for different periods depending on why the information was collected and the legal requirements that apply.
When personal information is no longer required, we will delete, anonymize, or otherwise securely dispose of it where reasonably possible.
If you request deletion of your personal information, we may still retain certain information where required or permitted by law.
MINORS
Our website and services are not specifically directed at children.
We do not knowingly collect personal information from children in circumstances where parental or guardian consent would be required under applicable law.
If you are a parent or guardian and believe that a child has provided us with personal information without the necessary authorization, please contact us at info@undercoverotter.com so we can review and, where appropriate, delete that information.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices, services, legal requirements, or for other operational reasons.
When we make changes, we will update the “Last updated” date shown at the top of this page.
Where required by applicable law, we will provide additional notice or obtain consent before changes affecting how we process personal information take effect.
CONTACT US
If you have questions about this Privacy Policy, how we handle your personal information, or if you would like to exercise any of your privacy rights, please contact us at:
Undercover Otter
Barndegat 8, Studio F0.06
1505 HN Zaandam
The Netherlands
Email: info@undercoverotter.com
You can also contact us through the Contact page on undercoverotter.com.
Undercover Otter is responsible for the processing of personal information described in this Privacy Policy.
