Privacy Policy

This privacy policy explains which personal data 9th Wave BV (“9th Wave”, “we”, “us”) collects when you visit 9thwave-cycling.com, order from us or contact us, why we do so and what your rights are.

Who we are

9th Wave BV, Prinsenweide 26, 7317 BB Apeldoorn, the Netherlands. Dutch Chamber of Commerce (KvK) number: 63396378. We are the controller for the processing of your personal data. Questions about privacy? Email us at [email protected].

What data we collect

Order and account data: name, address, email address, phone number, order details and invoices, and your username and password if you create an account.
Payment data: we receive confirmation of your payment and the payment method used. Card and bank details are processed by our payment provider Mollie; we do not store them.
Contact and service data: what you send us through forms, email, WhatsApp or the AI chat on our website, such as questions, service requests, product registrations (serial numbers, purchase date, invoice) and photos.
Technical data: IP address, browser and device type, pages visited and how you use the website, collected through cookies and server logs.

Why we use your data

To process and deliver your order and to handle returns, warranty and service requests. Legal basis: performance of the contract.
To create and manage your account. Legal basis: performance of the contract.
To answer your questions. Legal basis: performance of the contract, or our legitimate interest in helping you.
To keep our records and meet our tax obligations. Legal basis: legal obligation.
To protect our website against spam, fraud and attacks. Legal basis: legitimate interest.
To analyse and improve our website and measure our advertising. Legal basis: legitimate interest.
To send you occasional product news by email, if you have opted in, for example when registering a product. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link or by emailing us.

Who we share your data with

We only share data with parties that need it to provide their service to us, and we have agreements with them to protect your data. We never sell your data.

Mollie: payments.
Sendcloud and the carriers it works with: shipping and returns.
Google: email (Google Workspace), website statistics and advertising (Google Analytics, Google Tag Manager, Google Merchant Center) and the dealer map (Google Maps).
Chatbase: the AI chat assistant on our website.
Meta (WhatsApp): if you contact us through WhatsApp.
Cloudflare: website security and speed.
CleanTalk: spam protection for forms.
Our hosting provider: hosting the website.
Our accountant and the tax authorities, where required by law.

Data outside the EU

Some of these providers, such as Google, Cloudflare, Chatbase and Meta, may process data outside the European Economic Area, including in the United States. In that case the transfer is based on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

How long we keep your data

Order data and invoices: 7 years, as required by Dutch tax law.
Account data: as long as you have an account. You can ask us to delete it at any time.
Product registrations: as long as the warranty applies.
Messages and service requests: as long as needed to handle them and any related warranty claim.
Product news by email: until you unsubscribe.
Website statistics: for a limited period, after which they are deleted or anonymised.

Cookies

We use functional cookies that the shop needs to work, for example for your cart, your login and your language choice. We also use cookies from Google for website statistics and advertising. You can block or delete cookies at any time in your browser settings. The shop will keep working, but some functions may not.

Security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. Our website uses an encrypted connection (HTTPS).

Minors

Our webshop is intended for adults. If you are under 16, you need permission from a parent or guardian before sharing personal data with us.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing, and to receive your data in a portable format. If we process data based on your consent, you can withdraw that consent at any time. To exercise your rights, email us at [email protected]. We respond within one month and may ask you to confirm your identity.

Do you think we handle your data incorrectly? Please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your country.

Changes

We may update this privacy policy. The latest version is always on this page.

LAST UPDATED OCTOBER 11, 2026