Privacy policy

Last updated: October 2026

This policy explains what personal data we collect when you visit drippy.amsterdam, shop with us or hear from us, why we use it, who we share it with, how long we keep it and what your rights are. We have tried to keep it short and in plain words.

1. Who we are

Drippy Amsterdam is a brand of UBERTUS LLP, a limited liability partnership registered in England and Wales (Companies House, Partnership No. OC439281), 32 Kinburn Street, London SE16 6DW, United Kingdom. Its designated members are Johannes Bittag and Carla Bittag Spickermann.

UBERTUS LLP is the controller of your personal data. That means we decide why and how your data is used, and we are responsible for it.

Our brand studio is at Keizersgracht 316, 1016 EZ Amsterdam, Netherlands. It is a studio, not a shop.

For any question about your data or this policy, email us at info@drippy.amsterdam.

2. The short version

  • We use your data to deliver your order, help you when you contact us and, if you want it, send you news about our jewellery.
  • We do not sell your personal data for money.
  • If you are in the EU, the EEA, the UK or Switzerland, analytics and advertising cookies only run after you accept them in our cookie banner.
  • You can unsubscribe at any time, and you can ask us to see, correct or delete your data.

3. What data we collect

When you place an order: your name, delivery and billing address, email address, phone number, what you bought, the price, your payment method and payment status, and your order, return and warranty history. We never see or store your full card details. The payment provider handles those.

When you create an account: your name, email address, saved addresses and order history. Your password is handled by Shopify and we cannot see it.

When you contact us: your name, email address, order number and whatever you write or send us, such as photos.

When you sign up for emails or text messages: your email address or phone number, your country and language, when and how you signed up, and which emails or messages you open or click.

When you write a review or answer a survey: your name as it appears with the review, your rating, text, photos or videos, and your survey answers (for example how you found us).

When you use our website: your IP address, device and browser type, your approximate location based on your IP address (country or city), the pages and products you view, what you add to your cart, how you reached our site (for example by clicking an ad) and the IDs stored in cookies. Some of this is only collected if you accept cookies (see section 9).

From delivery companies and payment providers: delivery status and tracking updates, and whether a payment succeeded or was flagged for possible fraud.

We do not ask for sensitive data, such as data about your health, religion or political views. Please do not send it to us.

4. Why we use your data, and our legal basis

Data protection law (the EU GDPR and the UK GDPR) says we need a legal reason, called a legal basis, for each use. Here is each use with its legal basis.

  • To process, pay for, ship and deliver your order, and to handle returns, exchanges and warranty claims. Legal basis: to perform our contract with you.
  • To send you service messages, such as your order confirmation, shipping and tracking updates. Legal basis: to perform our contract with you.
  • To answer your questions and help you. Legal basis: to perform our contract with you or, if your question is not about an order, our legitimate interest in helping you.
  • To ask you for a review after delivery. Legal basis: our legitimate interest in learning what customers think and showing honest reviews. You can say no at any time.
  • To keep records for tax and accounting. Legal basis: our legal obligation.
  • To prevent fraud and keep our shop safe, for example by checking risky payments and blocking traffic from countries we do not sell to. Legal basis: our legitimate interest in protecting our customers and our business, and in some cases our legal obligation.
  • To show you the right country, language and currency, based on your approximate location. Legal basis: our legitimate interest in giving you a shop that fits where you are.
  • To send you marketing emails and text messages about new pieces, offers and news. Legal basis: your consent. If you have bought from us, we may also email you about similar products where the law allows this without separate consent. For these emails the legal basis is our legitimate interest in telling customers about products like the ones they bought. You can object to this at any time, free of charge, with the unsubscribe link in every email.
  • To send you reminders about products you viewed or left in your cart. Legal basis: your consent. These reminders are marketing, so the same consent and unsubscribe rules apply.
  • To understand how our website is used and improve it (analytics). Legal basis: your consent through the cookie banner.
  • To show you our ads on other websites and apps, and to measure whether our ads work. Legal basis: your consent through the cookie banner.
  • To run our business, for example to make internal reports about sales, stock and customer service. Legal basis: our legitimate interest in running and improving our business.
  • To establish, exercise or defend legal claims. Legal basis: our legitimate interest.

Where we rely on our legitimate interest, we have weighed it against your rights and interests. You can object at any time (see section 8).

5. Who we share your data with

We only share your data when we need to. Most of the companies below are service providers (processors). They use your data only on our instructions and under a contract with us. Some, such as payment providers, delivery companies and advertising platforms, also use data for their own purposes and are responsible for that themselves under their own privacy policies.

  • Our online shop and checkout: Shopify. If you use Shop Pay or the Shop app, Shopify also handles your data under its own privacy policy.
  • Payments: Shopify Payments (for example cards, iDEAL, Bancontact, Apple Pay and Google Pay), PayPal, and Klarna through Airwallex. If you choose to pay later with Klarna, Klarna may check your identity and credit under its own privacy policy.
  • Warehouse and delivery: our fulfilment partner in the Netherlands, our shipping and warehouse software (Sendcloud and Picqer), our order tracking page (Parcel Panel) and delivery companies such as DHL, PostNL, Royal Mail, Evri, USPS, Landmark Global, Austrian Post, Swiss Post, Colis Privé and CTT. They receive your name, address and, where needed for delivery, your phone number and email address.
  • Email and text messages: Klaviyo.
  • Customer service: Gorgias (our help desk).
  • Reviews and surveys: Loox, Yotpo and KnoCommerce.
  • Analytics and advertising (only with your consent): Google (Google Analytics and Google Ads), Meta (Facebook and Instagram), TikTok and Pinterest. When you buy something after accepting marketing cookies, we may send these platforms details of the purchase together with your email address or phone number in scrambled (hashed) form, so they can measure our ads.
  • Cookie consent: Pandectes, which stores the choice you make in our cookie banner.
  • Tools that help us run the shop: location and country tools (Geo:Pro and a country blocker), workflow automation (MESA and Shopify Flow), reporting tools (Supermetrics and our own reporting system, hosted by Hetzner in the EU) and AI assistants that help our team with tasks such as analysis and drafting replies.
  • Others, only when needed: our accountants, lawyers and other advisers; the police, courts, tax offices or other authorities when the law requires it; and a buyer or successor if our business or brand is ever sold or reorganised.

We do not sell your personal data for money.

6. Data transfers outside the UK and the EEA

Some of the companies we work with are based in, or use servers in, countries outside the United Kingdom and the European Economic Area (EEA), for example the United States. When your data goes to such a country, we make sure it stays protected in one of these ways:

  • the country has been found to protect personal data well enough (an adequacy decision). This includes transfers between the UK and the EEA, and transfers to US companies certified under the EU US Data Privacy Framework and its UK extension; or
  • we use the standard contract clauses approved by the European Commission and, for UK data, the UK addendum or the UK international data transfer agreement, together with extra safeguards where needed.

You can email us for more information about these safeguards.

7. How long we keep your data

We keep your data only as long as we need it for the purpose we collected it for, and then we delete it or make it anonymous.

  • Orders, invoices and payment records: as long as tax and accounting law requires. Depending on the country, this is usually 6 to 10 years after the order.
  • Your customer account: until you ask us to close it.
  • Customer service messages: as long as needed to help you and to handle any return, warranty claim or dispute about your order.
  • Marketing: until you unsubscribe or withdraw your consent. After that we keep your email address or phone number on a do not contact list, so we do not message you again by mistake.
  • Reviews: as long as the review is published. You can ask us to remove it.
  • Cookies: for the period shown in the cookie list in our cookie banner.
  • Proof of your consent and your cookie choice: as long as we need to be able to show that we asked you properly.

8. Your rights

You have these rights over your personal data:

  • Access: ask what data we hold about you and get a copy.
  • Correction: ask us to correct or complete your data. You can also change most details yourself in your account.
  • Deletion: ask us to delete your data. We delete what we can, but we must keep some data, such as invoices, for as long as the law requires.
  • Restriction: ask us to stop using your data for a while, for example while we check a complaint.
  • Objection: object to our use of your data based on our legitimate interest. You can always object to direct marketing, and then we stop.
  • Portability: ask for the data you gave us in a common digital format, or ask us to send it to another company.
  • Withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect what we did before.

We do not make decisions that have legal or similarly significant effects on you based only on automated processing. Payment providers such as Klarna may use automated checks when you choose to pay later. Their privacy policies explain how this works.

How to use your rights: email info@drippy.amsterdam. We may ask you to confirm who you are before we act, so that nobody else gets your data. It is free, and we reply within one month. If your request is complex, we may need up to two more months, and we will tell you if that happens.

9. Cookies

Cookies are small files stored on your device. Similar techniques, such as pixels and local storage, work in a similar way. We use them in four groups:

  • Strictly necessary: needed for the shop to work, for example your cart, checkout, login and security. These are always on.
  • Preferences: remember choices such as your language and country.
  • Analytics: help us understand how visitors use our site, for example with Google Analytics.
  • Marketing: help us and our advertising partners (Google, Meta, TikTok, Pinterest and Klaviyo) show you relevant ads and emails and measure if they work.

When you first visit our site, our cookie banner asks for your choice. If you are in the EU, the EEA, the UK or Switzerland, preference, analytics and marketing cookies only run after you accept them. In other countries, such as the United States, some of them may run until you say no. Choose "Only necessary" to refuse them all, or "Preferences" to choose per group. The full list of cookies, with who places them and how long they last, is in the cookie banner under "Preferences".

You can change or withdraw your choice at any time in the cookie settings. If you do not see the cookie banner, delete the cookies for drippy.amsterdam in your browser and reload the page, and the banner will ask you again. You can also email us and we will help you.

10. Emails and text messages

We send you marketing emails if you signed up for them. Where the law allows it, we may also email customers about products similar to what they bought, unless they said no (see section 4). Every marketing email has an unsubscribe link at the bottom.

If you sign up for text messages, we send you marketing texts about our products and offers at the number you gave us. How often depends on our campaigns. Signing up is never a condition of buying. Your mobile provider's message and data rates may apply. Reply STOP to stop and HELP for help. You may get one last text to confirm that you have unsubscribed. You can also unsubscribe by emailing us.

11. Children

Our shop is not meant for children under 16. We do not knowingly collect data from children under 16. If you think a child has given us personal data, email us and we will delete it.

12. For residents of the United States

We do not sell your personal data for money. Like most online shops, we use advertising cookies and pixels from partners such as Google, Meta, TikTok and Pinterest. Some US state laws call this "sharing" personal data or "targeted advertising". To opt out, choose "Only necessary" in our cookie banner or email us.

Wherever you live in the US, you can ask us what personal data we have collected about you, and ask us to correct or delete it. Email info@drippy.amsterdam. We will not treat you differently for using these rights. We do not use sensitive personal data to profile you.

13. How we protect your data

We take reasonable technical and organisational steps to protect your data. Payments run through secure, certified payment providers, and only people who need your data for their work can access it. No system is completely secure. If a data breach is likely to put your rights at risk, we will tell you and the authorities as the law requires.

14. Complaints

If you are unhappy with how we handle your data, please tell us first at info@drippy.amsterdam. We will try to fix it.

You also have the right to complain to a data protection authority:

  • As we are based in the United Kingdom, our main authority is the Information Commissioner's Office (ICO): ico.org.uk.
  • If you live in the EU or EEA, you can also complain to the data protection authority in your own country. You can find yours on the website of the European Data Protection Board.
  • If you live in Switzerland, you can contact the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.

15. Other websites

Our site links to other websites and social media, such as Instagram and TikTok. Those have their own privacy policies. This policy does not cover them.

16. Changes to this policy

We update this policy when our shop or the law changes. The date at the top shows when it was last updated. If we make important changes, we will tell you clearly on our website or by email.

17. Contact

UBERTUS LLP (Drippy Amsterdam)
32 Kinburn Street, London SE16 6DW, United Kingdom
Email: info@drippy.amsterdam