Privacy policy

Last updated: 29 September 2026

Super Ninja is a trading name of Fruit Fly Ninja B.V., Wijdstraat 1 b, 2801 KA Gouda, Netherlands, Dutch Chamber of Commerce (KvK) number 67964664. We are the controller of your personal data as described in this privacy policy. Send questions or requests to service@superninja.eco.

What data do we process, why, and on what legal basis?

Orders. Name, address, email address, phone number, order details and payment status. Needed to process, deliver and invoice your order. Legal basis: performance of the contract and our legal retention obligation. Your payment details (such as your card number) are processed by the payment provider and do not reach us.

Customer service and contact form. Name, email address, country, order number and your message. Needed to answer your question. Legal basis: performance of the contract or our legitimate interest in handling questions properly.

Partner form. Name, company name, contact details and your message if you are interested in selling Super Ninja. Legal basis: our legitimate interest in following up business enquiries.

Newsletter. Your email address and preferences, if you sign up. Legal basis: consent. You can unsubscribe at any time via the link in every email.

Reviews. Your name or initials, your review and possibly a photo, if you post a review. Legal basis: consent.

Website visits and cookies. Technical data such as your IP address, device, browser and the pages you view. We use strictly necessary cookies to make the shop work (legal basis: legitimate interest). We only set analytics and marketing cookies if you consent in the cookie banner (legal basis: consent). You can change or withdraw your choice at any time via the fingerprint icon at the bottom right of every page.

Fraud prevention and security. Data about your order and payment to prevent misuse. Legal basis: our legitimate interest and legal obligations.

We do not make decisions about you based solely on automated processing.

Who do we share data with?

We never sell your data. We only share it with parties that help us run the shop, and only as far as necessary. We have agreements on security and confidentiality with parties that process data on our behalf.

  • Shopify: the platform of our shop and the checkout.
  • Payment providers: to process your payment.
  • Logistics: Mintsoft for orders in the United Kingdom, Packstore (using the Picqer system) for dispatching orders and handling returns in the EU, and the carrier that delivers your parcel: Royal Mail in the United Kingdom, PostNL in the Netherlands and Belgium, DHL in the other EU countries.
  • Google (Analytics, Tag Manager, Google & YouTube): statistics and advertising, only with your consent.
  • Microsoft Clarity: insight into how visitors use the website, such as clicks and scrolling. Without consent, Clarity sets no cookies.
  • TikTok: advertising and measurement, only with your consent.
  • Cookiebot (Usercentrics): recording your cookie choice.
  • Judge.me: reviews.
  • Klaviyo: email and newsletter.
  • Our accountant and public authorities, where the law requires it.

Data outside the European Economic Area

Some of these parties process data outside the EEA, for example in the United Kingdom, Canada or the United States. This only happens with appropriate safeguards, such as an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework) or standard contractual clauses.

How long do we keep your data?

  • Order and invoice data: 7 years, because of the Dutch tax retention obligation.
  • Customer service and partner messages: 2 years after the last contact.
  • Newsletter: until you unsubscribe.
  • Cookies: see the duration of each cookie in the cookie banner.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to object to processing based on legitimate interest, and to receive your data in a common format. If you have given consent, you can withdraw it at any time. Send your request to service@superninja.eco; we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office in the United Kingdom (ico.org.uk), to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the supervisory authority in your own country.

Security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.

Changes

We may update this privacy policy. The date at the top shows when this last happened.