Privacy policy

Last updated: October 2025

This Privacy Policy explains how Bill Ringa Footwear — the company behind the Bill Ringa® brand and a trading name of Handelsmaatschappij Wetsteijn — collects, uses and protects your personal data when you visit our website, make a purchase or interact with our services. We process your personal data in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Dutch Implementation Act of the GDPR (UAVG).

1. Controller information

Bill Ringa Footwear
Trading name of Handelsmaatschappij Wetsteijn
Bill Ringa® is a registered trademark owned by Bill Ringa Footwear and registered with the Benelux Office for Intellectual Property (BOIP). Handelsmaatschappij Wetsteijn (trading as Bill Ringa Footwear) Registered address: Veldewater 17, Nieuwerkerk aan den IJssel, The Netherlands Chamber of Commerce (KVK): 54422019 VAT number: NL001644037B23 Website: https://billringa.com Email: info@billringa.com

Bill Ringa is the data controller responsible for the processing of your personal data under this policy. We do not currently appoint a Data Protection Officer (DPO). For privacy-related questions or requests, please contact us via the email above.

2. Personal data we collect

We may collect and process the following categories of personal data:

Identity and contact data: name, billing and shipping address, email address, phone number
Account data: username, password, order history, preferences
Order and payment data: purchased products, payment method, transaction reference. Payment information is processed securely by Mollie and its partners (e.g., PayPal). We do not store full credit or debit card details
Newsletter and marketing data: your email address and communication preferences, if you have consented to receive marketing
Technical and analytical data: IP address, browser type, operating system, referring URLs, and cookie identifiers
Advertising data: interactions with our digital marketing (Google Ads, Meta/Facebook Pixel, etc.)

We do not collect or process special category data such as health, religion, ethnicity, or political opinions.

3. Legal bases for processing

We process your data only where permitted under the GDPR. Depending on the purpose, this may include:

Purpose	Legal basis
Order processing and delivery	Performance of a contract (Art. 6(1)(b))
Account registration and management	Performance of a contract (Art. 6(1)(b))
Customer service	Legitimate interest (Art. 6(1)(f))
Sending newsletters or marketing	Consent (Art. 6(1)(a))
Compliance with tax/accounting laws	Legal obligation (Art. 6(1)(c))
Website analytics, security, fraud prevention	Legitimate interest (Art. 6(1)(f))

You may withdraw your consent at any time without affecting the lawfulness of prior processing.

4. How we use your data

We use your personal data to:

Process, fulfil, and deliver your orders
Manage your account and purchase history
Communicate with you regarding your purchases or inquiries
Send newsletters and promotions (only with your consent)
Analyse website performance and improve functionality
Display relevant advertisements via Google Ads and Meta Platforms
Comply with legal and fiscal obligations
Prevent fraud or misuse of our services

5. Data sharing and processors

We share your data only with trusted third-party service providers who help us operate our business. All processors act under written Data Processing Agreements (DPAs) compliant with Article 28 GDPR.

Purpose	Processor / Partner	Location	Safeguard
Payment processing	Mollie, PayPal	EU / US	GDPR compliant, SCCs
Newsletter & marketing	LaPosta / Brevo	EU / US	DPF or SCCs
Analytics & advertising	Google Ireland / Meta Platforms Ireland	EU / US	DPF + SCCs
Website hosting	WordPress (Automattic Inc.)	EU / US	DPF + SCCs
Shipping & logistics	PostNL, DHL, DPD, FedEx, UPS	EU / Global	Contractual necessity

All processors and their approved sub-processors are bound by confidentiality, security obligations, and data deletion duties once services end.

6. International transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards through one or more of the following:

The EU–US Data Privacy Framework (DPF), if the recipient is certified.
The Standard Contractual Clauses (SCCs, adopted 4 June 2021) issued by the European Commission.
Transfer Impact Assessments (TIAs) to evaluate residual risk.
Supplementary measures such as encryption or pseudonymisation.

You may request a copy of these safeguards by contacting us.

7. Data retention

We retain personal data only as long as necessary for the purposes collected or as required by law.

Type of data	Retention period
Order & invoice data	7 years (Dutch tax law)
Account data	Until deletion of account
Newsletter data	Until you unsubscribe
Technical logs (cookies, analytics)	Up to 26 months
Customer service communication	Up to 2 years after resolution

Data may be retained longer only if required for legal compliance or defence.

8. Cookies and tracking

Our website uses cookies and similar technologies to provide and improve services. Types of cookies:

Essential cookies – required for website operation (e.g., cart, login).
Analytics cookies – via Google Analytics 4, to understand site usage.
Marketing cookies – via Meta Pixel and Google Ads, to show relevant ads.

Non-essential cookies will only be placed after your explicit consent via our cookie banner. You can withdraw or adjust your consent at any time through cookie settings or your browser preferences. For more information:

Google Privacy Policy: https://policies.google.com/privacy
Meta Privacy Policy: https://www.facebook.com/privacy/policy
LaPosta Privacy Policy: https://laposta.nl/privacyverklaring/
Brevo Privacy Policy: https://www.brevo.com/legal/privacypolicy/

9. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access – obtain a copy of your data.
Right to rectification – correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) – request deletion of your data.
Right to restriction of processing – limit how we use your data.
Right to data portability – receive your data in a machine-readable format.
Right to object – to processing based on legitimate interest or for marketing.
Right to withdraw consent – at any time.

You can exercise these rights by contacting us at info@billringa.com. We will respond within one month, extendable by two months for complex requests. We provide one copy free of charge; additional copies may incur a reasonable administrative fee. If you believe your data has been processed unlawfully, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://www.autoriteitpersoonsgegevens.nl

10. Data security

We apply appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption on all website transactions.
Limited access for authorised personnel only.
Regular backups, software updates, and monitoring.
Encryption and pseudonymisation where feasible.

No system is completely secure, but we take all reasonable precautions to minimise risk.

11. Data breach notification

If a personal data breach occurs, we will:

Notify the Dutch Data Protection Authority (AP) within 72 hours, unless the breach is unlikely to pose a risk to individuals.
Inform affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms.

All breaches and mitigation measures are logged internally as part of our compliance records.

12. Children’s privacy

Our website and products are intended for adults. We do not knowingly collect data from persons under 16 years of age. If we learn that such data has been collected, we will delete it immediately. If you are a parent or guardian and believe your child has shared data with us, please contact us.

13. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be announced by email or a prominent notice on our website before they take effect. The current version is always available at: https://billringa.com/privacy-policy

14. Contact

For questions, data access requests, or complaints regarding this Privacy Policy or our data processing activities, please contact:

Handelsmaatschappij Wetsteijn (trading as Bill Ringa Footwear)
Bill Ringa® is a registered trademark owned by Bill Ringa Footwear and registered with the Benelux Office for Intellectual Property (BOIP). Registered in the Netherlands Chamber of Commerce (KVK): 54422019 VAT number: NL001644037B23 Email: info@billringa.com Website: https://billringa.com

Cookie	Type	Duration	Description
__Secure-BUCKET	persistent	6 months	Used by Google for advertising personalization and tracking.
_clck	persistent	1 year	Saves a unique Clarity user ID and settings to track user interactions.
_clsk	persistent	1 day	Combines multiple page views into a single session for Clarity.
_fbp	third party	3 months	This is a cookie set by Facebook and is used to deliver a series of advertisement products such as real time bidding from third party advertisers.
_ga	third party	1 year	This is a Google Analytics cookie which is used to identify unique users.
_ga_#	third party	1 year	Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.
_ga_77S6P3XBGY	persistent	1 year	Stores pageview and session information for GA4.
_gcl_au	persistent	3 months	Used by Google Ads to measure conversions and ad performance.
AEC	persistent	6 months	Ensures requests come from legitimate users and not bots.
cookie lawinfo-checkbox-functional	third party	1 year	Determines whether the user has accepted the cookie consent box.
cookielaw info-checkbox-advertisement	third party	1 year	Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website.
cookielaw info-checkbox-analytics	third party	1 year	Used to detect if the visitor has accepted the statistics category in the cookie banner. This cookie is necessary for GDPR-compliance of the website.
cookielawinfo-checkbox-necessary	third party	1 year	Determines whether the user has accepted the cookie consent box.
cookielawinfo-checkbox-others	third party	1 year	Stores the user's cookie consent state for the current domain
cookielawinfo-checkbox-performance	third party	1 year	Stores the user's cookie consent state for the current domain
CookieLawInfoConsent	persistent	1 year	Stores the complete cookie consent settings selected by the user.
cookies.js	third party	session	Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry.
DV	session	session	Used by Google to store user preferences and security settings.
NID	persistent	6 months	Used to personalize Google ads and remember user preferences.
sbjs_current	session	session	Stores the current session’s traffic source.
sbjs_current_add	session	session	Stores landing page and referrer for the current session.
sbjs_first	session	session	Stores the user’s first recorded traffic source.
sbjs_first_add	session	session	Additional metadata for the user’s first visit.
sbjs_migrations	session	session	Ensures compatibility between Sourcebuster versions.
sbjs_session	persistent	30 minutes	Tracks session duration, pageviews and referrer.
sbjs_udata	session	session	Stores visitor data (e.g. user agent, visit count).
SOCS	persistent	13 months	Stores Google’s consent settings for the user.
viewed_cookie_policy	persistent	1 year	Stores whether the user has seen and dismissed the cookie banner. Contains no personal data.
viewed_cookie_policy	persistent	1 hour	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not a user has consented to the use of cookies. It does not store any personal data.
wc_cart_hash_#	persistent	persistent	Unclassified
wc_fragments_#	session	session	Unclassified

Cookie	Duration	Description
AEC	6 months	Ensures requests come from legitimate users and not bots.
CookieLawInfoConsent	1 year	Stores the complete cookie consent settings selected by the user.
DV	session	Used by Google to store user preferences and security settings.
sbjs_migrations	session	Ensures compatibility between Sourcebuster versions.
SOCS	13 months	Stores Google’s consent settings for the user.
viewed_cookie_policy	1 hour	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not a user has consented to the use of cookies. It does not store any personal data.
viewed_cookie_policy	1 year	Stores whether the user has seen and dismissed the cookie banner. Contains no personal data.

Cookie	Duration	Description
_clck	1 year	Saves a unique Clarity user ID and settings to track user interactions.
_clsk	1 day	Combines multiple page views into a single session for Clarity.
_ga	1 year	This is a Google Analytics cookie which is used to identify unique users.
_ga_#	1 year	Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.
_ga_77S6P3XBGY	1 year	Stores pageview and session information for GA4.
sbjs_current	session	Stores the current session’s traffic source.
sbjs_current_add	session	Stores landing page and referrer for the current session.
sbjs_first	session	Stores the user’s first recorded traffic source.
sbjs_first_add	session	Additional metadata for the user’s first visit.
sbjs_session	30 minutes	Tracks session duration, pageviews and referrer.
sbjs_udata	session	Stores visitor data (e.g. user agent, visit count).

Cookie	Duration	Description
__Secure-BUCKET	6 months	Used by Google for advertising personalization and tracking.
_fbp	3 months	This is a cookie set by Facebook and is used to deliver a series of advertisement products such as real time bidding from third party advertisers.
_gcl_au	3 months	Used by Google Ads to measure conversions and ad performance.
NID	6 months	Used to personalize Google ads and remember user preferences.

shop

men

women

account

cart

support

menu

shop all