Privacy policy
Last updated: 2 September 2026
1. Who we are
thebastard.com is operated by Fyron Group B.V., trading as The Bastard, Oudeweg 153, 2031 CC Haarlem, the Netherlands. Chamber of Commerce (KvK) 64553183, VAT NL855716691B01. Fyron Group B.V. is the data controller for the personal data described in this policy. You can reach us at info@thebastard.com.
2. What personal data we collect
- Order data: name, delivery and billing address, e-mail address, phone number, the products you order and your payment status. Payments are processed by Shopify Payments and the payment provider you choose (for example iDEAL or Bancontact). We never receive your full card or bank details.
- Account data: if you create an account, your login details, order history and saved addresses.
- Customer service data: what you send us by e-mail, through our helpdesk, or through our product registration and service request forms (name, contact details, product and serial number, proof of purchase, photos of a defect).
- Newsletter: your e-mail address and which e-mails you open or click.
- Website usage: IP address, device and browser type, pages visited and how you got to our site. We only collect this with cookies after you have given consent (see section 6).
- Dealer locator: the location you type into the dealer locator so we can show dealers near you.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, including calling you to schedule delivery of a kamado | Performance of a contract |
| Warranty registration, repairs and customer service | Performance of a contract and legal obligation (statutory warranty) |
| Sending our newsletter | Your consent, which you can withdraw at any time via the unsubscribe link |
| Measuring how our website is used (statistics) | Your consent via the cookie banner |
| Showing you relevant advertisements on Google, Meta (Facebook, Instagram) and TikTok | Your consent via the cookie banner |
| Preventing fraud and securing our shop | Legitimate interest |
| Bookkeeping and tax administration | Legal obligation (7-year retention under Dutch tax law) |
4. Who we share your data with
We only share personal data with parties that help us run the shop, and only what they need for their task:
- Shopify (Shopify International Ltd.): our e-commerce platform, hosting and payment processing.
- Carriers: to deliver your order. For kamados a specialised carrier will contact you to schedule delivery.
- Oracle NetSuite via Celigo: our order and stock administration.
- MailerLite: sending our newsletter.
- Google (Tag Manager, Analytics 4, Ads), Meta and TikTok: statistics and advertising, only after your consent. Measurement data is routed through our own server-side tagging environment (Addingwell) so that we can limit what these parties receive.
- CookieFirst: storing your cookie preferences.
- Stockist: the dealer locator map.
- Jotform: the product registration and service request forms.
- Companies within Fyron Group (OFYR, Grill Guru, Grizzly Grills): shared customer service and administration.
We have data processing agreements with these parties. We never sell your personal data.
5. Transfers outside the EEA
Google, Meta, TikTok and Jotform may process data in the United States. Shopify processes data in Canada and the United States. Where data leaves the European Economic Area we rely on the EU–US Data Privacy Framework, the European Commission's Standard Contractual Clauses, or an adequacy decision (Canada).
6. Cookies
We use cookies and similar techniques. Necessary cookies are always placed; statistics and advertising cookies only after you accept them in the cookie banner. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer. Which cookies we use, by whom and for how long, is listed in our cookie policy.
7. How long we keep your data
- Order and invoice data: 7 years after the order (tax obligation).
- Account data: until you delete your account or after 3 years of inactivity.
- Warranty registration: for the duration of the warranty period of the product.
- Customer service correspondence: 2 years after the request has been closed.
- Newsletter: until you unsubscribe.
- Website statistics: a maximum of 14 months.
8. Your rights
You have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to processing, and to withdraw consent. Send your request to info@thebastard.com. We respond within one month and may ask you to verify your identity. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the supervisory authority in your own country.
9. Security
Our shop runs on Shopify, which is PCI DSS Level 1 certified. All traffic is encrypted (HTTPS). Access to customer data within Fyron Group is limited to employees who need it for their work.
10. Children
Our shop is not intended for children under 16. We do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes
We may update this policy, for example when we start using a new service provider. The current version is always available at thebastard.com. The date at the top shows when it was last changed.