Privacy policy

Privacy Policy

Last updated: 29 August 2026

This online store is operated by By Kept, a trade name of MdBeats ("By Kept", "we", "our", "us"). Together with all related content, products and services, we refer to these as the "Services".

Our store runs on the e-commerce platform of Shopify Inc., which hosts our website and supports us in providing the Services.

In this Privacy Policy we describe what personal data we collect, why we collect it, how we use and protect it, and what rights you have. By visiting our website or placing an order, you confirm that you have read and understood this policy.

1. What information we collect

Depending on how you interact with our store, we may collect:

  • Identification and contact details: your name, email address, telephone number, billing address and shipping address.
  • Payment data: card details, payment confirmations and transaction records, processed through secure payment providers.
  • Account data: login details, password, preferences and saved settings.
  • Purchase data: products you view, add to your cart, buy, return or exchange.
  • Technical data: IP address, browser type, device and operating system, cookie identifiers and how you navigate our site.
  • Support data: the content of emails or messages you send our customer service team, including any attachments.

This information reaches us in three ways:

  • Directly from you, for example when you place an order, create an account or contact us.
  • Automatically, through cookies and similar technologies while you browse our site.
  • Through third parties who help us run the store, such as Shopify and our payment providers.

2. Why we use your information

  • Running the store: processing payments, shipping your orders and handling returns and refunds.
  • Improving your experience: remembering your preferences, personalising content and suggesting products that may interest you.
  • Communication: sending order confirmations and shipping updates, answering your questions and providing support.
  • Marketing: where permitted, sending you offers or showing you relevant advertisements. You can unsubscribe at any time using the link in our emails.
  • Protection and fraud prevention: protecting accounts, detecting suspicious activity and keeping payments secure.
  • Legal obligations: meeting our accounting, tax and other statutory duties.

We process your data on the basis of the performance of our agreement with you, your consent where required, our legitimate interests in running and securing the store, and our legal obligations.

3. Who we share your information with

We share personal data only where necessary, with:

  • Shopify, which hosts our store and processes orders on our behalf.
  • Payment providers, who handle your payment securely.
  • Carriers and fulfilment partners, so your order can be delivered.
  • Service providers who support us with analytics, marketing or customer service.
  • Authorities or advisers, where we are legally required to do so or need to defend our rights.

We do not sell your personal data.

4. Shopify

Our store is hosted on Shopify's platform. Shopify processes personal data on our behalf in order to provide the store, handle orders and payments, and support the Services. Shopify's own privacy terms apply to that processing in addition to this policy.

5. Transfers outside the European Economic Area

By Kept is established in the Netherlands. Because we deliver to the United States, the United Kingdom, Canada, Australia and New Zealand, and because some of our service providers operate outside the European Economic Area, your personal data may be transferred to, stored in or processed in a country outside the EEA. Where that happens we rely on recognised safeguards, such as the European Commission's standard contractual clauses or an adequacy decision.

6. How long we keep your information

We keep personal data only for as long as needed for the purposes described in this policy, including to meet our legal, accounting and reporting obligations. Order and invoice data is retained for the statutory retention period that applies to us in the Netherlands. Where data is no longer required, we delete or anonymise it.

7. Your rights

Under the General Data Protection Regulation you have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict certain processing, to withdraw consent, and to receive your data in a portable format. Depending on where you live, comparable rights may apply under the law of your own country.

To exercise any of these rights, write to us at info@bykept.com. We may need to verify your identity before acting on your request. You also have the right to lodge a complaint with a supervisory authority; in the Netherlands this is the Autoriteit Persoonsgegevens, and in the United Kingdom the Information Commissioner's Office.

8. How we protect your information

We apply appropriate technical and organisational measures to protect your personal data, including encrypted connections at checkout and restricted access to systems that hold personal data. No method of transmission or storage is completely secure, so we cannot promise absolute security.

9. Children

Our Services are not aimed at children and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or for legal reasons. The updated version will be published on this page with a new "last updated" date.

11. Contact us

Store name: By Kept
Email: info@bykept.com

Customer service hours (CET, Amsterdam time):
Monday to Friday: 9:00 to 20:00
Saturday: 9:00 to 18:00
Sunday: 9:00 to 18:00

Estimated response time: within 24 hours.

Business information

By Kept — MdBeats
Meidoornstraat 11, 4021 XR Maurik, The Netherlands
Company registration number (KvK): 78147271
VAT number: NL003293009B81
Email: info@bykept.com