Privacy policy

Hockey world Cup webshop – Privacy policy

Last updated: 16 July 2026

Topfanz BV operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a personalised shopping experience (the “Services”).

The Hockey World Cup webshop is operated by Topfanz BV in connection with the official merchandise activities of the International Hockey Federation, also known as the Fédération Internationale de Hockey (“FIH”).

The webshop is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction through the Services, or otherwise communicate with us.

In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail in relation to the collection, use, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used and disclosed as described below.

PERSONAL INFORMATION WE COLLECT OR PROCESS

When we use the term “personal information”, we mean information that identifies you or another individual, or that can reasonably be linked to you or another individual.

Personal information does not include information that has been collected anonymously or irreversibly de-identified so that it can no longer reasonably be used to identify an individual.

Depending on how you interact with the Services, where you live and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from such information:

Contact details

This may include your name, billing address, delivery address, telephone number and email address.

Financial and payment information

This may include payment card information, payment method, payment confirmation, transaction details, refunds and other payment-related information.

Payment card details are generally processed directly by Shopify, the applicable payment provider or another authorised payment service provider. Topfanz BV does not necessarily receive or retain complete payment card details.

Account information

This may include your username, password, security information, account preferences and settings.

Transaction and order information

This may include the products that you view, add to your basket, add to a wishlist, purchase, return, exchange or cancel, as well as order values, discounts, delivery details, order status and previous transactions.

Communications with us

This may include information that you provide when contacting us, submitting a customer support request, making a complaint, requesting a return or refund, or otherwise communicating with us.

Device and technical information

This may include information about your device, browser, operating system, network connection, IP address, cookie identifiers and other unique identifiers.

Usage information

This may include information about how and when you access, interact with or navigate through the Services, including pages viewed, products viewed, links selected and other website interactions.

SOURCES OF PERSONAL INFORMATION

We may collect personal information from the following sources:

· directly from you, including when you create an account, visit or use the Services, place an order, contact us or otherwise provide personal information to us;

· automatically through the Services, including through your device, cookies, pixels and similar technologies;

· from Shopify and other service providers that provide technology, payment, logistics, fulfilment, analytics, customer support or other services on our behalf;

· from FIH where this is relevant to the operation or administration of the official FIH merchandise programme;

· from our business partners, marketing partners or other third parties, where permitted by applicable law.

HOW WE USE YOUR PERSONAL INFORMATION

Depending on how you interact with us and which Services you use, we may process your personal information for the purposes described below.

Providing and performing the Services

We use personal information to provide the Services, perform our contract with you and process transactions.

This includes:

· processing and fulfilling orders;

· processing payments and refunds;

· arranging delivery;

· facilitating returns and exchanges;

· providing order confirmations and status notifications;

· creating and maintaining customer accounts;

· remembering customer preferences;

· responding to customer service requests;

· handling complaints and disputes;

· providing product recommendations;

· administering promotions and discounts;

· providing a personalised shopping experience.

Customising and improving the Services

We may use personal information to understand how customers use the Services, improve the webshop, optimise our product range, improve customer support and develop or improve our services and commercial activities.

Marketing and advertising

Where permitted by applicable law, we may use your personal information for marketing and promotional purposes.

This may include:

· sending marketing or promotional communications by email, SMS or post;

· displaying advertisements for products or Services;

· measuring the effectiveness of marketing campaigns;

· personalising advertising based on products that you have viewed, purchased or added to your basket;

· using advertising and analytics services provided by Shopify or other authorised service providers.

Where consent is required, we will only send direct marketing communications or use non-essential marketing technologies after obtaining the required consent.

You may withdraw your consent or unsubscribe from marketing communications at any time.

Security and fraud prevention

We use personal information to:

· verify customer accounts and transactions;

· provide a secure shopping and payment experience;

· detect, prevent and investigate fraud;

· detect potentially unlawful, malicious or unsafe activity;

· protect the Services, our customers and our business;

· prevent misuse of promotions, payment methods or customer accounts;

· secure our systems and infrastructure.

When you create an account, you are responsible for keeping your login credentials confidential. You should not share your username, password or other access information with another person.

Communicating with you

We use personal information to:

· respond to enquiries;

· provide customer support;

· send information relating to orders, payments, deliveries, returns or refunds;

· communicate important changes to the Services;

· maintain our customer and commercial relationship with you.

Managing the official FIH merchandise programme

The webshop forms part of the official merchandise activities associated with FIH.

Topfanz BV may use and share relevant personal information to operate, administer, evaluate, protect and improve the official FIH merchandise programme and the related webshop.

This may include using information for:

· order administration and fulfilment;

· customer service and complaint handling;

· sales, financial and operational reporting;

· merchandise programme management;

· stock and product planning;

· analysing the performance of products and collections;

· fraud prevention and security;

· protecting official FIH merchandise and intellectual property;

· complying with contractual, accounting, tax and legal obligations;

· improving the webshop, merchandise range and customer experience.

Legal and regulatory purposes

We may use personal information to:

· comply with applicable laws and regulations;

· meet accounting, tax, consumer protection and record-keeping obligations;

· respond to lawful requests from courts, law enforcement bodies, regulators or government authorities;

· establish, exercise or defend legal claims;

· investigate actual or suspected violations of our terms, policies or legal obligations;

· enforce agreements and protect our rights, property and interests;

· protect the rights, safety and interests of customers, business partners and other persons.

LEGAL BASES FOR PROCESSING

Where the General Data Protection Regulation or equivalent data protection legislation applies, we process personal information on one or more of the following legal bases:

Performance of a contract

We process information where this is necessary to enter into or perform a contract with you, including to process payments, fulfil orders, arrange delivery, provide customer support and process returns or refunds.

Legal obligations

We process information where this is necessary to comply with legal obligations, including accounting, tax, consumer protection, fraud prevention and regulatory obligations.

Legitimate interests

We process information where this is necessary for the legitimate interests of Topfanz BV, FIH or another party, provided that these interests are not overridden by your fundamental rights and freedoms.

These legitimate interests may include:

· operating and improving the webshop;

· administering the official FIH merchandise programme;

· producing sales and operational reports;

· improving the product range and customer experience;

· preventing fraud and misuse;

· protecting systems, customers, intellectual property and business interests;

· managing complaints, disputes and legal claims;

· maintaining effective relationships with customers and business partners.

Consent

We rely on your consent where required by law, including for certain marketing communications and the placement or use of non-essential cookies and similar technologies.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing performed before the consent was withdrawn.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to third parties where this is necessary for the purposes described in this Privacy Policy, subject to appropriate contractual, technical and organisational safeguards.

Shopify

We share personal information with Shopify, which hosts the webshop and provides the ecommerce infrastructure used to deliver the Services.

Service providers

We may disclose personal information to vendors and other service providers that perform services for us or on our behalf, including:

· payment processing;

· IT services and website hosting;

· cloud storage;

· data analytics;

· customer support;

· order management;

· warehousing;

· personalisation and printing;

· fulfilment;

· delivery and shipping;

· returns management;

· fraud prevention;

· accounting and professional advice.

These parties may only process personal information for the agreed purposes and in accordance with applicable data protection requirements.

International Hockey Federation

We may disclose relevant personal information to the International Hockey Federation, also known as the Fédération Internationale de Hockey (“FIH”), as the owner, rights holder and commercial partner associated with the official FIH merchandise programme.

The personal information disclosed to FIH may include:

· your name and contact details;

· your billing country and delivery country;

· information about products ordered;

· order value and applicable discounts;

· payment and refund status, but not necessarily complete payment card details;

· delivery, return, cancellation and exchange information;

· customer service information relating to an order, enquiry, complaint or dispute;

· information relating to suspected fraud, misuse or security incidents;

· aggregated, statistical or pseudonymised information concerning customers, orders, sales and use of the webshop.

FIH may receive and use this information for purposes including:

· administering and evaluating the official FIH merchandise programme;

· sales, financial and operational reporting;

· commercial and product analysis;

· customer service oversight;

· protecting official FIH merchandise, branding and intellectual property;

· fraud prevention and security;

· handling complaints, disputes and legal claims;

· complying with legal, regulatory, accounting or contractual obligations;

· improving FIH merchandise activities and the customer experience.

FIH will not receive or use your personal information for its own direct electronic marketing merely because you purchased a product through the webshop. Where FIH wishes to use personal information for its own direct marketing, it must have an appropriate legal basis and provide the information required under applicable data protection law.

Depending on the specific processing activity and the arrangements between Topfanz BV and FIH, FIH may act as an independent data controller for processing purposes that it determines itself.

Where Topfanz BV and FIH jointly determine the purposes and essential means of a particular processing activity, they may act as joint controllers for that activity and will allocate their respective data protection responsibilities as required by applicable law.

Business and marketing partners

We may disclose personal information to authorised business and marketing partners where this is necessary to provide services, conduct permitted marketing activities or measure the effectiveness of advertising.

These partners will process personal information in accordance with their own privacy notices and applicable data protection law.

Where legally required, personal information will only be used or disclosed for targeted advertising or similar marketing purposes after obtaining the required consent.

At your direction or with your consent

We may disclose information where you direct, request or authorise us to do so, including:

· providing information to a delivery provider;

· using a third-party login service;

· interacting with social media widgets;

· sharing information with another party at your request.

Affiliates and corporate group

We may disclose information to companies affiliated with Topfanz BV or within our corporate group where this is necessary for internal administration, service delivery, security, reporting or another legitimate business purpose.

Business transactions and legal disclosures

We may disclose information:

· in connection with a merger, restructuring, financing, acquisition, sale, insolvency or other business transaction;

· to comply with a subpoena, court order, search warrant or other lawful request;

· to meet legal or regulatory obligations;

· to enforce our terms and policies;

· to establish, exercise or defend legal claims;

· to protect the Services, our business, our customers or other persons.

RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify.

Shopify collects and processes personal information about your access to and use of the Services to provide, secure, personalise and improve its ecommerce services.

Information that you submit through the Services will be transmitted to and processed by Shopify and may be shared with third parties involved in providing the Shopify services.

Shopify and its service providers may process personal information in countries other than your country of residence.

We may use enhanced Shopify features that use information derived from your interactions with this store, other Shopify merchants and Shopify.

For certain processing activities connected with these enhanced services, Shopify may determine independently how and why personal information is processed. In those circumstances, Shopify acts as a separate data controller and is responsible for handling requests relating to that processing.

More information about Shopify’s processing practices and your associated rights is available in the Shopify Consumer Privacy Policy and through Shopify’s Privacy Portal.

COOKIES AND SIMILAR TECHNOLOGIES

We and our authorised service providers may use cookies, pixels, local storage and similar technologies to operate, secure, analyse, personalise and improve the Services.

Some cookies are strictly necessary for the functioning of the webshop and cannot be disabled through our consent mechanism.

Other cookies, including analytics, personalisation and advertising cookies, will only be used where permitted by applicable law and, where required, after obtaining your consent.

You may manage your cookie preferences through the cookie consent tool made available on the webshop.

You may also configure your browser to block or delete cookies. Blocking certain cookies may affect the availability or functionality of parts of the Services.

THIRD-PARTY WEBSITES AND LINKS

The Services may contain links to websites, applications or other online platforms operated by third parties.

When you follow a link to a third-party service that is not controlled by us, you should review the applicable privacy policy, security policy and terms of service.

We do not control and are not responsible for the privacy, security, accuracy, availability or content of third-party websites or platforms.

Information that you publish in public or semi-public areas, including through social media platforms, may be visible to other users and may be processed by the relevant platform or other third parties.

The inclusion of a third-party link does not necessarily constitute an endorsement of that third party, its services or its content.

CHILDREN’S DATA

The Services are not specifically directed at children, and we do not knowingly collect personal information directly from children who are below the minimum age required to provide valid consent under applicable law.

Where a child purchases merchandise, the purchase should be made or authorised by a parent, guardian or other legally authorised adult.

If you are a parent or guardian and believe that a child has provided personal information to us without appropriate authorisation, please contact us using the details below.

Where legally required and after appropriate verification, we will take reasonable steps to delete the information.

SECURITY OF YOUR PERSONAL INFORMATION

We implement reasonable technical and organisational measures designed to protect personal information against:

· unauthorised access;

· unlawful processing;

· accidental loss;

· destruction;

· alteration;

· unauthorised disclosure.

However, no security measure or transmission method is completely secure. We cannot guarantee absolute security.

Information sent through unsecured communication channels may be intercepted. You should therefore avoid sending sensitive or confidential information through an unsecured channel.

RETENTION OF YOUR PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

· perform our contract with you;

· maintain your account;

· process orders, returns and refunds;

· provide customer support;

· meet legal, tax, accounting and regulatory obligations;

· prevent fraud and misuse;

· resolve disputes;

· establish, exercise or defend legal claims;

· enforce agreements and policies.

The applicable retention period depends on factors including:

· the type of information;

· the purpose of processing;

· the duration of the customer relationship;

· contractual requirements;

· statutory limitation periods;

· accounting and tax retention obligations;

· the existence of a dispute, complaint or legal claim.

When personal information is no longer required, we will delete or anonymise it, unless continued retention is permitted or required by law.

YOUR RIGHTS AND CHOICES

Depending on where you live and subject to applicable exceptions and limitations, you may have some or all of the following rights regarding your personal information.

Right of access

You may request confirmation as to whether your personal information is being processed and obtain access to that information.

Right to rectification

You may request the correction of inaccurate personal information and the completion of incomplete information.

Right to erasure

You may request the deletion of personal information in circumstances provided for by applicable law.

Right to restriction of processing

You may request that the processing of your personal information be restricted in certain circumstances.

Right to data portability

Where processing is based on consent or a contract and is carried out by automated means, you may have the right to receive personal information that you provided in a structured, commonly used and machine-readable format.

You may also have the right to request that this information be transmitted directly to another controller where technically feasible.

Right to object

You may object to processing based on legitimate interests, including profiling based on those interests.

Where you object, we will stop processing the personal information unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.

You may object at any time to the processing of your personal information for direct marketing purposes.

Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

Rights concerning automated decision-making

Where applicable, you may have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you, subject to the exceptions provided by law.

Right to opt out of sale, sharing or targeted advertising

Depending on where you live, you may have the right to opt out of the sale or sharing of personal information or its use for targeted advertising.

Where such rights apply, they may be exercised through the privacy or cookie controls made available through the Services.

If you visit the webshop using a legally recognised opt-out preference signal, such as Global Privacy Control, we may treat the signal as an opt-out request where required by applicable law and where technically supported.

Managing communication preferences

You may unsubscribe from promotional emails by using the unsubscribe link contained in those emails.

Even after unsubscribing from promotional communications, we may continue to send non-promotional communications relating to your account, purchases, payments, deliveries, returns, security or other service-related matters.

EXERCISING YOUR RIGHTS

You may exercise your rights by contacting Topfanz BV using the contact details below.

We will not discriminate against you because you have exercised a privacy right.

Before responding to a request, we may need to verify your identity. We will only request information that is reasonably necessary to verify the request.

Where permitted by law, you may appoint an authorised representative to submit a request on your behalf. We may request evidence that the representative is authorised to act for you and may ask you to confirm your identity directly.

We will respond within the time limits required by applicable law.

Requests concerning personal information processed independently by Shopify should be directed to Shopify through its applicable privacy channels.

Requests concerning personal information processed independently by FIH may also be submitted directly to FIH through the privacy or contact channels published on its official website.

COMPLAINTS

If you have a complaint about how Topfanz BV processes your personal information, please contact us using the details below.

We will investigate the complaint and respond in accordance with applicable law.

You also have the right to lodge a complaint with the data protection authority responsible for your place of residence, place of work or the location of an alleged infringement.

In Belgium, complaints may be submitted to the Belgian Data Protection Authority.

If your complaint concerns processing independently performed by FIH or Shopify, you may also contact that organisation or the competent supervisory authority.

INTERNATIONAL TRANSFERS

Your personal information may be transferred to, stored in or processed in a country other than the country in which you reside.

This may include transfers to countries in which Shopify, FIH or other service providers operate.

FIH is established in Switzerland. Where personal information is transferred to Switzerland, the transfer may be based on an applicable adequacy decision where such a decision remains valid and applicable.

Where personal information is transferred outside the European Economic Area or the United Kingdom to a country that has not been recognised as providing an adequate level of protection, we will use an appropriate transfer mechanism where required.

Such mechanisms may include:

· the European Commission’s Standard Contractual Clauses;

· the UK International Data Transfer Agreement;

· a UK Addendum to the European Commission’s Standard Contractual Clauses;

· binding corporate rules;

· another legally recognised transfer mechanism.

Where required, supplementary safeguards will be implemented based on the circumstances of the transfer.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to:

· the Services;

· our processing activities;

· our relationship with FIH, Shopify or other partners;

· operational or commercial practices;

· legal or regulatory requirements.

When we update this Privacy Policy, we will publish the revised version on the webshop and update the “Last updated” date.

Where required by applicable law, we will provide additional notice or obtain renewed consent.

CONTACT

If you have questions about this Privacy Policy, our privacy practices or the processing of your personal information, or if you wish to exercise your rights, please contact:

Topfanz BV
Industriepark 1227
3545 Halen
Belgium

Email: info@topfanz.com

For the purposes of applicable data protection legislation, Topfanz BV is the data controller responsible for personal information collected and processed for the operation of the webshop, order administration, payment coordination, fulfilment, delivery, returns and customer support.

Where personal information is disclosed to FIH and FIH independently determines the purposes and essential means of processing that information, FIH acts as a separate data controller for that processing.

Where Topfanz BV and FIH jointly determine the purposes and essential means of a specific processing activity, they may act as joint controllers for that activity. The parties will allocate their respective responsibilities in accordance with applicable data protection legislation, and the essence of any legally required joint-controller arrangement will be made available to affected individuals.