By country

Refund Policy Generator Netherlands

GDPR through the UAVG, cookie rules in the Telecommunicatiewet, and an AP with firm views on cookie walls.

Generate your refund policy Read the refund policy guide

Dutch consumers get a fourteen-day reflection period and a conformity expectation that runs on the reasonable lifespan of the product rather than a fixed two years - which means a policy quoting a flat two-year warranty is understating the position.

The Netherlands applies GDPR through the Uitvoeringswet AVG, with the Autoriteit Persoonsgegevens as regulator. Cookies are governed separately by Article 11.7a of the Telecommunicatiewet, which predates GDPR and which the AP enforces on its own terms.

The AP has been unusually direct about banner design. Its published position is that continuing to browse is not consent, that a cookie wall forcing acceptance in exchange for access generally fails the freely-given test, and that tracking cookies require consent obtained before they are placed. It has run sweeps and published the results.

Dutch employment law adds a second layer for staff data. Works councils have co-determination rights over systems capable of monitoring employees, which means a monitoring tool can be lawful under GDPR and still not deployable without agreement.

What a refund policy in the Netherlands has to cover

The fourteen-day bedenktijd and when it starts for goods, services and digital content
Conformity based on what the buyer may reasonably expect from the product’s lifespan
Who bears return shipping, disclosed before the order if it falls to the customer
The permitted exclusions, including sealed hygiene items and personalised goods
Refund timing, and the right to withhold until the goods or proof of return arrive

How the Netherlands actually moves personal data

iDEAL and Dutch payment rails

iDEAL payments route through the customer’s bank and return an identity confirmation, which is a disclosure to a financial institution as well as a payment step.

Analytics under the narrow exemption

The AP accepts a limited consent exemption for analytics configured with no data sharing, no profiling and no advertising use. Standard configurations do not qualify.

Cookie walls and paid alternatives

The AP treats a hard cookie wall as invalidating consent. Any paid alternative model has to be described honestly in the policy.

Employee monitoring tools

Ticketing, analytics and productivity tools capable of individual monitoring, which trigger works council rights.

Transfers to US vendors

The AP expects a documented transfer mechanism per destination, and has been explicit that a Data Privacy Framework certification must actually be current.

Third parties the draft will ask you about

Mollie · Adyen · iDEAL · PostNL · Exact · AWS eu-west-1 · TransIP · Matomo

The rules that apply

GDPR + Uitvoeringswet AVG

The Dutch implementation, including national rules on identification numbers, criminal data and the digital age of consent set at sixteen.

Telecommunicatiewet Article 11.7a

Consent before placing or reading information on a device, with an exemption limited to what is strictly necessary and to certain analytics with no or little privacy impact.

Autoriteit Persoonsgegevens

The named supervisory authority, active on cookie banners, data broking and the security of personal data.

BSN restrictions

The Dutch citizen service number may only be processed where a statutory basis exists, which rules it out for most commercial purposes.

Works council co-determination

Systems capable of monitoring staff need works council agreement, independent of the GDPR basis.

What the generated refund policy contains

The statutory right, stated separately
Consumer cancellation rights exist whatever your policy says, so they are set out first and your goodwill terms second.
Time limits and how they are counted
When the clock starts, whether it runs in calendar or working days, and what stops it.
Condition and evidence requirements
What state goods must come back in, and what proof of purchase you accept.
Who pays return postage
Split between faulty and change-of-mind returns, because the law treats them differently.
Refund method and timing
Original payment method, and the deadline you commit to once goods or notice are received.
Exclusions, stated lawfully
Perishables, personalised goods, unsealed hygiene items and downloaded digital content - the exclusions the law actually permits.

Dutch compliance essentials

Configure the banner to place nothing before consent
And record the consent with a timestamp and the banner version.
Test whether your analytics really fits the exemption
If it shares data with the provider, it does not.
Set the digital age of consent to sixteen
With a parental consent route below it.
Take monitoring tools to the works council
Before deployment, not after.
Publish the AP as the complaint route
With its website, alongside your own contact for privacy requests.

Where this usually goes wrong

Consent inferred from continued browsing

The AP has said plainly this is not consent, and it is the finding its sweeps report most often.

A hard cookie wall

Blocking access unless a visitor accepts tracking generally fails the freely-given requirement in the AP’s view.

Claiming the analytics exemption without meeting its conditions

It requires no sharing with the provider for its own purposes and no use for profiling or advertising.

Processing the BSN without a statutory basis

It is restricted to specific legal purposes and cannot be used as a general customer reference.

Deploying monitoring tools without works council agreement

A GDPR basis does not substitute for co-determination.

Frequently asked questions

Are cookie walls legal in the Netherlands?

The Autoriteit Persoonsgegevens takes the position that a wall forcing acceptance in exchange for access does not produce freely given consent. Models offering a genuine paid alternative are contested rather than clearly permitted.

Do I need consent for analytics in the Netherlands?

Usually yes. There is a narrow exemption for analytics with no data sharing, no profiling and no advertising use, but standard configurations of the common tools do not meet it.

What is the digital age of consent in the Netherlands?

Sixteen. Below that, consent for information society services must come from a parent or guardian.

Can I run a no-refunds policy?

Not against statutory rights. In the UK and EU a consumer’s cancellation and faulty-goods rights apply regardless of what your policy says, and advertising "no refunds" is itself treated as a misleading practice.

Do digital products have to be refundable?

The cancellation right can be waived for digital content, but only if the customer gave express consent to immediate delivery and acknowledged losing the right. That acknowledgement has to be captured at checkout, not assumed.

How long do I have to issue a refund?

In the UK and EU, within 14 days of receiving the goods back or of the customer proving they returned them. Card scheme rules and marketplace policies often impose something tighter.