At Lureto Loft, operated by B.H.Y. Zorg, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, place an order, contact us, or otherwise interact with our webshop.
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and applicable Dutch privacy legislation.
By using our website, you acknowledge that you have read this Privacy Policy. Where consent is legally required for particular processing activities, we will request your consent separately.
1. WHO WE ARE
The data controller responsible for the processing of your personal data is:
Registered company name: B.H.Y. Zorg
Brand name: Lureto Loft
Website: www.lureto-loft.com
Chamber of Commerce (KvK) number: 94062099
Registered address: Mahlerstraat 98, 5011MH Tilburg, The Netherlands
Email address: info@lureto-loft.com
In this Privacy Policy, "we", "us", and "our" refer to B.H.Y. Zorg, trading as Lureto Loft.
If you have questions about this Privacy Policy or how we handle your personal data, you can contact us at info@lureto-loft.com.
2. PERSONAL DATA WE COLLECT
The types of personal data we collect depend on how you interact with our website and which services you use.
Information you provide directly
When you place an order, create an account, complete a form, or contact us, we may collect:
- Full name.
- Billing address and delivery address.
- Email address.
- Telephone number, if provided.
- Order details, including products purchased, quantities, and transaction history.
- Customer service correspondence and information you choose to provide.
- Other information you voluntarily submit through our webshop.
Payment information
Payments are processed through the payment methods made available at checkout. We may receive transaction details, payment status, and limited payment-related information necessary to manage your order.
Full payment card details are generally processed by the relevant payment provider rather than stored directly by us. The precise information processed depends on the payment method used.
Technical and usage information
When you visit our website, certain information may be collected automatically, including:
- IP address.
- Browser type and device information.
- Operating system and language settings.
- Pages visited and interactions with our website.
- Referring website or traffic source.
- Approximate location derived from technical information.
- Cookie identifiers and similar online identifiers, where applicable.
Marketing and communication information
If you subscribe to marketing communications or interact with our advertisements, we may process your email address, communication preferences, consent status, and relevant interaction information.
We only send direct electronic marketing where permitted by applicable law and provide an opportunity to unsubscribe where required.
3. HOW WE COLLECT PERSONAL DATA
We collect personal data through several sources, including:
- Directly from you when you place an order, complete a form, subscribe to communications, or contact us.
- Automatically through our website, server logs, cookies, and similar technologies, subject to applicable consent requirements.
- Through Shopify and other service providers that help operate our webshop.
- Through payment providers, delivery companies, and other relevant partners when they provide information necessary to complete or manage a transaction.
- Through advertising, analytics, or marketing services, where used and legally permitted.
We do not intend to collect more personal data than is reasonably necessary for the purposes described in this Privacy Policy.
4. HOW WE USE YOUR PERSONAL DATA
We may use your personal data for the following purposes:
Processing and fulfilling orders
To accept and manage orders, process payments, arrange shipping, provide order confirmations, send delivery updates, and manage returns, refunds, and exchanges.
Customer service
To respond to questions, resolve complaints, assist with purchases, and communicate with you about your orders.
Operating and improving our webshop
To maintain website functionality, troubleshoot technical issues, understand website performance, and improve our products, services, and customer experience.
Security and fraud prevention
To identify and investigate potentially fraudulent transactions, prevent abuse, protect our website, and maintain the security of our customers and business.
Marketing and advertising
Where legally permitted, we may use relevant contact and interaction information to send promotional communications, measure campaign performance, or display advertisements.
Where consent is required, we will obtain it before processing personal data for the relevant marketing or tracking purpose.
Legal and administrative obligations
To maintain accounting and business records, comply with tax and other legal requirements, respond to lawful requests, and establish, exercise, or defend legal claims.
5. LEGAL BASES FOR PROCESSING
Under the GDPR, we rely on one or more of the following legal bases, depending on the circumstances:
- Performance of a contract: To process and fulfil your order, receive payment, arrange delivery, and provide customer support relating to your purchase.
- Legal obligation: To comply with applicable accounting, tax, consumer protection, and other legal requirements.
- Legitimate interests: To protect our business, prevent fraud, maintain website security, respond to relevant business enquiries, and improve our services, provided these interests do not override your fundamental rights and freedoms.
- Consent: To process personal data for activities that require your permission, such as certain cookies, tracking technologies, or marketing communications.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
6. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies, pixels, tags, and similar technologies to operate the webshop, remember preferences, understand website usage, and support advertising and marketing activities.
Cookies may include the following categories:
Strictly necessary cookies
These cookies are required for essential website functions, such as maintaining a shopping cart, processing checkout, protecting website security, and remembering certain essential preferences.
Functional cookies
These cookies help remember choices and preferences to improve your browsing experience.
Analytics cookies
Where used, these cookies help us understand how visitors interact with our website so that we can evaluate and improve its performance.
Advertising and marketing cookies
Where used, these technologies may help measure advertising effectiveness, personalize marketing, or show relevant advertisements.
Non-essential cookies and tracking technologies will be used only where the required consent has been obtained. You can manage your preferences through the cookie settings available on our website, where provided.
You may also be able to manage or delete cookies through your browser settings. Blocking certain cookies may affect the functionality of parts of our website.
The cookies used may vary depending on our Shopify configuration and the applications or integrations enabled in our store.
7. HOW WE SHARE PERSONAL DATA
We may share personal data with third parties when necessary for the purposes described in this Privacy Policy.
These parties may include:
Shopify and e-commerce service providers
We use Shopify to host and operate our webshop and support online shopping functionality.
Payment service providers
Payment providers process transactions and may perform fraud prevention and payment verification activities in accordance with their own privacy policies and legal obligations.
Shipping and fulfilment providers
Delivery companies and fulfilment partners may receive your name, delivery address, contact details, and relevant order information to deliver your purchases.
IT, hosting, and technical support providers
Service providers may help maintain our website, protect its security, provide technical support, and manage business systems.
Analytics and marketing providers
Where used and legally permitted, we may share relevant information with analytics, advertising, and marketing providers to measure website performance or manage advertising campaigns.
Professional advisers and public authorities
We may disclose personal data to accountants, legal advisers, insurers, regulators, courts, or government authorities where necessary or legally required.
We require service providers acting on our behalf to process personal data appropriately and to protect it in accordance with applicable law.
We do not sell your personal data to third parties in exchange for money. Certain advertising or analytics activities may nevertheless qualify as sharing or disclosure under specific privacy laws, depending on the services used and applicable legislation.
8. INTERNATIONAL DATA TRANSFERS
As we operate an online webshop and may sell products internationally, personal data may be processed in countries outside the Netherlands or the European Economic Area (EEA).
For example, some technology, hosting, payment, analytics, or other service providers may process information in countries outside the EEA.
Where personal data is transferred outside the EEA, we will ensure that an appropriate transfer mechanism or safeguard is in place where required by applicable data protection law. This may include an adequacy decision by the European Commission, Standard Contractual Clauses, or another legally recognized transfer mechanism.
Where required, additional safeguards will be considered to protect personal data during international transfers.
You can contact us at info@lureto-loft.com if you would like further information about relevant international data transfers and the safeguards used.
9. HOW LONG WE KEEP YOUR PERSONAL DATA
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, administrative, and reporting requirements.
Retention periods depend on the type of data and the purpose of processing.
- Order and transaction records: Retained for as long as necessary to administer purchases and meet applicable statutory recordkeeping requirements.
- Customer service correspondence: Retained for a reasonable period to respond to enquiries, resolve disputes, and maintain relevant business records.
- Marketing information: Retained until you unsubscribe, withdraw consent where applicable, or the information is no longer needed for the relevant purpose, subject to necessary suppression records and legal requirements.
- Technical and analytics information: Retained according to the relevant system settings, provider policies, and the applicable legal requirements.
Under Dutch tax rules, certain business administration records generally need to be retained for seven years. Where this requirement applies to our records, we will retain the relevant information for the required period.
When personal data is no longer necessary, we will delete it or anonymize it where appropriate, subject to applicable legal obligations.
10. YOUR PRIVACY RIGHTS
Depending on the circumstances and applicable law, you may have the following rights regarding your personal data:
Right of access
You may request confirmation of whether we process your personal data and obtain access to that information.
Right to rectification
You may request that inaccurate personal data be corrected or incomplete information be completed.
Right to erasure
You may request deletion of your personal data where the legal conditions for erasure are met. We may need to retain certain information where required by law or where another lawful ground applies.
Right to restriction of processing
You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability
Where applicable, you may request a copy of personal data you have provided to us in a structured, commonly used, machine-readable format, or request its transfer to another controller where the legal conditions are met.
Right to object
You may object to certain processing activities based on legitimate interests. You have an unconditional right to object to the processing of your personal data for direct marketing.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Rights relating to automated decision-making
Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal effects or similarly significant effects on you.
To exercise your rights, contact us at info@lureto-loft.com. We may need to verify your identity before fulfilling your request.
We will respond within the period required by applicable law. Under the GDPR, this is generally one month, although extensions may be permitted in certain circumstances.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. DATA SECURITY
We take appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, and misuse.
These measures may include access controls, the use of reputable service providers, secure systems, and appropriate administrative procedures.
However, no method of electronic transmission or storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.
If a personal data breach occurs, we will take the steps required by applicable law,