Your privacy matters to us. This policy explains what personal data we collect when you use https://www.lorevine.nl, why we collect it, who we share it with, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Data controller
Lorévine("Lorévine", "we", "us") is the data controller for personal data processed via this website.
- Registered address: Talentsquare 497, Tilburg, Netherlands
- KVK number: 98981684
- Email: info@lorevine.nl
2. What we collect
- Account information: name, email address, profile picture (if you sign in with Google), password hash (if you sign up with email).
- Order information: shipping address, phone number (optional), order contents, order status, invoice records. We do not store full card details — payments are processed by Stripe.
- Usage information: IP address, browser type, pages visited, referrer URL, timestamps, basic device information. Used for site security and performance.
- Cookies: see our Cookie Policy for details.
3. Why we process your data (legal basis)
- Performance of a contract (Art. 6(1)(b) GDPR): processing your order, shipping, customer service, returns, and warranty handling.
- Legal obligation (Art. 6(1)(c)): tax, accounting, and consumer-rights record-keeping obligations under Dutch law.
- Legitimate interest (Art. 6(1)(f)): site security, fraud prevention, aggregated analytics to improve the service.
- Consent (Art. 6(1)(a)): non-essential cookies and marketing communications. You can withdraw consent at any time.
4. Who we share data with
We only share personal data with processors that are essential to running the service, each bound by a data processing agreement:
- Payments: Stripe Payments Europe Ltd. (Ireland)
- Hosting & CDN: Vercel Inc.
- Database & file storage: Supabase
- Transactional email: Resend
- Authentication (optional): Google LLC
- Error monitoring: Sentry
- Carriers (shipping addresses only): PostNL, DHL, GLS or equivalent
We never sell or rent personal data to third parties.
5. International transfers
Some processors (e.g. Vercel, Stripe) may process data outside the European Economic Area. Where this is the case, transfers rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission.
6. Retention
Order and invoice records are kept for 7 years to meet Dutch tax-law obligations. Account data is kept while your account is active and for up to 12 months after closure (to handle returns and customer-service queries). Marketing consents are kept until you withdraw them. You may request deletion of your account at any time, subject to the retention obligations above.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request erasure (subject to our legal retention obligations)
- Restrict or object to processing
- Receive your data in a portable, machine-readable format
- Withdraw consent for processing based on consent
To exercise these rights, email us at info@lorevine.nl. We respond within 30 days.
8. Right to lodge a complaint
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl, or with the supervisory authority in your country of residence.
9. Security
We use industry-standard technical and organisational measures: HTTPS everywhere, hashed passwords (bcrypt), least-privilege access controls, encrypted backups, and continuous security monitoring. No system is perfectly secure; in case of a data breach we will notify affected users and the supervisory authority within the timeframes required by Articles 33–34 GDPR.
10. Children
Our store is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated by email or via a notice on the site.
12. Contact
Privacy questions: info@lorevine.nl.