Privacy policy

1. Who we are

Avenlose Home B.V., trading as Avenlose, operates this storefront. For anything in this policy, including a request to see or delete your data, write to support@avenlose.com.

2. What we collect, and why

Data	Why	Legal basis	Kept for
Name, delivery address, email, phone	To fulfil and deliver an order	Performance of a contract	7 years (tax law)
Order contents and value	Order handling, returns, the guarantee	Performance of a contract	7 years, then anonymised
Payment confirmation (not card numbers)	To confirm the order is paid	Performance of a contract	7 years
Email address alone	Newsletter, if you asked for it	Consent	Until you unsubscribe
Basket and saved items	To keep your basket between visits	Consent / strictly necessary	Stored in your browser only
Aggregate page and product views	To see which products people look at	Consent	14 months, aggregated

We never collect or store full card details. Payment is handled by the payment provider, which receives the card data directly.

3. Your basket lives in your browser

This storefront keeps your basket, your saved items and any discount code in your browser's own local storage. It is not sent to us, it is not readable by us, and it does not leave the device. Clearing your site data empties it.

4. Cookies

Two kinds only:

• Strictly necessary. Your basket, your cookie choice and session security. These are set regardless, because the shop does not work without them.
• Analytics. Aggregate counts of page and product views. Set only if you press Accept on the cookie bar, and removed if you choose Essential only.

There are no advertising cookies, no cross-site tracking pixels and no data sold or shared with data brokers.

5. Who else sees your data

Only the processors we need to run the shop, each under a data processing agreement, and each only receiving what it needs:

• The payment provider — name, email, amount
• The carrier — name, delivery address, phone
• The email provider — email address, for order and newsletter mail
• The hosting provider — server logs, including IP addresses, kept 30 days

We do not sell personal data. We do not share it for anyone else's marketing.

6. Transfers outside the EEA

Our processors are in the EEA wherever we can arrange it. Where a processor operates outside it, the transfer runs on the European Commission's Standard Contractual Clauses.

7. Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it to another provider. You can also object to processing based on legitimate interests, and withdraw consent at any time. Email support@avenlose.com and we answer within 30 days, usually much sooner.

Where we are keeping data because tax law requires it, we will say so rather than delete it, and we will delete it as soon as that period ends.

8. Complaints

If you are not satisfied with how we have handled your data you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We would rather you told us first so we can fix it.

9. Changes

If this policy changes materially we will change the date at the top and note what changed. Older versions are available on request.

Terms & conditions