Privacy Policy

1. Data Controller

Kenz Ellaey is the controller of your personal data under GDPR.

2. What We Collect

• Contact info (name, address, email, phone)
• Order and payment data
• Account credentials
• Website usage (via cookies and tracking tech)
• Communication records (customer service, emails)

3. How We Collect Data

• Provided directly (checkout, account, support)
• Automatically (cookies, web beacons) for analytics and personalization
• From third parties (Shopify, payment gateways, fulfillment services)

4. Purposes for Use

• To fulfill orders, manage accounts, and provide customer service
• Marketing purposes—newsletters, promotions (only with your consent)
• Legal compliance and security—fraud prevention
• Analytics and site improvement

5. Legal Basis for Processing

• Contract performance (orders)
• Consent (marketing communication)
• Legitimate interests (site functionality, analytics, fraud detection)

6. Cookies & Tracking

• We use essential, functional, and marketing cookies.
• Manage your preferences via our cookie banner/browser settings.

7. Disclosure to Third Parties

• To service providers (payment, logistics, IT, analytics)
• Affiliates and marketing partners
• Where required by law (e.g., court orders) or business transfers

8. International Transfers

Transfers outside the EU/EEA use standard contractual clauses ensuring data protection.

9. Data Retention

Personal data is kept for as long as needed for contracts, legal obligations, or legitimate purposes.

10. Your Rights

• Access, correct, or erase your data
• Restrict or object to processing
• Data portability
• Withdraw consent (where applicable)
• Contact us at info@kenzellaey.com to exercise any rights.

11. Complaints

If unsatisfied with our handling, you can lodge a complaint with the Dutch Data Protection Authority.

12. Security

We use industry-standard safeguards (encryption, secure servers). However, no system is 100% secure.

13. Changes

Policy updates will be posted with a revised effective date.