Privacy policy
Last updated: 29 May 2026
This Privacy Policy explains how Luhvia ("we", "us", "our") collects, uses, discloses, and protects your personal information when you visit our website, make a purchase, or interact with our services (the "Services").
We operate this store using Shopify as our e-commerce and hosting provider.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
Luhvia is the controller of your personal information. Shopify acts as our data processor.
1. Information We Collect
A. Information You Provide Directly
- Name
- Billing and shipping address
- Email address
- Phone number
- Payment information (processed securely by Shopify or our payment providers — we do not store full card numbers)
- Order details (purchases, returns, inquiries)
B. Information Collected Automatically
- IP address
- Device, browser, and network information
- Website usage data
- Cart activity (items added, removed, abandoned)
C. Information from Third Parties
- Payment processors
- Shopify
- Marketing and advertising partners (e.g., interactions with ads)
We do not purchase or sell personal information for monetary value.
2. How We Use Your Information
A. Order Processing
- Create and manage your account
- Process payments
- Fulfill and deliver orders
- Provide tracking updates
- Manage returns and exchanges
B. Customer Support
- Respond to inquiries
- Resolve order or delivery issues
C. Service Improvement & Personalization
- Analyze website performance
- Improve navigation
- Recommend products
D. Marketing (with consent where required)
- Send email promotions
- Display personalized or general ads
You may unsubscribe at any time.
E. Security & Fraud Prevention
- Detect and prevent fraudulent activities
- Verify account identity
- Protect payments and transactions
F. Legal Compliance
- Tax and accounting requirements
- Responses to lawful requests
3. How Your Information Is Shared
A. Shopify
Processes data required for checkout, payments, analytics, and security.
B. Service Providers
We share limited data with:
- Payment processors
- Shipping and logistics partners
- IT and analytics providers
- Email and messaging platforms
All operate under confidentiality agreements.
C. Advertising Partners
We may share hashed or anonymized identifiers to show relevant ads. Partners use your information according to their privacy policies. You can opt out of this at any time (see Section 7).
D. Legal or Business Reasons
We may disclose information if legally required or during business reorganization events.
4. Cookies & Tracking Technologies
We use cookies to:
- Enable essential functionalities
- Remember your preferences
- Analyze website usage
- Support advertising (where legally permitted)
You can manage cookies via your browser settings or our cookie banner (where applicable).
5. How We Store & Protect Your Information
We implement reasonable technical and organizational security measures. However, no system is completely secure.
Data is stored:
- on secure servers within the European Union
- and by Shopify in accordance with its Data Processing Addendum
We retain information only as long as necessary for operational or legal purposes.
6. International Transfers
Some service providers may process information outside the European Economic Area (EEA). Where this happens, we rely on recognized legal mechanisms such as Standard Contractual Clauses or equivalent protections.
7. Your Privacy Rights
Your rights depend on where you live.
A. EU, EEA & UK (GDPR)
If you are located in the EU, EEA, or UK, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Restrict or object to certain processing
- Request data portability
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens)
We process personal data on the basis of contract (to fulfil your orders), legal obligations (e.g., tax and accounting), your consent (e.g., marketing), and our legitimate interests (e.g., fraud prevention and improving our Services).
B. U.S. Residents (Including CCPA/CPRA)
Depending on your state of residence, you may have the right to:
- Know what personal information we collect
- Access your data
- Correct inaccurate data
- Delete information we maintain
- Data portability
- Opt out of targeted advertising or the sharing of your information
- Non-discrimination for exercising your rights
C. Exercising Your Rights
You may exercise your rights by contacting us at the email below. We may verify your identity before completing your request, and authorized agents may submit requests on your behalf where permitted by law.
We do not sell your personal information for money. Where we share identifiers with advertising partners for targeted advertising (see Section 3C), you may opt out at any time through our cookie banner or by contacting us.
8. Children's Privacy
Our Services are not intended for children. We do not knowingly collect personal information from minors. If you believe a child has submitted information, contact us to request removal.
9. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their policies before submitting personal information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When changes occur, we will update the "Last Updated" date. Material changes will be communicated when required by law.
11. Contact Us
If you have questions or wish to exercise your privacy rights, you may contact us at:
Monday–Friday: 9:00 AM – 5:00 PM (CET)
Email: info@luhvia.co
Phone: +31653234908
Support Information: Customer service is based in the Netherlands and provides dedicated English-language customer support. We respond to all inquiries within 24 hours on business days.
12. Company Information
This online store is operated by Luhvia, registered in the Netherlands under company registration number 99493144.