Privacy Policy

Last Updated: May 4, 2026

This Privacy Policy describes how Lavonta (“the Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit our website, use our services, make a purchase on lavonta.com (or your domain), or otherwise communicate with us.

For the purposes of this Privacy Policy, “you” and “your” refer to you as the user of our Services. We process your personal data strictly in accordance with the European Union General Data Protection Regulation (EU GDPR) and applicable local privacy laws in the Netherlands.

1. How We Collect Your Personal Data

We collect personal information from three main sources:

  • Information You Provide Directly: Contact details (full name, email address, phone number), billing and shipping addresses, payment confirmation details, and customer support history.

  • Automatically Collected Data: Usage details collected via cookies and similar technologies, including your IP address, device type, browser information, time zone settings, and interaction patterns with our Site.

  • Information from Third Parties: Data received from essential service providers such as Shopify (our e-commerce platform), payment processors, and shipping logistics partners to fulfill your orders.

2. Legal Basis for Processing Data

Under the GDPR, we rely on the following legal bases to process your personal data:

  • Performance of a Contract: To process, fulfill, pay for, and deliver your orders within the Netherlands.

  • Legitimate Interests: To improve our services, optimize store performance, prevent fraudulent transactions, and maintain site security.

  • Consent: For marketing communications and optional tracking cookies (which you may withdraw at any time).

  • Legal Obligation: To comply with applicable tax, legal accounting, and consumer protection laws in the Netherlands.

3. Cookies & Tracking Technologies

We use functional and analytical cookies to ensure our Site operates correctly, remember your store preferences, and analyze site traffic. In compliance with EU regulations, you have the full right to accept or decline non-essential cookies via our cookie consent banner upon visiting our website. Please note that disabling certain cookies may impact your browsing and shopping experience.

4. How We Share Personal Data

We do not sell, rent, or trade your personal information. We only share necessary data with trusted service providers who assist us in operating our business:

  • Service Providers: E-commerce platform partners (Shopify), secure payment gateways (e.g., Shopify Payments, iDEAL processors), and logistics carrier services (such as PostNL and DHL).

  • Legal Compliance: When required by law, court order, or government authority, or to protect our legal rights, property, and safety.

5. International Data Transfers

Lavonta operates primarily within the European Economic Area (EEA), and your data is processed mainly within the EU. If personal data is transferred outside the EEA (for instance, to Shopify servers located in the United States), we ensure appropriate safeguards are implemented, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Security & Retention

We implement industry-standard technical and organizational security measures, including SSL encryption (HTTPS) and PCI-DSS compliance for payment handling. We retain your personal data only for as long as necessary to fulfill your order or to comply with statutory Dutch tax and accounting retention requirements (typically 7 years for business records).

7. Your Rights Under the GDPR

As a resident of the European Union, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request that we correct any inaccurate or incomplete information.

  • Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data when it is no longer required for processing.

  • Right to Restriction / Objection: Object to or request restriction of the processing of your personal data.

  • Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at info@lavonta.com.

8. Complaints & Regulatory Authority

If you have concerns about how we handle your data, please contact us first at info@lavonta.com so we can resolve the issue. If you feel we have not addressed your concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):