Privacy policy
Last updated: [Date] · Controller: ILOSYA · [Legal entity name] · [Address] · [KVK number] · [Email address]
1. Who we are
ILOSYA is operated by [legal entity name], registered in the Netherlands (KVK [number]). We are the data controller for all personal data collected through ilosya.com. Questions about this policy can be sent to [email address].
2. What data we collect and why
Order data: Name, email address, delivery address, payment information (processed by Shopify Payments — we do not store card data), and order details including uploaded personalisation files. Basis: contract performance.
Personalisation files: Fingerprint impressions, photographs, handwriting samples, and paw print images uploaded for production. These are used solely to produce your pendant and are deleted within [X days] of order completion. Basis: contract performance.
Contact enquiries: Name and email address submitted via the contact form. Basis: legitimate interest (responding to enquiries).
Marketing email: Email address, with explicit consent only. Basis: consent. You may withdraw consent at any time via the unsubscribe link in any email.
Analytics: Anonymised website usage data via [analytics tool]. Basis: legitimate interest.
Personalisation files: Fingerprint impressions, photographs, handwriting samples, and paw print images uploaded for production. These are used solely to produce your pendant and are deleted within [X days] of order completion. Basis: contract performance.
Contact enquiries: Name and email address submitted via the contact form. Basis: legitimate interest (responding to enquiries).
Marketing email: Email address, with explicit consent only. Basis: consent. You may withdraw consent at any time via the unsubscribe link in any email.
Analytics: Anonymised website usage data via [analytics tool]. Basis: legitimate interest.
3. How long we keep your data
Order data is retained for 7 years to comply with Dutch tax law (Belastingdienst). Personalisation files are deleted within [X days] of order completion. Marketing consent is retained until withdrawn. Contact enquiries are retained for [X months].
4. Who we share data with
We share data only with service providers necessary to operate our business: Shopify (e-commerce platform, hosted in the EU/EEA), [payment processor], [shipping carrier], [email marketing platform]. We do not sell personal data to third parties.
5. Your rights (AVG/GDPR)
Under Dutch and EU law you have the right to: access your personal data · correct inaccurate data · request deletion · restrict processing · data portability · object to processing based on legitimate interest · withdraw consent at any time. To exercise these rights, email [email address]. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
6. Cookies
We use cookies for essential site function, analytics, and marketing. See our Cookie policy for full details.
7. Changes to this policy
We may update this policy from time to time. The current version is always available at ilosya.com/pages/privacy-policy. Material changes will be notified by email to customers who have an account or have given marketing consent.