PRIVACY POLICY

KIVAA attaches great importance to the protection of your personal data. In this privacy policy, we inform you about the processing of your personal data in accordance with the General Data Protection Regulation (GDPR/AVG).

DATA CONTROLLER

KIVAA is the data controller for your personal data. Registered address: Terneuzen, Zeeland, the Netherlands.

KvK: [KVK_NUMMER]

PERSONAL DATA WE PROCESS

We process the following personal data: name and contact details (email address, phone number), delivery address, payment details (processed by Mollie), order history, loyalty points and activity, and browsing behaviour on our website (via Google Analytics, with consent).

PURPOSE OF PROCESSING

We process your personal data for the following purposes: fulfilling your order and processing payment, customer communication and support, maintaining your KIVAA CLUB loyalty points, sending newsletters (only with your consent), and improving our services through website analytics (GDPR-compliant, with consent).

RETENTION PERIODS

We do not retain your personal data longer than necessary. Order data is retained for 7 years in accordance with fiscal retention obligations. Account data is retained for as long as your account is active. Upon account deletion, personal data is erased within 30 days.

SHARING WITH THIRD PARTIES

We only share your personal data with third parties to the extent necessary to deliver our services: Mollie (payment processing), Resend (email delivery), Supabase (database storage, EU region), Sendcloud (shipping and track & trace), and Google Analytics (website analytics, with consent). All our processors are GDPR-compliant and we have data processing agreements in place with them.

COOKIES

We use functional cookies (required for the website to operate) and analytical cookies (Google Analytics, only with your consent). You can adjust your cookie preferences at any time via the cookie settings on our website.

YOUR RIGHTS

Under the GDPR/AVG, you have the following rights: right to access your personal data, right to correct inaccurate data, right to erasure of your data ('right to be forgotten'), right to restriction of processing, right to object to processing, and right to data portability. You can exercise your rights by contacting us at info@kivaa.nl.

CONTACT

For questions about this privacy policy or the processing of your personal data, please contact us at: info@kivaa.nl. If you have a complaint about the processing of your personal data, you can also contact the Information Commissioner's Office (ICO) or the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.