Legal

Privacy

This page explains what we do with your personal data when you visit luzof.nl, join the launch list or order from us. The seller above is responsible for it.

What we collect, and why

• To deliver your order (contract): name, email, phone, shipping and billing address, the order itself.
• To get paid (contract): payment is handled by Stripe. We receive the payment status and method, never your card number.
• To answer you (legitimate interest): what you send through the contact form.
• Cart reminder (only with your consent): if you tick “Send me a reminder if I don't finish my order” in the cart, we keep your email and what was in your cart, and send at most 2 reminders (after 1 hour and after 1 day) if you don't pay. We stop the moment you pay or unsubscribe (one click in every reminder). Without the tick we store nothing for this. We delete the email address 30 days after the checkout.
• Reviews (consent): after delivery we email you once with a personal link to review your order (you can stop this with the link in that email). If you write a review, we keep your stars, text, optional photo (with location and camera data removed) and the order it belongs to. It appears on the product page only with your first name and the first letter of your town, after we checked it. Ask us and we remove it.
• News and offers (consent, double opt-in): your email address, only after you tick the box in the footer and confirm through the link we email you. We send you a personal 10% code and, now and then, news and offers. Every email has a one-click unsubscribe; after that we email you no more and keep only a note that you unsubscribed.
• Launch list (consent): your email address, used for one message when Luzof goes on sale. Ask us and we delete it.
• Necessary storage (no consent needed): your cart, language choice and cookie choices, stored in your own browser. If you asked for a cart reminder, also a random code for 7 days, so the reminders stop when you pay, in any tab.
• Anonymous visit counts (legitimate interest: knowing how the shop is used; no consent needed): for every visit our server counts the page, the step in the shop (for example added to cart), how long the page stays open, the device type (phone/tablet/computer), the campaign or site you came from and your country. To count a visit once, the server turns your IP address and browser type into a code using a key that changes every day and is deleted after that day. Your IP address is never stored, nothing is stored on your device, and the code cannot be linked to you or to an order; codes are deleted after the day ends and only daily totals are kept.
• Detailed analytics (only with your consent): counts of page views, visits, add-to-cart and checkout steps, without cookies or IP addresses. Your browser keeps a random visit code and the date of your last visit in its own storage, so we can count a visit once; we store the page, device type (phone/tablet/computer), the site or campaign you came from and your country, never your name, address or IP address. Individual visit steps are deleted after 48 hours, only daily totals are kept. We sometimes test two versions of a small part of a page (for example which photo comes first); your browser remembers which version you saw, and we only keep the totals per version.
• Marketing (only with your consent): we measure whether our ads lead to visits and purchases. Meta (Meta Platforms Ireland): the Meta pixel records page views, add-to-cart, checkout starts and purchases; after a purchase our server also sends Meta the order value with your email, phone and address in hashed (scrambled) form. Hashing is not anonymisation; we only do it with your consent. These companies are responsible for what they do with the data themselves.

You change or withdraw your choice any time under “Cookie settings” at the bottom of every page. Withdrawing stops the measurement from that moment and removes our measurement cookies from your browser.

Who processes it for us

• Stripe: payments and fraud checks (Stripe's own privacy policy applies to the payment).
• Netlify: hosting of this website and storage of orders.
• Resend: sending order emails. Resend stores account data in the United States.
• Meta: ad measurement, only if you allowed it.

We do not sell your data.

How long we keep it

Order and invoice records: 7 years, as Dutch tax law requires. Contact messages: up to 2 years. Reviews: as long as they are shown, and deleted when you ask. Anonymous statistics: kept as daily totals only.

Your rights

You can ask to see, correct, delete or receive (export) your data, or object to its use, by writing to us; we answer within one month. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Last updated 2026.