Privacy Policy
We treat your personal data with the same care as the pieces we sell. This policy explains what we collect, why, and what your rights are under the GDPR (AVG).
- We only use your data to handle your order, help you, and send you our newsletter if you signed up.
- We never sell your data.
- You can always ask us to see, correct or delete your data.
- You can unsubscribe from our emails at any time with one click.
Who is responsible
Vintage Avoir (KvK 82305145) is the controller for the processing of your personal data described in this policy. For any privacy question or request, contact us at contact@vintageavoir.com.
What data we collect
- Order data: name, email address, phone number (if provided), delivery and billing address, the items you ordered and order history.
- Payment data: payment method and status. Payments are handled by our payment providers; we never see or store your full card details.
- Account data: if you create an account, your login details and saved addresses.
- Communication: messages you send us by email, Instagram or through our website.
- Newsletter: your email address and, if you choose, your preferences, if you sign up.
- Website usage: technical data such as IP address, device and browser type, and how you use our website, collected through cookies and similar technologies.
Why we use your data and on what basis
- To process and deliver your order, handle returns and provide customer service. Basis: performance of the contract.
- To meet legal obligations, such as keeping our financial and tax records. Basis: legal obligation.
- To send you our newsletter and offers. Basis: your consent, which you can withdraw at any time. If you bought from us before, we may email you about similar products based on our legitimate interest; you can always unsubscribe.
- To keep our website working, secure and to prevent fraud. Basis: our legitimate interest.
- To analyse and improve our website and show relevant content. Basis: your consent for non-essential cookies.
Who we share your data with
We never sell your personal data. We only share it with parties that help us run our shop, and only as far as needed:
- our webshop platform (Shopify);
- payment providers, to process your payment;
- carriers such as PostNL, to deliver your order;
- our email marketing provider (Klaviyo), if you signed up for our newsletter;
- our review platform (Trustpilot), if you are invited to leave a review;
- authorities, if we are legally required to.
These parties may only use your data for the service they provide to us and must protect it properly.
Data outside the EU
Some of our service providers may process data outside the European Economic Area, for example in the United States or Canada. In that case the transfer is protected by an adequacy decision of the European Commission or by the EU Standard Contractual Clauses.
How long we keep your data
- Order and invoice data: 7 years, because Dutch tax law requires this.
- Customer service messages: up to 2 years after your question was resolved.
- Account data: until you delete your account or ask us to.
- Newsletter data: until you unsubscribe.
Cookies
We use necessary cookies to make our website and checkout work. We only place analytics and marketing cookies with your consent, which you can give or withdraw through our cookie banner. You can also delete cookies in your browser settings.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Email contact@vintageavoir.com and we will respond within one month. We may ask you to confirm your identity first.
If you are not satisfied with how we handle your data, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own EU country.
Security
We take appropriate technical and organisational measures to protect your personal data against loss and unauthorised access. Our website and checkout use encrypted connections.
Changes to this policy
We may update this privacy policy. The latest version is always published on this page, with the date of the last update at the top.
