Privacy Policy

1. Introduction & Definitions

This Privacy Policy describes how Vayle ('we', 'us', or 'our') collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from vayle.nl (the 'Site'). For the purposes of this policy, 'you' and 'your' refers to you as the user of the Site. We are the 'Data Controller' for your information under the General Data Protection Regulation (EU) 2016/679 ('GDPR' or 'AVG').

2. Data We Collect

We collect personal data to provide and improve our services. The types of information we collect are:

• Personally Identifiable Information: Contact details (name, email address, shipping/billing address, phone number) and payment information (processed securely by our payment gateway providers; we do not store full credit card numbers).
• Device and Usage Data: Technical information automatically collected when you access the Site, such as your IP address, browser type, operating system, pages viewed, and the dates/times of your visits.
• Cookies and Tracking Technologies: We use essential and analytical cookies to operate the Site and enhance your experience. For detailed information and to manage your preferences, please see our separate Cookie Policy.

3. How and Why We Use Your Data (Legal Basis)

We process your personal data based on the following legal grounds as defined by GDPR:

• To fulfill our contract with you: Processing your orders, handling payments, arranging for shipping, and providing you with invoices and/or order confirmations.
• For our legitimate interests: Communicating with you about customer service inquiries, screening our orders for potential risk or fraud, and improving our Site and services.
• With your explicit consent: Sending you promotional information about new products and special offers, if you have opted-in to receive such communications.
• To comply with legal obligations: Retaining records for tax purposes or responding to lawful requests from public authorities.

4. Who We Share Your Data With

We do not sell your personal data. We only share it with trusted third-party service providers ('Data Processors') who perform services on our behalf, such as payment gateways (e.g., Mollie, Stripe), shipping carriers (e.g., PostNL, DHL), and marketing platforms (if you have consented). All processors are contractually bound to safeguard your data and only use it for the purposes we specify.

5. Your GDPR Rights

As a resident of the European Economic Area (EEA), you have the right to: Access the personal data we hold about you; Request that your personal data be corrected, updated, or erased; Object to or restrict our processing of your data; Request a portable copy of your data; and Withdraw your consent at any time. To exercise these rights, please contact us at [privacy@vayle.nl]. [your-contact-email].

6. Data Security and International Transfers

We implement robust technical and organizational measures to protect your data, including SSL encryption. If we transfer your data outside of the EEA, we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission. However, no method of transmission over the internet is 100% secure.

7. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page and updating the 'Last Updated' date. We encourage you to review this policy periodically.