At Lureto Concept, operated by Afantrous zorg, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, how we use it, why we use it, how we protect it, and what rights you have regarding your personal data.
This Privacy Policy applies to our website www. l ureto-concept.com, our webshop, and services provided through or in connection with our website.
1. Who We Are
The company responsible for processing your personal data is:
Afantrous zorg
Trading as: Lureto Concept
Oude Bennekomseweg 45
6706 ES Wageningen
The Netherlands
KvK number: 87472716
Email: info@lureto-concept.com
Website: www.lureto-concept.com
For the purposes of applicable data protection legislation, including the EU General Data Protection Regulation (GDPR), Afantrous zorg is generally the data controller for the personal data described in this Privacy Policy.
2. What Personal Data We Collect
Depending on how you interact with our website and services, we may collect different categories of personal data.
This may include:
Contact and identification information
-
First and last name
-
Billing address
-
Shipping address
-
Email address
-
Telephone number
Order and transaction information
-
Products purchased
-
Order number
-
Order date
-
Order value
-
Delivery information
-
Billing information
-
Payment status
We generally do not have access to or store your complete payment card details when payments are processed by third-party payment providers.
Account information
If you create a customer account, we may collect information associated with that account, such as your email address, account details, order history, and preferences.
Communications
If you contact us, we may collect the information you provide, including your name, email address, order details, and the contents of your communication.
Marketing information
If you subscribe to our marketing communications, we may collect your email address, marketing preferences, and information about whether you open or interact with our communications.
Technical and usage information
When you visit our website, certain information may be collected automatically, such as:
-
IP address
-
Browser type and version
-
Device type
-
Operating system
-
Approximate location derived from IP address
-
Website pages visited
-
Referring website
-
Date and time of visits
-
Interaction with our website
-
Technical information about your device
The exact information collected depends on the technologies and services enabled on our website.
3. How We Collect Your Personal Data
We may collect personal data when you:
-
Visit our website;
-
Create a customer account;
-
Place an order;
-
Subscribe to our newsletter or marketing communications;
-
Contact us;
-
Submit a contact or other form;
-
Participate in a promotion or competition;
-
Interact with our website;
-
Provide information through customer service;
-
Consent to cookies or similar technologies; or
-
Otherwise communicate or interact with Lureto Concept.
We may also receive personal data from third-party service providers where necessary to provide our services or process transactions.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
To process and fulfil orders
We use your information to:
-
Process your order;
-
Confirm your purchase;
-
Process or facilitate payment;
-
Prepare and ship your order;
-
Provide delivery updates;
-
Handle returns, refunds, and exchanges;
-
Provide customer service; and
-
Manage our relationship with you.
To communicate with you
We may use your contact information to respond to enquiries, provide customer support, communicate about your orders, and send important service-related information.
To operate and improve our website
We may use technical and usage information to:
-
Maintain and operate our website;
-
Improve website functionality;
-
Understand how visitors use our website;
-
Detect technical problems;
-
Prevent abuse and fraudulent activity; and
-
Improve our products and services.
For marketing
Where permitted by applicable law, we may use your information to send you marketing communications about our products, offers, news, and promotions.
Where consent is required, we will only send marketing communications after receiving your consent.
You can unsubscribe from marketing communications at any time by using the unsubscribe option included in the communication or by contacting us at info@ l ureto-concept.com.
5. Legal Bases for Processing
We process personal data only where there is a lawful basis for doing so under applicable data protection law.
Depending on the circumstances, our legal bases may include:
Performance of a contract
We process information where necessary to enter into or perform a contract with you, such as processing and delivering an order.
Legal obligations
We may process personal data where necessary to comply with legal obligations, including accounting, tax, consumer protection, and other applicable legal requirements.
Legitimate interests
We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
Examples may include website security, fraud prevention, customer service, business administration, and improving our services.
Consent
Where required by law, we rely on your consent, for example for certain marketing communications or non-essential cookies and similar technologies.
Where processing is based on consent, you can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies are small text files stored on your device when you visit a website.
We may use cookies for purposes including:
-
Essential website functionality;
-
Shopping cart functionality;
-
Remembering preferences;
-
Security and fraud prevention;
-
Website analytics;
-
Understanding website usage;
-
Marketing and advertising; and
-
Improving our website and services.
Some cookies are necessary for the website to function and cannot be disabled through certain cookie settings.
Where required by applicable law, we will ask for your consent before placing or using non-essential cookies.
You can manage or withdraw your cookie preferences through our cookie consent mechanism where available.
You can also adjust your browser settings to block or delete cookies. However, disabling certain cookies may affect the functionality of our website.
7. Shopify
Our webshop is hosted and operated using Shopify and related Shopify services.
Shopify may process personal data on our behalf or independently in connection with providing its services, including hosting, checkout, payment functionality, security, analytics, and other ecommerce functionality.
When you place an order through our website, information necessary to process your order may be processed through Shopify's systems.
Shopify may process personal data in countries outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, appropriate safeguards are used where required by applicable data protection law.
For more information about how Shopify processes personal data, please consult Shopify's privacy documentation.
8. Payment Providers
We may use third-party payment providers to process payments.
Depending on the payment method you select, your personal data may be shared with the relevant payment provider.
Payment providers may collect and process information such as:
-
Name;
-
Billing information;
-
Payment information;
-
Transaction information;
-
IP address; and
-
Information required to prevent fraud and comply with legal requirements.
Payment providers process personal data in accordance with their own privacy policies and terms.
We do not generally receive or store your complete payment card details.
9. Shipping and Delivery Providers
To deliver your order, we may share relevant information with shipping and logistics providers.
This may include:
-
Name;
-
Shipping address;
-
Email address;
-
Telephone number where necessary;
-
Order information; and
-
Delivery-related information.
This information is shared only to the extent reasonably necessary to fulfil and deliver your order or provide related delivery services.
10. Service Providers and Other Third Parties
We may use third-party service providers to help us operate our business and website.
Depending on the services we use, these may include providers of:
-
Website hosting;
-
Ecommerce services;
-
Payment processing;
-
Shipping and logistics;
-
Email and marketing services;
-
Customer support;
-
Website analytics;
-
Advertising;
-
Fraud prevention;
-
IT and security services; and
-
Accounting and administrative services.
These providers may process personal data on our behalf or, depending on their role, act as independent controllers.
We only share personal data to the extent reasonably necessary for the relevant purpose and in accordance with applicable law.
11. Marketing and Advertising
If permitted by applicable law, we may use third-party marketing and advertising services to promote our products and understand the effectiveness of our advertising.
These services may use cookies, pixels, tags, or similar technologies.
Depending on the tools we use, information such as your IP address, device information, browsing activity, website interactions, and purchase information may be processed.
Where required, we will obtain your consent before using non-essential advertising or tracking technologies.
You can object to direct marketing at any time.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
The retention period depends on the type of information and why we process it.
For example:
-
Order and transaction information may be retained for the period required by accounting and tax laws.
-
Customer service communications may be retained for as long as reasonably necessary to handle your request and maintain appropriate business records.
-
Marketing information may be retained until you unsubscribe or otherwise object, unless another lawful basis for retention applies.
-
Website and technical information may be retained for periods appropriate to the relevant purpose, such as security, analytics, or legal requirements.
When personal data is no longer required, we will delete it or anonymise it where reasonably possible.
13. International Data Transfers
Because we use international service providers, your personal data may sometimes be processed in countries outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, this may include relying on:
-
An adequacy decision of the European Commission;
-
Standard Contractual Clauses;
-
Other legally recognised transfer mechanisms; or
-
Another lawful basis for international data transfers.
Where required, information about the relevant safeguards can be obtained by contacting us at info@ l ureto-concept.com.
14. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
You are also responsible for keeping any account credentials or passwords confidential and for notifying us if you believe your account has been accessed without authorisation.
15. Your Privacy Rights
Depending on applicable law, you may have the following rights regarding your personal data:
-
Right of access — You may request information about the personal data we hold about you.
-
Right to rectification — You may request that inaccurate or incomplete personal data be corrected.
-
Right to erasure — You may request that your personal data be deleted in certain circumstances.
-
Right to restriction — You may request that we restrict the processing of your personal data in certain circumstances.
-
Right to data portability — In certain circumstances, you may request your personal data in a structured, commonly used, and machine-readable format.
-
Right to object — You may object to certain processing based on legitimate interests, including certain forms of direct marketing.
-
Right to withdraw consent — Where processing is based on consent, you may withdraw your consent at any time.
-
Right to complain — You have the right to lodge a complaint with a relevant data protection supervisory authority.
These rights are subject to applicable legal conditions and exceptions.
16. How to Exercise Your Rights
To exercise any of your privacy rights, please contact us:
Email: info@lureto-concept.com
Please clearly describe your request and provide enough information for us to reasonably verify your identity where necessary.
We will generally respond to valid requests within the period required by applicable data protection law.
In accordance with GDPR requirements, requests concerning your data protection rights are generally handled free of charge. In limited circumstances permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.
17. Complaints
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve the matter.
You can contact us at:
You also have the right to lodge a complaint with the competent data protection supervisory authority.
As a company established in the Netherlands, the relevant supervisory authority is generally
