Privacy Policy

1. Who are we?

Lavendel Lab is a sole proprietorship (ZZP) based in the Netherlands.

2. What data do we collect?

We collect the following personal data when you use our services:

• Order data: name, email address, billing address, shipping address
• Payment data: processed securely via Stripe; we do not store card details
• Account data: email address and password (stored encrypted)
• Communication: content of messages you send to us
• Technical data: IP address, browser type, pages visited (via cookies)

3. What do we use your data for?

• Processing and delivering your orders
• Creating and managing your account
• Sending order confirmations and shipping notifications
• Handling returns and complaints
• Improving our website and services
• Complying with legal obligations (e.g. tax administration)

4. Legal basis for processing

We process your data on the basis of:

• Performance of a contract: necessary to process your order
• Legal obligation: tax and accounting regulations
• Legitimate interest: improving our services and fraud prevention
• Consent: when you subscribe to our newsletter

5. Retention period

We do not retain your data longer than necessary.
Order data is retained for 7 years in accordance with fiscal legislation.
Account data is retained for as long as your account is active.

6. Sharing with third parties

We only share your data with:

• Stripe: for secure payment processing
• Delivery services: for shipping your order
• Moneybird: for our accounting
• Hostinger: for website hosting

We never sell your data to third parties.

7. Cookies

Our website uses functional cookies (necessary for the shopping cart and login)
and analytical cookies (to improve the website).
You can disable cookies through your browser settings.

8. Your rights

Under the GDPR, you have the right to:

• Access your personal data
• Have your data corrected or deleted
• Object to the processing of your data
• Have your data transferred (data portability)
• File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

For requests, please contact us at
info@lavendellab.nl.
We will respond within 30 days.

9. Security

We take appropriate technical and organisational measures to protect your data,
including encrypted connections (SSL/TLS), secure password storage
and restricted access to personal data.

10. Changes

We reserve the right to modify this privacy policy.
The most recent version is always available on this page.