Privacy policy

Privacy Policy

Last updated: 02-06-2026

ARTICLE 1 - INTRODUCTION AND IDENTITY

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from luresiave.com (the "Site"). We act as the Data Controller for your data. Our full business and contact details can be found in Article 1 of our Terms of Service and at the bottom of this document.

ARTICLE 2 - WHAT DATA DO WE COLLECT?

2.1 Order Information: Upon a purchase, we collect your name, billing address, shipping address, email address, and phone number.

2.2 Payment Details: Payments are handled via secure, certified third-party payment providers (PCI-DSS compliant, such as Shopify Payments and PayPal). We do not store full credit card numbers or bank details ourselves; we only receive the necessary status information to link and process your order.

2.3 Device Information: We automatically collect data about your web browser, IP address, time zone, and cookies.

2.4 Customer Service: Data you share via email or chat for support.

ARTICLE 3 - LEGAL BASES FOR PROCESSING

In accordance with the GDPR, we process your data based on the following grounds:

Performance of the contract: Necessary to process, pay for, and deliver your order.
Legal obligation: Necessary to comply with tax and accounting obligations.
Legitimate interest: For fraud control, security of the Site, and improving our shopping experience.
Consent: For marketing purposes (such as newsletters), which you can withdraw at any time.

ARTICLE 4 - DATA SHARING AND INTERNATIONAL TRANSFER

4.1 Shopify: Our web store runs on Shopify Inc. Your data is stored on secure servers, which may be located in the USA and Canada.

4.2 Logistics & Asia: For the performance of the contract, your name and address are shared with our international logistics partners and distribution centers (potentially located in Asia or outside the EEA).

4.3 Safeguards: When transferring data to countries outside the EEA (such as Asia), we use Standard Contractual Clauses (SCCs) or similar EU-approved safeguards to ensure your privacy remains protected.

4.4 Marketing & Profiling: We use automated decision-making and profiling to make our marketing more relevant to you. This means that systems from partners such as Klaviyo, Meta, Google, and TikTok can automatically determine which advertisements or emails you see based on your browsing behavior on our Site.

ARTICLE 5 - COOKIES AND AUTOMATED TRACKING

We use cookies and pixels (such as the Meta Pixel) to personalize your experience and optimize advertisements. Our site uses cookies to keep track of which items are placed in your shopping cart. We use profiling to make personal offers based on your interaction with the Site. You can manage cookies through your browser settings, but this may affect the functionality of the Site.

ARTICLE 6 - YOUR PRIVACY RIGHTS (GDPR)

As a consumer in the European Union, you have the right to access, correction, deletion, restriction of processing, and data portability regarding your personal data. You also have the right to withdraw your consent at any time and to object to certain processing. You have the right to lodge a complaint with your national data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

ARTICLE 7 - RETENTION PERIOD

We do not store your data longer than necessary:

Transaction data: We keep this data during the statutory tax retention periods (in the Netherlands usually 7 years) and as long as necessary for warranty claims.
Marketing data: Until you withdraw your consent or ask us to delete the data.