Privacy Policy
1. Who we are This privacy policy applies to our online shop zemrane.com (also at shop-elegance.com). The shop is run by Norel (eenmanszaak), trading as Zemrane, Randweg 1, 6045 JK Roermond, the Netherlands. KvK 42054835 · VAT NL005459800B36. We sell clothing under the Elegance label. Norel is responsible (the "controller") for your personal data. For any privacy question or request, write to info@zemrane.com or call +31 6 46745362.
2. What data we use, why, and for how long
- Your order and delivery. Name, delivery and billing address, e-mail, phone number, the products you order and the payment status. We need this to perform our contract with you (art. 6(1)(b) GDPR). Without it we cannot deliver your order. We keep order and invoice data for 7 years, because Dutch tax law requires it (art. 6(1)(c) GDPR).
- Payment. You pay through Shopify Payments and its partners (for example iDEAL or your card issuer). They process your payment details; we never see or store your full card or bank details.
- Returns, exchanges and customer service. Your messages, order number and return details, to handle your request (contract). We keep these for 2 years after the matter is closed, unless the order records above require longer.
- Customer account (optional). Your name, e-mail, addresses and order history, so you can log in and track orders (contract). We keep it until you delete your account; accounts that have not been used for 3 years are deleted.
- Preventing fraud and keeping the shop secure. Order details, IP address and device data, in our legitimate interest in preventing fraud and misuse (art. 6(1)(f) GDPR). Shopify may flag an order as risky; a person at Zemrane always looks at it before an order is cancelled. We do not take decisions about you that are made only by a computer.
- Newsletter and offers. We send marketing e-mails or text messages only if you ticked the box for this (consent, art. 6(1)(a) GDPR). You can unsubscribe at any time through the link in every message or by e-mailing us. We keep your e-mail address on the list until you unsubscribe.
- Cookies, statistics and advertising. See section 3.
- Legal obligations. We may give data to authorities, such as the tax authorities, when the law requires it.
3. Cookies We use cookies and similar technologies (such as pixels).
- Necessary cookies keep the shop working, for example your shopping bag, checkout and language choice. They do not need consent.
- Statistics cookies show us how visitors use the shop, so we can improve it.
- Marketing cookies, such as the Meta (Facebook and Instagram) pixel, measure our ads and show you relevant ads on other sites. We only place statistics and marketing cookies after you click "Accept" in our cookie banner. If you click "Decline", only necessary cookies are used. You can change your choice at any time via "Cookie settings" at the bottom of every page. More about Shopify's cookies: https://www.shopify.com/legal/cookies.
4. Who receives your data We never sell your data. We share it only with companies that help us run the shop, and only what they need:
- Shopify (Shopify International Ltd, Ireland): our shop platform, checkout, payments and order e-mails;
- payment providers that process your payment;
- delivery companies that bring your parcel, and Parcel Panel, which sends you track-and-trace updates;
- Meta (Facebook and Instagram), only if you accepted marketing cookies;
- our accountant, for our tax records. These companies process data on our behalf under a data processing agreement, or, like Meta and the payment providers, are themselves responsible for it under their own privacy policies.
5. Data outside Europe Some of these companies, such as Shopify and Meta, also store data outside the European Economic Area, for example in Canada or the United States. Canada has been recognised by the European Commission as providing adequate protection. For the United States we rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
6. Security Our shop uses an encrypted connection (HTTPS). Payments go through Shopify's checkout, which meets the PCI DSS security standard for card payments. Only the people who need it for their work have access to your data, and our admin accounts are protected with two-step login.
7. Your rights You have the right to:
- see the data we hold about you (access);
- have incorrect data corrected;
- have your data deleted, unless we must keep it by law (for example our tax records);
- limit how we use your data;
- receive your data in a common format, or have it sent to another company (portability);
- object at any time to our use of your data based on legitimate interest, and to direct marketing (we will then stop the marketing straight away);
- withdraw your consent at any time, without affecting what was done before. E-mail info@zemrane.com. We answer within one month, free of charge. We may ask for a few details to check that the request comes from you, but we will never ask for a copy of your passport or ID card.
8. Complaints Not happy with how we handle your data? Tell us first at info@zemrane.com. You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the country where you live. In the United Kingdom, that is the Information Commissioner's Office (ico.org.uk).
9. Children Our shop is meant for adults. We do not knowingly collect data from children under 16. If you think a child has given us data, contact us and we will delete it.
10. Changes We may update this policy, for example when we add a new service. The date at the top shows the latest version. If a change is important, we will tell customers by e-mail.
