Privacy policy

Privacy Policy

Last updated: August 31, 2026

RetroVases respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, place an order, create an account, contact us, submit a review or otherwise use our online store and related services.

RetroVases is established in the Netherlands and acts as the data controller for the personal information described in this Privacy Policy, except where another party, such as Shopify or a payment provider, acts as an independent controller.

Our online store is powered by Shopify.

1. Who we are

V.O.F. Retro Vases
Trading name: RetroVases
Steeg 66
5975 NP Sevenum
The Netherlands

Email: info@retrovases.com
Telephone: +31 6 30030596
Dutch Chamber of Commerce (KvK): 65163249
VAT number: NL856003839B01

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), RetroVases is the data controller for the personal information we process for our own business purposes.

2. Personal information we collect

Depending on how you use our website and services, we may collect the following categories of personal information.

Contact information

This may include:

your name;
billing address;
delivery address;
email address;
telephone number.

Order and transaction information

This may include:

products you purchase;
order numbers;
order value;
shipping method;
returns and cancellations;
payment status;
previous transactions with us.

Payment information

Payments are processed by payment service providers such as Shopify Payments and PayPal.

We generally do not receive or store your complete credit or debit card details ourselves. Payment providers process the necessary financial information in accordance with their own privacy and security policies.

We may receive information such as:

payment status;
payment method;
transaction reference;
partial payment details where provided by the payment processor.

Account information

If you use a Shopify customer account, we may process information associated with that account, such as:

your contact information;
order history;
account preferences;
return or cancellation requests.

Communications

If you contact us, we may process information contained in your:

emails;
contact forms;
customer-service enquiries;
return requests;
complaints;
other communications with us.

Reviews and customer content

If you submit a review, rating, photograph or other customer content, we may process:

your displayed name or pseudonym;
rating;
review text;
review date;
photographs you voluntarily submit;
information associated with the purchase or review.

Historical customer reviews originating from previous sales platforms may also be displayed in our webshop where they were legitimately obtained and imported.

Technical and usage information

When you visit our website, technical information may be collected automatically, including:

IP address;
browser type;
device information;
operating system;
pages viewed;
date and time of visits;
website interactions;
cookie and similar technology identifiers.

3. How we collect personal information

We may collect personal information:

directly from you when you place an order, create an account, contact us, request a return or submit a review;
automatically when you browse our website through cookies and similar technologies;
from Shopify and other service providers that support our webshop;
from payment providers;
from shipping and fulfilment partners;
from review platforms and other business partners where appropriate and lawful.

4. Why we process your personal information

Under the GDPR, we must have a lawful basis for processing personal information.

To process and fulfil your order

We process personal information to:

accept and process your order;
process payment;
arrange shipping;
provide order and delivery updates;
handle returns, refunds and cancellations;
provide customer service.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

To comply with legal obligations

We may process and retain information where necessary to comply with legal obligations relating to:

bookkeeping;
taxation;
invoicing;
consumer law;
fraud prevention;
legal claims;
requests from competent authorities.

Legal basis: compliance with a legal obligation.

To protect our business and prevent fraud

We may process information to:

detect suspicious or fraudulent transactions;
protect our website;
protect customer accounts;
prevent misuse of our services;
investigate security incidents;
establish or defend legal claims.

Legal basis: our legitimate interests in operating a secure and lawful business, except where your rights and interests override those interests.

To communicate with you

We process personal information to respond to:

enquiries;
complaints;
return requests;
shipping issues;
customer-service questions.

Legal basis: performance of a contract, taking steps at your request, or our legitimate interest in providing customer service, depending on the circumstances.

Marketing communications

Where permitted by law, we may use your contact information to send marketing communications about RetroVases.

Where consent is required, we will only send such communications after you have given consent.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email.

Legal basis: consent where required, or another lawful basis where expressly permitted by applicable law.

Reviews

We may process reviews and customer content for the purpose of displaying genuine customer experiences and improving trust in our store.

Legal basis: consent where applicable and/or our legitimate interest in presenting genuine customer feedback, subject to applicable law.

5. Cookies and similar technologies

Our website uses cookies and similar technologies.

These may be used for:

essential website functionality;
shopping cart functionality;
checkout;
security;
remembering preferences;
analytics;
measuring website performance;
marketing and advertising where permitted.

Where required by law, non-essential cookies are only used after you have given consent.

You can manage your cookie preferences through the cookie or privacy settings available on our website.

Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

6. Who we share personal information with

We only share personal information where necessary and lawful.

Shopify

Our online store is hosted by Shopify.

Shopify processes information necessary to provide:

website hosting;
checkout;
customer accounts;
order management;
fraud prevention;
analytics;
ecommerce functionality.

Shopify may also process certain information as an independent controller for its own purposes, as described in Shopify's privacy documentation.

Payment providers

Payment information may be processed by providers including:

Shopify Payments;
PayPal;
participating card networks and financial institutions.

These parties may process personal information according to their own privacy policies.

Shipping and delivery providers

We may provide necessary personal information to shipping providers, such as:

your name;
delivery address;
email address;
telephone number;
shipment information.

This is necessary to deliver your order and provide tracking or delivery updates.

Review services

We use review-related services such as Judge.me to display and manage customer reviews.

Information processed may include review text, rating, date and reviewer display name or pseudonym.

IT, analytics and service providers

We may use third parties that help us operate our website and business, including providers of:

website technology;
email;
data storage;
analytics;
security;
customer support.

These providers may only process information as necessary to provide their services and subject to applicable data-protection requirements.

Public authorities and legal obligations

We may disclose information where required by law or where necessary to:

comply with a legal obligation;
respond to lawful requests from authorities;
prevent fraud;
enforce agreements;
protect our legal rights;
defend legal claims.

7. International transfers of personal information

Some of our service providers, including Shopify and other technology providers, may process personal information outside the European Economic Area.

Where personal information is transferred outside the EEA to a country that does not provide an adequate level of data protection, appropriate safeguards will be used where required by law.

These may include:

European Commission adequacy decisions;
Standard Contractual Clauses;
other legally recognised safeguards.

8. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with legal obligations.

Retention periods may depend on:

the nature of the information;
whether you have an active customer account;
contractual obligations;
tax and accounting requirements;
potential legal claims;
fraud-prevention and security requirements.

Order, invoice and accounting information may be retained for the period required under applicable Dutch tax and accounting law.

Other personal information is deleted or anonymised when it is no longer reasonably required, unless we have a lawful reason to retain it longer.

9. Security

We take reasonable technical and organisational measures to protect personal information against:

loss;
misuse;
unauthorised access;
disclosure;
alteration;
destruction.

However, no internet-based system can be guaranteed to be completely secure.

Please avoid sending highly sensitive or confidential information through unsecured communication channels.

10. Your rights under the GDPR

If the GDPR applies to you, you may have the following rights.

Right of access

You may ask whether we process personal information about you and request a copy of that information.

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you may request deletion of your personal information.

This right does not apply where we are legally required to retain the information.

Right to restriction

You may ask us to restrict processing of your personal information in certain circumstances.

Right to data portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format.

Right to object

You may object to processing based on our legitimate interests in certain circumstances.

You also have the right to object to direct marketing at any time.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that took place before the withdrawal.

Right to complain

You have the right to lodge a complaint with a supervisory authority.

For RetroVases, the competent Dutch supervisory authority is:

Autoriteit Persoonsgegevens

You may also have the right to contact the supervisory authority in the EU or EEA country where you live.

11. Exercising your privacy rights

To exercise your privacy rights, contact us at:

info@retrovases.com

We may need to verify your identity before responding to certain requests.

We will respond within the period required by applicable data-protection law.

We will not discriminate against you for exercising your privacy rights.

12. Marketing preferences

If you receive promotional emails from us, you can unsubscribe at any time by using the unsubscribe link contained in the email.

Even if you unsubscribe from marketing communications, we may still send transactional communications relating to:

orders;
payments;
delivery;
returns;
refunds;
security;
customer-service enquiries.

13. Customer reviews

We may display genuine customer reviews in our webshop.

Some reviews displayed on RetroVases may originate from purchases completed through previous sales platforms and may therefore refer to products that are no longer available.

Reviews are intended to reflect genuine customer experiences with RetroVases.

Where practical, personal information displayed with reviews is limited to a name, first name, initials or pseudonym rather than unnecessary identifying information.

14. Children's privacy

Our webshop is not directed specifically at children.

We do not knowingly collect personal information from children where parental consent or another legal basis would be required under applicable law.

If you believe that a child has provided us with personal information unlawfully, please contact us so that we can investigate and, where appropriate, delete it.

15. Third-party websites

Our website may contain links to third-party websites or platforms.

RetroVases is not responsible for the privacy practices of third parties.

We recommend reviewing the privacy policy of any third-party website you visit.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes in our services;
changes in technology;
changes in service providers;
legal or regulatory requirements.

The current version will always be published on our website together with the date of the latest update.

17. Contact

If you have questions about this Privacy Policy, wish to exercise your privacy rights or have a complaint about how we process your personal information, please contact: