Privacy Policy

Last updated: July 13, 2026

Arte di Luce (ArtediLuce, KvK 86582291, Willibrorduslaan 144, Valkenswaard, the Netherlands) is the controller for the processing of personal data described in this policy. Contact: info@artediluce.nl.

What data we collect

Order data: name, address, email address, phone number, order details and payment status. We need this to process and ship your order.
Account data: if you create an account, your login details and order history.
Newsletter: your email address, only if you sign up. You can unsubscribe at any time via the link in every email.
Customer service: the content of emails you send us.
Website data: technical data such as IP address and browsing behaviour on our site, via cookies (see our Cookie Policy).

Why we process this data (legal bases)

Performing the purchase agreement (processing and shipping orders, handling returns).
Legal obligations (tax administration: order records are kept for 7 years as required by Dutch tax law).
Consent (newsletter, non-essential cookies). You can withdraw consent at any time.
Legitimate interest (fraud prevention, improving our website).

Who we share data with

We never sell your data. We share data only with parties needed to run our store:

Shopify: our e-commerce platform, which hosts our store and processes order data.
Payment providers: to process your payment securely.
Shipping carriers: name and address to deliver your order.
Email service: to send order confirmations and, with your consent, newsletters.

Some of these parties may process data outside the EEA; in that case transfers are safeguarded by EU standard contractual clauses or an adequacy decision.

How long we keep your data

Order and invoice data: 7 years (legal retention period). Newsletter data: until you unsubscribe. Customer service emails: up to 2 years after the last contact.

Your rights

You have the right to access, correct, delete, and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent. Email info@artediluce.nl and we will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

Our website uses SSL encryption and payments are processed through certified payment providers. We take appropriate technical and organisational measures to protect your data.

Changes

We may update this policy from time to time. The most recent version is always available on this page.