Privacy Policy

1. Controller

Luyx Candles, located at Chamottestraat 7, 5953 RM Reuver, is responsible for the processing of personal data as described in this privacy policy.

Email: info@luyxkaarsen.nl

2. Introduction

Luyx Candles respects the privacy of all visitors and customers and processes personal data carefully and confidentially, in accordance with the General Data Protection Regulation (GDPR).

In this privacy policy, we explain which personal data we process, for what purposes, and what rights you have.

3. What personal data do we process?

We may process the following personal data:

name, email address, and phone number
billing and delivery address
order details and order history
payment details (securely processed by external payment providers)
technical data such as IP address, browser type, and device information
communications via: emails or messages through the contact form

4. For what purposes and on what legal basis do we process data?

We process personal data only when permitted under Article 6 of the GDPR.

Personal data is processed for the following purposes:

processing, payment, and delivery of orders (performance of the contract)
providing customer service and communication (performance of the contract and legitimate interest)
administration and bookkeeping (legal obligation)
analyzing and improving our website (consent)
securing our website and preventing fraud (legitimate interest)

5. Retention periods

We do not retain personal data longer than necessary:

administration and order data are retained for a maximum of 7 years (tax retention obligation)
customer and communication data are retained as long as the customer relationship exists
newsletter data is retained until you unsubscribe
website and analytics data is retained for a maximum of 2 years

6. Sharing personal data with third parties

We never sell your personal data to third parties.
Data is only shared when necessary for our services or to comply with legal obligations.

Payment providers

For processing payments, we use:

MultiSafepay
PayPal

These parties process payment data independently and in accordance with the GDPR.
Luyx Candles does not have access to full payment details such as credit card or account numbers.

Shipping company

For delivering orders, we use PostNL.
Only the necessary personal data, such as name and address, are provided to PostNL.

Processor agreements

We have entered into processor agreements with all parties that process personal data on our behalf, in accordance with Article 28 GDPR.

International transfers

Some service providers, such as PayPal and Google, process personal data outside the European Economic Area (EEA).
In these cases, we ensure appropriate safeguards, such as standard contractual clauses, in accordance with the GDPR.

7. Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access.
Our website uses SSL encryption (HTTPS).

8. Cookies and analytics

Our website uses cookies and similar techniques to:

ensure the website functions properly
gain insight into website usage
improve our services

For analytical purposes, we use Google Analytics. The following measures have been taken:

IP addresses are anonymized
data sharing with Google is limited
a processor agreement with Google is in place
data is not used for other Google services

Analytical cookies are only placed after your consent.
You can withdraw your consent at any time via the cookie banner or your browser settings.

9. Your rights

Under the GDPR, you have the following rights:

right of access
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object
right to withdraw your consent at any time

You can submit a request via info@luyxkaarsen.nl.

10. Newsletter

You will only receive our newsletter if you have given consent.
You can unsubscribe at any time via the unsubscribe link in each newsletter.

11. Minors

Our website is not intended for persons under 16 years of age.
We do not knowingly collect personal data from minors without parental or guardian consent.

12. Changes

We reserve the right to change this privacy policy.
The most current version is always available on our website.

13. Complaints

If you have a complaint about the processing of your personal data, you can contact us.
You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Last updated: December 2025