1. Data Collection & Legal Basis for Processing

As a Netherlands-based entity, Eliza and Ethan BV processes your Personal Information under the strict guidelines of the General Data Protection Regulation (GDPR). We collect data to fulfill contracts, pursue legitimate business interests, and comply with legal obligations.

• Order Information: We collect your name, billing/shipping address, payment details, and contact info to fulfill our contract with you (processing payments, shipping orders, providing invoices).

• Device & Usage Information: We automatically collect your IP address, browser type, and site interactions via cookies and pixels. This processing is based on your explicit consent (via our cookie banner) and our legitimate interest in optimizing our platform and preventing fraud.

• Marketing Data: With your explicit consent, we may send promotional emails or use your data for targeted advertising.

2. Data Sharing & International Transfers

We do not sell your personal data. We share it only with trusted third-party processors necessary to operate our business, under strict confidentiality agreements:

• Service Providers: We share data with e-commerce platforms, payment gateways, and fulfillment centers required to execute your order.

• Analytics & Advertising: With your consent, we use tools like Google Analytics to improve the Site. You can opt out via the Google Analytics Opt-out Add-on or the Digital Advertising Alliance portal.

• International Transfers: Because your data may be transferred outside the European Economic Area (EEA), such as to the United States, we rely on legally approved transfer mechanisms, including the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs), to guarantee European-level data protection.

3. Your Global Privacy Rights

Regardless of your location, we afford you comprehensive control over your personal data, complying with both GDPR and modern US state privacy laws (such as CCPA/CPRA).

• Access, Correction, & Erasure: You may request a copy of your data or ask us to correct or permanently delete it.

• Objection & Portability: You have the right to object to specific processing (like direct marketing) and request your data in a structured, machine-readable format.

• Automated Signals: We honor recognized browser-based opt-out preference signals, including Global Privacy Control (GPC), overriding outdated "Do Not Track" limitations.

• Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time without penalty.

4. Security, Retention, & Contact

We deploy industry-standard encryption to protect your data during transit and storage.

• Data Retention: We retain your Order Information only as long as necessary to fulfill the purposes outlined here, or as mandated by Dutch law (e.g., retaining financial transaction records for 7 years for tax authorities).

• Policy Updates: We will update this policy as regulatory requirements evolve. Material changes will be communicated via email or site notice.

• Contact the Data Controller: To exercise your rights or lodge a complaint, email hello@elizaandethan.com or write to: Eliza & Ethan BV, Keizergracht 482, Amsterdam, NH, 1017EG, Netherlands. You also have the right to file a formal complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).