Privacy policy

We handle your personal data with care, in line with the GDPR.

1. Who we are

This privacy policy explains how VIVITSTAR processes your personal data. The controller is [FILL IN: company name], established at [FILL IN: business address], registered with the Dutch Chamber of Commerce (KvK) under number [FILL IN: KvK number]. For any privacy question, email hello@vivitstar.com.

2. What data we collect

Depending on how you use our store, we process: your name, delivery and billing address, email address, phone number, order history, payment details (we never see or store full card numbers — these are handled by our payment providers), the contents of messages you send us, and technical data about your visit such as IP address, browser type and pages viewed (partly via cookies — see our cookie policy).

3. Why we use your data, and on what legal basis

Processing and delivering your order — necessary for the performance of the contract.
Customer service and handling returns — performance of the contract and our legitimate interest in good service.
Sending our newsletter — only with your consent, which you can withdraw at any time via the unsubscribe link.
Improving our website and preventing fraud — our legitimate interest in a well-functioning, secure store.
Keeping financial records — a legal obligation under Dutch tax law.

4. Who we share data with

Our store runs on Shopify, which processes customer and order data on our behalf as a processor. We also share data with parties strictly needed to fulfil your order: payment providers (such as iDEAL, PayPal, Klarna and card processors) to handle your payment, and postal carriers to deliver your parcel. These parties may only use your data for those purposes. We never sell your personal data. Where data is transferred outside the EEA (for example by Shopify), this is done under appropriate safeguards such as the EU Standard Contractual Clauses.

5. How long we keep your data

We keep your data no longer than necessary for the purposes above. Order and invoice data is kept for 7 years to meet our legal retention obligation towards the Dutch tax authorities. Customer-service correspondence is kept for up to 2 years after the matter is closed. Newsletter data is kept until you unsubscribe.

6. Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, the right to restrict processing, the right to data portability, and the right to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, email hello@vivitstar.com — we respond within one month. We may ask you to verify your identity first.

7. Complaints

If you believe we handle your data incorrectly, please contact us first so we can resolve it. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

8. Security and changes

We take appropriate technical and organisational measures to protect your data, including encrypted (SSL/TLS) connections throughout the store and checkout. We may update this policy from time to time; the current version is always published on this page.

Last updated: 2 July 2026.