Privacy Policy

Effective date: 14 June 2026

Your privacy is important to us.

This Privacy Policy explains how D’HYÈRES collects, uses, and protects your personal data when you visit our website www.dhyeres.com, place an order, or interact with us online.

1. Company Information (Data Controller)

D’HYÈRES
Gerard Doustraat 60HS
1072 VV Amsterdam, The Netherlands
KvK: 69897026
VAT ID: NL858057001B01
Email: info@dhyeres.com
Website: www.dhyeres.com

For the purposes of data protection law, D'HYÈRES is the “data controller” responsible for processing your personal data.

2. Personal Data We Collect

When you visit our website, place an order, or subscribe to our newsletter, we may collect the following information:

Identification data: name, address, phone number, and email
Order details: products purchased, billing and shipping address
Payment details: payment method and transaction ID (processed securely by our payment providers; we do not store full card details)
Account data: login credentials (if you create an account)
Communication data: messages or emails you send us
Device and usage data: IP address, browser type, operating system, and browsing activity (via cookies and analytics tools)

3. How We Use Your Data

We process your personal data for the following purposes:

To process and deliver your order
To communicate with you about your purchase or account
To manage returns, refunds, and warranty requests
To send marketing emails or newsletters (only if you consented)
To improve our website and services
To comply with legal obligations (tax, accounting, consumer law)

4. Legal Basis for Processing

We process your data under the following legal grounds:

Contractual necessity: to fulfill your order and provide customer support
Legal obligation: to meet Dutch and EU accounting, tax, and consumer protection laws
Legitimate interest: to prevent fraud and improve our website
Consent: when you sign up for newsletters, cookies, or marketing communications

You can withdraw your consent at any time by clicking “unsubscribe” in our emails or by contacting info@dhyeres.com.

5. Data Retention

We keep your personal data only as long as necessary for the purpose it was collected or to comply with legal requirements.

Order and invoice data: 7 years (required by Dutch tax law)
Customer correspondence: up to 2 years after the last contact
Marketing data: until you withdraw consent
Website analytics data: up to 14 months (anonymized where possible)

After this period, data is deleted or anonymized.

6. Sharing Your Data

We only share your data when necessary to operate our business and fulfill your order.
Your data may be shared with:

Shopify – our e-commerce platform (Shopify International Ltd, Ireland)
Payment providers – for secure transactions (Shopify Payments, PayPal, etc.)
Shipping partners – to deliver your order (PostNL, DHL, FedEx, etc.)
Email and marketing tools – e.g., Klaviyo for newsletters (based in the U.S., covered under EU Standard Contractual Clauses)
Professional advisors – accountants, tax authorities, or legal consultants, if required by law

We never sell or rent your data to third parties.

7. Cookies and Tracking

Our website uses cookies to:

Enable the checkout and shopping cart functions
Remember your preferences
Analyze traffic and performance (Google Analytics or Shopify Analytics)
Personalize marketing based on your browsing activity

You can accept or reject non-essential cookies through our cookie banner.
You can also delete or block cookies via your browser settings.

For more details, please refer to our separate [Cookie Policy].

8. Data Security

We take your privacy seriously and use appropriate technical and organizational measures to protect your data, including:

Secure (HTTPS) connections
Encrypted payment processing
Access controls and password protection
Regular security monitoring of our website and Shopify systems

Despite these measures, no system is 100% secure, and we cannot guarantee absolute protection against all cyber risks.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access – to request a copy of your data
Right to rectification – to correct inaccurate information
Right to erasure – to request deletion of your data (“right to be forgotten”)
Right to restriction – to limit how we use your data
Right to data portability – to receive your data in a structured format
Right to object – to oppose processing based on legitimate interest or direct marketing
Right to withdraw consent – if you have previously consented to marketing

To exercise any of these rights, email info@dhyeres.com.
We will respond within 30 days of receiving your request.

10. Transfers Outside the EU

Some service providers (such as Shopify and Klaviyo) may process your data outside the European Economic Area (EEA), such as in Canada or the United States.

In such cases, we ensure your data is protected under the EU Standard Contractual Clauses (SCCs) or equivalent safeguards required by the GDPR.

11. Children’s Privacy

Our website and services are intended for adults.

We do not knowingly collect personal data from children under the age of 16.
If you believe your child has provided us with personal data, please contact us immediately so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

The most recent version will always be posted on this page, with the effective date at the top.

13. Contact and Complaints

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:

D’HYÈRES
Email: info@dhyeres.com

If you are not satisfied with our response, you may file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) via:
https://autoriteitpersoonsgegevens.nl/