Privacy policy

Privacy Policy

At Elise Harlow, we value your trust and are committed to protecting your personal data to the highest standards of security, transparency and respect. As a company based in the Netherlands, we fully comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Dutch GDPR Implementation Act (UAVG) and all other applicable Dutch data protection legislation.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our Shopify store, make a purchase or communicate with us. By using our store, you agree to the terms described below.

Data we collect

We only collect and process the information needed to provide a smooth shopping experience and ensure the quality of our services. This includes:

Personal information: such as your full name, email address, phone number, billing and shipping addresses, and payment information (processed securely by trusted external payment providers).

Order data: such as product details, quantities, purchase history and communications related to your order.

Technical data: such as your IP address, browser, operating system, device information, pages visited and referral sources. This helps us analyse store performance and improve the user experience.

Marketing preferences: such as your choices regarding newsletter subscriptions or promotional communications.

We collect this information directly from you when you create an account, place an order, subscribe to our newsletter or interact with our store. In all cases, we make sure to obtain your consent before collecting personal data where legally required.

How we use your data

Your data is used exclusively to provide you with a secure and personalised shopping experience. We may process it for:

Order processing: verifying payments, shipping products and providing purchase confirmations or invoices.

Customer service: responding to your questions and requests quickly and efficiently.

Personalisation: improving your experience by showing relevant content and recommendations.

Marketing communication: sending you news, exclusive promotions or product launches (only with your explicit consent).

Legal compliance: meeting tax and consumer protection obligations.

We never sell, rent or share your personal data with third parties for commercial purposes. Any sharing of information is done solely for legitimate operations and in accordance with the GDPR.

Data storage and security

We understand the importance of your data. All personal information collected is stored on secure servers located in the European Economic Area (EEA). We use SSL encryption, firewalls and advanced security protocols to protect your data against unauthorised access, loss, alteration or misuse.

Access to personal data is limited to authorised employees or partners who need it for their work. These individuals are bound by confidentiality agreements and trained to handle data ethically and responsibly.

When we work with external providers (such as payment processors, carriers or analytics tools), we carefully select these partners to ensure they comply with the GDPR and maintain the same level of security.

Cookies and tracking technologies

Our store uses cookies and similar technologies to improve functionality and offer a personalised experience. Cookies help us remember your preferences, save items in your cart and analyse how you interact with the store.

Types of cookies we use:

Essential: necessary for the store and shopping cart to function.

Performance: to analyse visitor behaviour and improve the experience.

Marketing: to show promotional content and advertising relevant to your interests.

You can manage or disable cookies in your browser settings. Please note that some features of the store may not work properly if you disable them.

Your rights under the GDPR

As a resident of the Netherlands or the EU, you are in control of your personal data and have the following rights:

Right of access: to request confirmation and a copy of your personal data.

Right to rectification: to correct inaccurate or incomplete data.

Right to erasure ("right to be forgotten"): to have your data deleted when it is no longer needed or when you withdraw your consent.

Right to restriction: to restrict the processing of your data in certain circumstances.

Right to data portability: to receive your data in a structured, commonly used and machine-readable format.

Right to object: to object to certain types of processing, such as direct marketing.

To exercise your rights, contact us at info@eliseharlow.com. We respond within the legal deadline of 30 days.

Retention periods

We only keep personal data for as long as necessary for the purposes described in this policy or as required by law. This may include accounting, tax or dispute resolution purposes. Once data is no longer needed, it is securely deleted or anonymised.

Third parties and data transfers

To provide our services efficiently, we may work with third parties such as payment processors, carriers, analytics tools and marketing platforms. All of these partners are required to comply with the GDPR and to handle data responsibly.

Your personal data is not transferred outside the EEA unless adequate safeguards are in place that ensure the same level of protection required by EU law.

Updates to this Privacy Policy

We may update this policy from time to time to reflect changes in our operations, legal obligations or best practices. Any changes will be posted on this page with the "Last updated" date. We recommend checking it regularly to stay informed about how we protect your data.

Contact information

If you have any questions about this Privacy Policy or wish to exercise your rights:

Elise Harlow
Email: info@eliseharlow.com

We take your privacy very seriously and are committed to ensuring maximum transparency and protection of your personal data. Your trust in Elise Harlow is our greatest responsibility.