Privacy Policy

1. Responsible party

Luyx Candles, located at Chamottestraat 7, 5953 RM Reuver, is responsible for the processing of personal data as described in this privacy policy.

E-mail: info@luyxcandles.com

2. Introduction

Luyx Candles respects the privacy of all visitors and customers and handles personal data carefully and confidentially, in accordance with the General Data Protection Regulation (GDPR).

In this privacy policy, we explain which personal data we process, for what purposes, and what rights you have.

3. Which personal data do we process?

We may process the following personal data:

name, e-mail address, and telephone number
invoice and delivery address
order details and order history
payment data (securely processed by external payment providers)
technical data such as IP address, browser type, and device data
communication via: emails or messages through the contact form

4. For what purposes and on what basis do we process data?

We process personal data only when this is permitted on the basis of Article 6 of the GDPR.

Personal data are processed for the following purposes:

processing, payment, and delivery of orders (performance of the agreement)
providing customer service and communication (performance of the agreement and legitimate interest)
administration and accounting (legal obligation)
analyzing and improving our website (consent)
securing our website and preventing fraud (legitimate interest)

5. Retention periods

We do not keep personal data longer than necessary:

administration and order data are kept for a maximum of 7 years (tax retention obligation)
customer and communication data are kept as long as the customer relationship exists
newsletter data are kept until you unsubscribe
website and analytics data are kept for a maximum of 2 years

6. Sharing personal data with third parties

We never sell your personal data to third parties.
Data is shared only when necessary for our services or to comply with legal obligations.

Payment providers

For processing payments, we use:

MultiSafepay
PayPal

These parties process payment data independently and in accordance with the GDPR.
Luyx Candles does not have access to full payment data such as credit card or account numbers.

Shipping partner

For delivering orders, we use PostNL.
Only the necessary personal data, such as name and address, are provided to PostNL.

Processor agreements

With all parties that process personal data on our behalf, processor agreements have been concluded in accordance with Article 28 GDPR.

International data transfer

Some service providers, such as PayPal and Google, process personal data outside the European Economic Area (EEA).
In these cases, we ensure appropriate safeguards, such as standard contractual clauses, in accordance with the GDPR.

7. Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access.
Our website uses SSL encryption (HTTPS).

8. Cookies and analytics

Our website uses cookies and similar techniques to:

ensure the website functions properly
gain insight into the usage of the website
improve our service

For analytical purposes, we use Google Analytics. The following measures have been taken:

IP addresses are anonymized
data sharing with Google is limited
a processor agreement has been concluded with Google
data are not used for other Google services

Analytical cookies are placed only after your consent.
You can withdraw your consent at any time via the cookie banner or your browser settings.

9. Your rights

Under the GDPR, you have the following rights:

right of access
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object
right to withdraw your consent at any time

You can submit a request via info@luyxcandles.com.

10. Newsletter

You will receive our newsletter only if you have given permission.
You can unsubscribe at any time via the unsubscribe link in each newsletter.

11. Minors

Our website is not aimed at persons under 16 years.
We do not knowingly collect personal data of minors without permission from a parent or guardian.

12. Changes

We reserve the right to change this privacy policy.
The most current version is always available on our website.

13. Complaints

If you have a complaint about the processing of your personal data, you can contact us.
You also have the right to lodge a complaint with the Dutch Data Protection Authority.

Last updated: December 2025