Privacy and Cookie Statement – Luxor BV (Shiwi.com)
Last updated: April 7, 2025

Luxor BV, located at Danzigerkade 209A, 1013 AP Amsterdam, highly values your privacy. We handle your personal data with care and explain in this statement which data we process, why we do so, and how we protect it.

Our Core Values
We apply the following principles when processing personal data:
- Inform: we clearly explain how and why we process personal data.
- Limit: we only collect data that is necessary for our services.
- No unwanted marketing: we do not share your data with third parties for marketing purposes without your consent.
- Secure: we take appropriate technical and organizational measures to protect your data.
- Access and control: you have the right to view, correct, or delete your data.

Use of Personal Data
We only process personal data that you directly provide to us or that are clearly provided to us for processing.
You may provide data to us by:
- Placing an order through our webshop;
- Creating an account;
- Signing up for our newsletter;
- Contacting our customer service;
- Visiting our website (where certain data such as your IP address are automatically recorded);
- Entering into a (collaboration) agreement with us, for example as a supplier;
- Applying for a vacancy.

Purposes of Data Processing
We use personal data exclusively for our business operations, meaning for the following purposes:
- Processing orders and payments;
- Shipping orders through our delivery partners;
- Communication with our suppliers;
- Creating and managing accounts;
- Providing customer service;
- Sending newsletters or promotional offers after consent has been obtained;
- Statistical and analytical purposes to improve our website;
- Ensuring the security of our IT systems;
- Complying with legal obligations, such as (tax) administration;
- Other legitimate interests.

Legal Bases for Processing
We process your personal data based on the following legal grounds under the GDPR:
- Performance of a contract;
- Legal obligation;
- Legitimate interest (such as direct marketing, unless you have objected).

Types of Personal Data
We may process the following personal data:
- Name
- Address
- Email address
- Phone number
- Date of birth
- Payment details, such as bank account number
- Order and shipping information
- IP address
- Account details (if created)
- In the case of applicants: information included in a CV, such as education, employment history, and other data relevant to the position
- Other information necessary for the purposes mentioned above.
When you place an order, we use this information to process it correctly.
We share some of your data with our shipping partners DHL, PostNL, GLS, FedEx, UPS, or DPD if necessary to deliver your order.
Payment information is received through Mollie and Shopify Payments.

Retention Periods
We do not retain personal data longer than legally permitted or necessary for the purposes for which they were collected. Administrative data are retained for a statutory period of seven years. Data collected for newsletter subscriptions are kept until the moment you unsubscribe. Data collected for job applications are kept for up to 4 weeks after the completion of the application process.

Sharing with Third Parties and Data Transfers
We only share personal data with third parties if this is necessary for performing our contract or to comply with legal obligations.
We cooperate with:
- Webshop platform: Shopify
- Payment providers: Mollie and Shopify Payments
- Shipping partners: DHL, PostNL, GLS, FedEx, UPS, and DPD
- Analytics: Google Analytics
- Marketing tools: Meta Pixel
These parties process personal data on our behalf and are required to handle it confidentially and securely. Some parties (such as Shopify and Meta) may process data outside the EEA; such transfers are protected by the European Commission’s Standard Contractual Clauses.

Security
We take security measures to prevent misuse and unauthorized access to personal data.
We use, among other things, secure (SSL) connections, strict access controls, and regular security updates.
Cookies
Our website uses cookies, small text files placed on your device.
We use:
1. Functional cookies – necessary for the proper functioning of the webshop (such as shopping cart and preferences).
2. Analytical cookies – via Google Analytics to gain insight into website usage.
3. Marketing cookies – via Meta Pixel to display relevant advertisements.
You can delete or block cookies via your browser settings. Please note that some website features may not work optimally if you do so.

Your Rights
You have the right to:
- Access your personal data;
- Correct inaccurate data;
- Delete your data;
- Withdraw your consent;
- Object to or restrict processing;
- Transfer your data to another party.
To exercise these rights, contact us at customerservice@luxorfashiongroup.com. We may ask you to verify your identity before processing and fulfilling your request. Providing personal data is a contractual requirement when you wish to use our services or place an order via the webshop. If you choose not to provide personal data, this may prevent the possibility of entering into a (purchase) agreement, establishing contact, or participating in an application procedure.

Complaints
If you believe we have not assisted you properly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.

Changes
We reserve the right to modify this privacy and cookie statement. Changes will be published on this page. Please review this statement regularly to stay informed of any updates.

Contact
Luxor BV
Danzigerkade 209A
1013 AP Amsterdam
Email: customerservice@luxorfashiongroup.com
Phone: +31 20 330 99 78
Website: www.shiwi.com