Privacy policy

Last updated: 10 August 2026

Welcome to byLurea.

This Privacy Policy explains how we collect, use, store, protect and share your personal data when you visit our website, place an order, contact us or otherwise use our services.

For the purposes of this Privacy Policy, "you" refers to any individual whose personal data we process, including website visitors, customers and users.

We encourage you to read this Privacy Policy carefully.

1. Who Is Responsible for Your Personal Data?

The party responsible for processing your personal data is:

Company name: Ibi internationaal
Trade name: byLurea
Address: Spreeuwstraat 3, 7102 HE Winterswijk, The Netherlands
Registration number (KVK Netherlands): 42091095
VAT Number: NL005488384B24
Email: info@bylurea.com
Phone: +31623088296

If you have any questions regarding the processing of your personal data, you can contact us at info@bylurea.com

2. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example because of changes to our services, website, technologies or applicable laws and regulations.

The most recent version will be published on our website, with the date of the latest update displayed at the top of this page.

We recommend reviewing this Privacy Policy periodically.

3. What Personal Data Do We Collect?

Depending on how you interact with our website and services, we may collect the following categories of personal data.

3.1 Information You Provide Directly

This may include:

First and last name;
Email address;
Telephone number;
Billing address;
Shipping address;
Order information;
Information relating to your payment or transaction;
Account information, where customer accounts are available;
Information you provide through contact forms;
Messages and correspondence with our customer service;
Return, refund or complaint information;
Any other information you voluntarily provide to us.

Payment transactions may be processed by third-party payment providers. We generally do not directly store full payment card details where these are processed securely by such providers.

3.2 Information Collected Automatically

When you visit or use our website, certain technical information may be collected automatically, including:

IP address;
Browser type;
Device type;
Operating system;
Pages viewed;
Date and time of visits;
Website interactions;
Referring pages or websites;
Cookie identifiers;
Technical and diagnostic information.

We may collect this information through cookies and similar technologies, subject to applicable consent requirements.

3.3 Information Received From Third Parties

We may receive personal data from third parties that help us operate our online store and provide our services.

These parties may include:

Shopify, which provides our e-commerce platform;
Payment service providers;
Shipping and logistics providers;
Website hosting and technical service providers;
Analytics providers;
Customer service providers;
Marketing or advertising providers, where applicable and permitted by law.

The information received may include transaction status, order information, delivery information, technical information or other information necessary to provide our services.

4. Why Do We Process Your Personal Data?

We process personal data only where we have an appropriate legal basis.

Depending on the circumstances, we may process your personal data for the following purposes:

Processing and Fulfilling Orders

We use your information to:

Process your order;
Receive and verify payment;
Prepare products for shipment;
Arrange delivery;
Send order confirmations;
Provide delivery and order status updates;
Process returns, exchanges and refunds.

This processing is generally necessary to perform our agreement with you.

Customer Service

We use your information to:

Respond to questions;
Handle requests;
Process complaints;
Assist with orders, deliveries and returns;
Communicate with you about our services.

Legal and Administrative Obligations

We may process and retain certain information where necessary to comply with legal obligations, including accounting, tax, fraud prevention and consumer protection requirements.

Website Operation and Security

We may process technical information to:

Operate our website;
Maintain website security;
Detect fraud or misuse;
Diagnose technical problems;
Prevent unauthorised access;
Protect our business and customers.

Where applicable, this processing may be based on our legitimate interests in operating and protecting our online store.

Website Improvement and Analytics

Where permitted by law and, where required, with your consent, we may use information about how visitors interact with our website to understand website performance and improve our services and user experience.

Marketing Communications

Where required by law, we will only send newsletters or promotional electronic communications after obtaining the necessary consent.

You may withdraw your consent or unsubscribe from marketing communications at any time.

5. Legal Bases for Processing

Under applicable data protection law, we may rely on one or more of the following legal bases:

Performance of a contract: where processing is necessary to process and fulfil your order or provide requested services;
Legal obligation: where we are legally required to process or retain certain information;
Legitimate interests: where processing is reasonably necessary for our legitimate business interests and your rights and interests do not override those interests;
Consent: where you have given us permission for a specific processing activity, such as certain marketing communications or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies may be used to:

Enable essential website functionality;
Remember your preferences;
Maintain your shopping cart;
Help process orders;
Improve website security;
Understand website usage and performance;
Support analytics;
Support marketing or advertising activities where applicable.

Essential Cookies

Certain cookies are necessary for our website and online store to function correctly.

These cookies may be used without consent where permitted by applicable law.

Non-Essential Cookies

Where legally required, analytics, marketing, advertising or other non-essential cookies will only be activated after you have provided the required consent.

Where available, you can use our cookie preferences or consent interface to accept, reject or manage non-essential cookies.

You may also manage certain cookies through your browser settings.

Please note that disabling essential cookies may affect the functionality of our website.

Because our online store uses Shopify, certain cookies and technologies may also be provided by Shopify. Further information about these technologies is available in Shopify's Cookie Policy.

7. Sharing Your Personal Data

We do not sell your personal data.

We only share personal data where this is reasonably necessary for our business operations, to provide our services, or where required by law.

Recipients may include:

Shopify

Our online store is powered by Shopify. Shopify may process certain personal data in connection with providing its e-commerce platform and related services.

Payment Service Providers

We may share information with payment providers where necessary to process payments, refunds and transactions.

Shipping and Logistics Providers

We share necessary delivery information with carriers, fulfilment providers and logistics partners to deliver your order.

This may include your:

Name;
Delivery address;
Email address;
Telephone number;
Order or shipment information.

Technical Service Providers

Personal data may be processed by service providers that support:

Website hosting;
IT infrastructure;
Security;
Customer service;
Email communications;
Analytics;
Fraud prevention.

Marketing Providers

Where applicable and subject to consent requirements, personal data may be shared with marketing or advertising service providers.

Authorities and Legal Requirements

We may disclose personal data to competent authorities, regulators, courts or other parties where required by law or where reasonably necessary to establish, exercise or defend legal claims.

8. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection law.

Depending on the circumstances, safeguards may include:

A European Commission adequacy decision;
Standard Contractual Clauses approved by the European Commission;
Other legally recognised transfer mechanisms or safeguards.

9. How Long Do We Keep Your Personal Data?

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal obligations.

The applicable retention period may depend on factors such as:

The type of personal data;
The purpose for which it was collected;
The duration of our customer relationship;
Applicable tax and accounting requirements;
Consumer protection requirements;
Fraud prevention;
Potential legal claims.

When personal data is no longer required, we will delete or anonymise it where appropriate, unless continued retention is legally required.

10. Data Security

We take appropriate technical and organisational measures designed to protect personal data against:

Loss;
Misuse;
Unauthorised access;
Unauthorised disclosure;
Alteration;
Destruction.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

You are responsible for keeping any passwords and account credentials confidential.

If you believe your account or personal information may have been compromised, please contact us at info@bylurea.com

11. Your Privacy Rights

If the General Data Protection Regulation (GDPR/AVG) applies to you, you may have various rights concerning your personal data.

Subject to applicable legal conditions and exceptions, these may include:

Right of Access

You may request confirmation as to whether we process your personal data and request access to that data.

Right to Rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to Erasure

You may ask us to delete your personal data where the applicable legal requirements are met.

Right to Restriction of Processing

In certain circumstances, you may request that the processing of your personal data be restricted.

Right to Object

You may object to certain processing of your personal data, particularly where processing is based on legitimate interests or is carried out for direct marketing purposes.

Right to Data Portability

Where applicable, you may request certain personal data in a structured, commonly used and machine-readable format.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

12. How to Exercise Your Rights

To exercise your privacy rights, contact us at:

Email: info@bylurea.com

Please clearly describe your request.

We may ask for additional information where reasonably necessary to verify your identity and protect your personal data against unauthorised requests.

We will respond within the timeframe required by applicable data protection law.

Exercising your privacy rights will not result in unfair treatment or adverse consequences.

Certain rights are subject to legal exceptions. For example, we may be required to retain certain order, transaction or accounting information despite a deletion request if retention is required by law.

13. Marketing Communications

If you have subscribed to marketing communications, you may unsubscribe at any time.

You may do so by:

Using the unsubscribe option included in our marketing emails; or
Contacting us at info@bylurea.com

Withdrawal from marketing communications does not prevent us from sending necessary transactional communications relating to an order, payment, delivery, return or customer service request.

14. Children's Privacy

Our online store is not intended for children to make purchases independently.

We do not knowingly seek to collect personal data from children where parental or legal guardian consent would be required under applicable law.

If you believe a child has provided personal data to us unlawfully, please contact us at info@bylurea.com

15. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of independent third parties.

We recommend reviewing the privacy policy of any third-party website you visit.

16. Questions and Complaints

If you have questions, concerns or complaints about this Privacy Policy or how we process your personal data, please contact us first at:

info@bylurea.com

We will make reasonable efforts to address your request or complaint.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

Customers in the Netherlands

The competent Dutch data protection authority is:

Autoriteit Persoonsgegevens (AP)

Depending on the circumstances, you may also have the right to complain to another competent supervisory authority within the European Union.

17. Contact Information

If you have any questions about this Privacy Policy or our processing of personal data, please contact us.

We aim to respond within 24 hours during our business hours.

Customer service opening hours
Opening hours (Monday to Friday):
9:00 AM to 6:00 PM (GMT+01:00) Amsterdam

Opening hours (Saturday and Sunday):
10:00 AM to 4:00 PM (GMT+01:00) Amsterdam

Country/Region