Privacy Policy

Version 20 april 2026 — Eurolight Aalsmeer B.V., trading as By Nance

By Nance takes the protection of your personal data seriously. This policy explains what data we collect, why, and what rights you have — in line with the General Data Protection Regulation (GDPR).

1. Data controller

Eurolight Aalsmeer B.V., trading as By Nance
Kromme Wae 15, 1398 DD Muiden, The Netherlands
KvK 34118841 · VAT NL{TODO-BTW-nummer}B01
Contact: info@eurolight-living.nl · +31 6 5347 7654

2. What data do we process?

All customers (consumer and business):

Name, billing and shipping address, phone number, e-mail
Order history and payment status
Communication (e-mails, WhatsApp, contact forms)
IP address, browser type and limited log data (technically necessary)

Additionally for business customers:

Company name, Chamber of Commerce number and VAT ID (legally required for invoicing and VAT reverse-charge)
Sector and indicative purchase volume (for account approval and tiered pricing)
Contact person's name and role

3. Why do we process this data? (legal basis)

Performance of the contract — handling your order, shipping, invoicing (Art. 6(1)(b) GDPR).
Legal obligation — retaining financial records for 7 years (Dutch General Tax Act art. 52), VAT returns, KvK/VAT validation (VIES) for business customers (Art. 6(1)(c) GDPR).
Legitimate interest — fraud prevention, security, customer administration, B2B account approval (Art. 6(1)(f) GDPR).
Consent — for newsletter, marketing e-mails and non-functional cookies. You may withdraw consent at any time (Art. 6(1)(a) GDPR).

4. With whom do we share data? (processors)

Mollie B.V. — payment processing (iDEAL, card, Bancontact). See mollie.com/privacy
PostNL — shipping within the Netherlands and EU.
Hostinger — hosting (EU data centre).
E-mail provider — transactional and administrative e-mail (NL/EU).
Accounting software & accountant — statutory record-keeping.
VIES (European Commission) — validation of business customers' VAT ID.

We have data-processing agreements with all processors. We never sell your data.

5. Retention periods

Customer account and order history: as long as you are a customer + 2 years after last activity.
Financial records and invoices: 7 years (Dutch tax law).
Unaccepted quotes/requests: 1 year.
Marketing consent: until withdrawn.
Server logs: 30 days.

6. Your rights (GDPR)

You have the right to:

Access the data we hold about you;
Rectification of incorrect data;
Erasure ("right to be forgotten"), insofar as this does not conflict with statutory retention obligations;
Restriction of processing;
Data portability — a copy in a structured format;
Object to processing based on legitimate interest;
Withdraw marketing consent.

Submit a request via info@eurolight-living.nl. We respond within 30 days. For identification we may ask for ID (with BSN/social number and photo masked).

7. Complaint with the Supervisory Authority

You have the right to file a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.

8. Security

We take appropriate technical and organisational measures: TLS encryption (HTTPS), hashed passwords, access control, regular backups and software updates. Payments are processed directly by Mollie; we never store credit-card or iDEAL data.

9. International transfers

Your data is processed within the EU/EEA. If a processor processes data outside the EEA, it does so exclusively under Standard Contractual Clauses or a European Commission adequacy decision.

10. Changes

We may amend this policy. The most recent version is published on nanceshop.easeo.nl.

Questions? Contact info@eurolight-living.nl.