Privacy policy.

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we may collect or process the following categories:

• Contact details — name, address, billing address, shipping address, phone number, and email address.
• Financial information — credit card, debit card, payment card information, transaction details and payment confirmation.
• Account information — username, password, security questions, preferences and settings.
• Transaction information — items you view, add to your cart or wishlist, purchase, return, exchange or cancel.
• Communications with us — the information you include in messages to our concierge.
• Device information — your device, browser, IP address and other unique identifiers.
• Usage information — how and when you interact with or navigate the Services.

• Directly from you — when you create an account, place an order or contact us.
• Automatically through the Services — from your device and through cookies and similar technologies.
• From our service providers — payment processors, carriers and analytics tools acting on our behalf.
• From our partners or other third parties.

• Provide and improve the Services — process payments, fulfil orders, arrange shipping, manage your account, handle returns and exchanges, and tailor your experience.
• Marketing and advertising — send seasonal letters from the house and show you relevant online advertisements, only with your consent.
• Security and fraud prevention — authenticate your account and prevent unauthorised or fraudulent activity.
• Customer service — respond to you and maintain our relationship with you.
• Legal reasons — comply with applicable law, respond to legal process, and enforce our policies.

• With vendors who perform services on our behalf (IT, payment processing, analytics, customer support, cloud storage, fulfilment and shipping).
• With business and marketing partners to provide marketing services, in accordance with their own privacy notices.
• When you direct, request or otherwise consent to our disclosure of information to third parties.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger, or to comply with legal obligations and to protect our rights.

The Services may provide links to websites operated by third parties. If you follow links to sites not affiliated with us, you should review their privacy and security policies. We do not guarantee and are not responsible for the privacy or security of such sites.

The Services are not intended to be used by children. We do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, please contact us to request its deletion.

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We recommend you do not use unsecure channels to share sensitive information with us.

Order data is retained for 10 years in accordance with applicable commercial law. Marketing data is retained until you unsubscribe.

Depending on where you live, you may have some or all of the following rights in relation to your personal information:

• Right to access / know the personal information we hold about you.
• Right to delete personal information we maintain about you.
• Right to correct inaccurate personal information.
• Right to portability — receive a copy of your data and request its transfer.
• Right to opt out of the "sale" or "share" of your personal information for targeted advertising.
• Right to object or restrict processing, and to withdraw consent at any time.

You may exercise any of these rights by writing to info@saintveloir.com. We may need to verify your identity before processing your request.

If you have complaints about how we process your personal information, please contact us. You may also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

We may transfer, store and process your personal information outside the country you live in. If we transfer your personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country recognised as providing an adequate level of protection.

We may update this Privacy Policy from time to time, including to reflect changes to our practices. We will post the revised policy on this website and update the "Last updated" date.

Should you have any questions about our privacy practices or this Privacy Policy, please email us at info@saintveloir.com. For the purpose of applicable data protection laws, D.T. E-Commerce (Pinksterbloemweg 255, 1508 BT Zaandam, Netherlands — this is not a return address; KvK 74998129) is the data controller of your personal information.