privacy policy

1. Data controller

Company: COMPANY_LEGAL_NAME — INVULLEN (trading as alignly)
Address: STREET, POSTCODE CITY, THE NETHERLANDS — INVULLEN
KvK: KVK_NUMBER — INVULLEN
Privacy contact: privacy@alignly.com

2. What data we collect

When you interact with alignly, we may collect and process the following personal data:

• Contact data: name, email address, phone number
• Shipping data: delivery address, country
• Order data: products ordered, order value, order history
• Payment data: payment method, transaction reference (payment details are processed by Mollie B.V. — alignly does not store full card numbers)
• Account data: password (hashed), account preferences (if you create an account)
• Browsing data: IP address, browser type, pages visited, time on site (via cookies and analytics)
• Marketing data: email newsletter preferences (only with your consent)

3. Why we collect it

• Order fulfillment: processing, shipping, and delivery of your order
• Customer service: handling questions, complaints, and returns
• Legal obligations: invoicing, accounting, and compliance with Dutch and EU law
• Marketing: sending newsletters and offers — only with your explicit consent
• Website improvement: analytics to understand how our website is used

4. Legal basis for processing

• Contract (Art. 6(1)(b) GDPR): processing necessary to fulfill your order and provide customer service
• Legal obligation (Art. 6(1)(c) GDPR): tax and accounting records we must keep by law
• Consent (Art. 6(1)(a) GDPR): marketing emails, non-essential cookies, analytics tracking — you can withdraw consent at any time
• Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention, website security, basic analytics to improve our service

5. Third parties we share data with

• Shopify Inc. — our e-commerce platform. Your data is stored on Shopify servers. Shopify is GDPR-compliant and certified under EU-US Data Privacy Framework. Shopify Privacy Policy
• Mollie B.V. — payment processor, based in the Netherlands. Processes payment data. Mollie Privacy Policy
• PostNL / DHL — shipping carriers who receive your name and address for delivery
• Klaviyo (optional) — email marketing platform, if newsletter is active. US-based, under Standard Contractual Clauses
• Meta Pixel (optional) — conversion tracking, if active. Only with cookie consent
• Google Analytics (optional) — website analytics, if active. Only with cookie consent. Configured with IP anonymisation

We do not sell your personal data to third parties.

6. Data retention

• Order data: 7 years (Dutch tax law requirement)
• Customer accounts: until account deletion request
• Marketing consent: until you unsubscribe or withdraw consent
• Analytics data: 26 months maximum (Google Analytics default)
• Support correspondence: 2 years after case closure

7. Your rights under GDPR

As an EU resident, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations
• Right to portability — receive your data in a structured, machine-readable format
• Right to restriction — request that we restrict processing in certain circumstances
• Right to object — object to processing based on legitimate interest, and to direct marketing
• Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at privacy@alignly.com. We will respond within 30 days.

8. International data transfers

Some of our service providers (Shopify, Klaviyo, Meta, Google) are based in the United States. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

• EU-US Data Privacy Framework adequacy decision (Shopify)
• Standard Contractual Clauses (SCCs) as approved by the European Commission

9. Cookies

We use cookies and similar tracking technologies. For detailed information on which cookies we use and how to manage your preferences, please see our Cookie Policy. You can adjust your cookie preferences at any time via the cookie banner on our website.

Essential cookies are required for the website to function and cannot be disabled. Analytics and marketing cookies are only placed with your explicit consent.

10. Contact and complaints

For any questions about this privacy policy or your personal data, contact us at privacy@alignly.com.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl
Tel: +31 (0)70 888 85 00