Garaufi – Privacy Policy

Last updated: 01 December 2025

This Privacy Policy describes how Garaufi (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit or make a purchase from our website www.garaufi.nl (the “Site”). We operate in accordance with the General Data Protection Regulation (GDPR) and applicable European privacy law.

1. Information We Collect

Information you provide

We collect personal information that you voluntarily submit when interacting with our Site, including:

• Name and surname

• Shipping and billing address

• Contact details (email address, phone number)

• Payment details (processed securely via third-party payment providers)

• Order history

• Account login details, if applicable

Automatically collected data

When you browse our Site, we may automatically collect:

• IP address and device details

• Browser type

• Cookies and browsing behaviour

• Pages visited and navigation patterns

This information helps us ensure website functionality, security, analytics, and user experience.

2. How We Use Your Information

We only process your data for legitimate purposes, such as:

• Processing and fulfilling orders

• Delivering purchased goods

• Communicating about orders, delivery or returns

• Providing customer support

• Improving store experience and performance

• Fraud detection and prevention

• Email marketing (only with your consent)

• Legal and tax compliance

3. Legal Basis for Processing (GDPR)

We process your personal information under the following legal grounds:

• Contractual need (to fulfil your purchase)

• Legal obligation (accounting, tax, compliance)

• Legitimate interest (fraud prevention, analytics, optimisation)

• Consent (email marketing, optional cookies)

4. Sharing of Personal Information

We do not sell, rent, or trade personal data.
However, we may share information with trusted third parties necessary for running our business, including:

• Shopify (website platform)

• Payment providers (e.g. banks, Visa, Mastercard, Apple Pay, PayPal)

• Shipping carriers and logistics partners

• Customer support tools

• Analytics platforms

These parties only receive what is necessary to perform their service and must comply with GDPR standards.

5. Cookies

Our Site uses cookies to maintain functionality, personalise content, and analyse website performance.
Upon entering our Site, you may accept, reject, or adjust cookie preferences.

6. Data Retention

We retain your personal information only as long as required to:

• complete your order,

• resolve disputes,

• meet legal obligations,

• and maintain accurate business records.

You may request that we delete your information at any time (see Section 9).

7. Security Measures

We apply appropriate technical and organisational safeguards to protect personal data against unauthorised access, misuse, disclosure, or loss.
This includes encrypted connections (SSL), restricted data access, secure payment processing and GDPR-compliant third-party solutions.

8. Marketing Communications

We will only contact you with newsletters, promotions or marketing messages if you have voluntarily subscribed.
You can unsubscribe at any moment by clicking the “unsubscribe” link or by emailing us at info@garaufi.nl.

9. Your Rights Under GDPR

Under European privacy law, you have the right to:

• Access your data

• Request corrections

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Withdraw consent

• Request data portability

To submit a request, email us at info@garaufi.nl.

10. Third-Party Links

Our Site may contain links to external websites.
We are not responsible for the content, policies or actions of these third parties.

11. Updates to This Policy

We may update this Privacy Policy from time to time.
Any revisions will be indicated at the top of this document under “Last updated”.

12. Contact Information

If you have questions, concerns, or privacy requests, you can reach us at:

Garaufi
Amsterdam, The Netherlands
Email: info@garaufi.nl