Privacy Policy

IZZI Label
 KvK: 78696038
 Bakkerstraat 10-1, 6811 EG Arnhem, The Netherlands
 info@izzilabel.com
 VAT: NL003366059B97

Last updated: September 2025

1. Introduction

At IZZI Label, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Dutch and EU law.

By using our website, services, and making purchases, you agree to this Privacy Policy.

2. Data We Collect

We may collect the following types of personal data:

  • Identity & contact details: name, billing/shipping address, email, phone number, account login details.
  • Order details: products purchased, payment status, shipping details.
  • Payment information: processed securely by our payment providers (Stripe, Klarna, PayPal).
  • Marketing preferences: newsletter subscription, consent for marketing communications.
  • Technical information: IP address, device/browser type, cookies (functional, analytics, marketing).

We do not collect or store sensitive personal data (such as health, political, or biometric data).

3. Purpose of Processing

We process your personal data for the following purposes:

  • To process and deliver your orders.
  • To provide account access and customer support.
  • To handle payments securely.
  • To send you newsletters and marketing communications (with consent).
  • To improve our website and services through analytics.
  • To comply with legal obligations (e.g. tax administration).

4. Legal Basis for Processing

We rely on the following legal bases under GDPR:

  • Contract performance: processing orders, shipping, payments.
  • Legal obligation: maintaining records for tax/accounting (7 years).
  • Consent: newsletters, marketing cookies.
  • Legitimate interest: fraud prevention, platform security, service improvement.

5. Data Sharing with Third Parties

We only share data with third parties when necessary for our services:

  • Shopify – e-commerce platform & hosting.
  • Stripe, Klarna, PayPal – payment processing.
  • Sendcloud, PostNL, DHL – shipping & logistics.
  • Klaviyo – email marketing & newsletters.
  • Meta (Facebook & Instagram Pixel) – advertising & retargeting.
  • Google Analytics – privacy-friendly analytics (IP anonymized).
  • Hostnet – domain & hosting services.

All third parties comply with GDPR or equivalent safeguards.

6. International Data Transfers

Some of our partners (Shopify, Klaviyo, Meta, Google, Stripe) may process data outside the EU, including the UK and Asia/USA.
 We ensure such transfers are lawful under GDPR, using:

  • Standard Contractual Clauses (SCCs), or
  • EU-US Data Privacy Framework, where applicable.

7. Data Retention

We retain personal data only as long as necessary:

  • Order & payment records: 7 years (Dutch tax law).
  • Account data: active until account deletion.
  • Newsletter/marketing data: until you unsubscribe.
  • Cookies: up to 24 months (depending on type).

8. Your Rights

You have the following rights under GDPR:

  • Access your personal data.
  • Correct inaccurate data.
  • Request deletion (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time (for marketing/newsletters).
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise your rights, contact us at: info@izzilabel.com.

9. Security


We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access or disclosure. These measures include, but are not limited to:

  • SSL/TLS encryption for all data transfers.
  • Encrypted storage of personal data where possible.
  • Two-factor authentication (2FA) on all accounts and platforms used for processing data.
  • Access controls and limitation of personal data access to authorized staff only.
  • Regular updates and monitoring of our IT systems.
  • Data breach protocol: in case of a data breach, we will notify the competent authority (Autoriteit Persoonsgegevens), affected customers, and — where applicable — our partner Closet without undue delay.
  • Data Processing Agreements (DPAs) are in place with all our processors and sub-processors (e.g. Shopify, Stripe, Klarna, PayPal, Sendcloud, PostNL, DHL, Klaviyo, Meta, Google, Hostnet).

10. Cookies

We use cookies for:

  • Functional purposes: to ensure the website works correctly.
  • Analytics: via Google Analytics (privacy-friendly, IP anonymized).
  • Marketing: via Meta Pixel, Klaviyo, Shopify.

You can manage or disable cookies through your browser settings.

11. Contact

For questions, requests, or complaints about this Privacy Policy, contact us:

IZZI Label
 Bakkerstraat 10-1
 6811 EG Arnhem
 The Netherlands
 info@izzilabel.com

 

https://www.izzilabel.com/pages/ccpa-opt-out