Privacy Policy - Elmenti

Last updated: May 2026

This Privacy Policy explains how Elmenti, collects, uses, stores, and protects personal data through www.elmenti.com and in connection with our products, services, customer support, and business activities.

1. Who we are

Elmenti

Registered address: Sexbierumerweg 1, 8802 PK Franeker

Chamber of Commerce (KvK): 93585195

E-mail: info@elmenti.com

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), Elmenti is the data controller of your personal data.

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact using the details above or by using the Contact Page

2. Personal data we collect

We may collect and process the following categories of personal data:

a. Information you provide directly

• name

• billing address

• delivery address

• email address

• telephone number

• company name, if applicable

• order details

• payment-related information

• account details, if you create an account

• information you provide when you contact us

• information you provide when requesting fabric samples, quotations, consultations, or support

• any information you provide in reviews, forms, or correspondence

b. Information collected automatically

When you visit our website, we may automatically collect certain information, such as:

• IP address

• browser type

• device type

• operating system

• language settings

• referring pages

• pages visited

• time spent on the website

• click and navigation behaviour

• cookie and tracking data, subject to your preferences and consent where required

c. Information from third parties

We may receive personal data from third parties such as:

• payment providers

• delivery and logistics partners

• ecommerce and website hosting providers

• analytics providers

• marketing or advertising partners, where permitted

• customer service software providers

• social media platforms, if you interact with us there

3. How we collect personal data

We collect personal data when:

• you visit our website

• you place an order

• you create an account

• you sign up for our newsletter

• you contact us by email, telephone, form, or chat

• you request a quote, consultation, or sample

• you participate in a promotion, survey, or campaign

• you leave a review

• you interact with our social media channels

• cookies and similar technologies are used on our website in accordance with your preferences

4. Purposes of processing

We process personal data for the following purposes:

• to process and deliver orders

• to manage payments, returns, refunds, and cancellations

• to provide customer service and support

• to communicate with you about your order, request, or account

• to create and manage customer accounts

• to provide quotations, consultations, and fabric sample services

• to improve our website, products, and services

• to analyse website use and performance

• to send service messages and transactional emails

• to send newsletters and marketing communications where permitted

• to personalise content and marketing where permitted

• to prevent fraud, abuse, and security incidents

• to comply with legal and tax obligations

• to establish, exercise, or defend legal claims

• to manage business administration and internal reporting

5. Legal bases for processing

Under the GDPR, we process personal data on one or more of the following legal bases:

a. Performance of a contract

We process personal data where necessary to perform a contract with you or to take steps at your request before entering into a contract, for example:

• processing orders

• arranging delivery

• handling payments

• responding to product or order enquiries

• providing after-sales support

b. Legal obligation

We process personal data where necessary to comply with legal obligations, for example:

• tax and accounting obligations

• consumer law obligations

• fraud prevention obligations

• responding to lawful requests from authorities

c. Legitimate interests

We may process personal data where necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms. These interests may include:

• improving our website and services

• securing our systems and website

• preventing fraud and misuse

• handling customer service efficiently

• maintaining business records

• analysing performance and customer experience

• limited direct marketing to existing customers where permitted by law

d. Consent

Where required by law, we rely on your consent, for example:

• for sending newsletters or marketing emails where consent is required

• for placing non-essential cookies or similar technologies

• for certain personalised advertising or analytics tools

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Cookies and similar technologies

Our website may use cookies and similar technologies to ensure the website functions properly, to improve performance, and, where permitted, for analytics and marketing purposes.

We may use:

• strictly necessary cookies

• functional cookies

• analytics cookies

• marketing or tracking cookies

Where required by law, we will ask for your consent before placing non-essential cookies or similar technologies on your device.

You can manage your cookie preferences through our cookie banner or browser settings. Disabling certain cookies may affect the functionality of the website.

For more detailed information, you may also refer to our Cookie Policy, if applicable.

7. Newsletters and marketing

If you subscribe to our newsletter or otherwise consent to marketing communications, we may send you updates about collections, launches, products, editorial content, events, and offers.

You can unsubscribe from marketing emails at any time by:

• clicking the unsubscribe link in the email

• contacting us at [EMAIL ADDRESS]

We may still send you non-marketing service communications where necessary, such as order confirmations, delivery updates, or important account and policy notices.

8. Sharing personal data

We do not sell your personal data.

We may share your personal data with third parties where necessary for the purposes described in this Privacy Policy, including:

• payment providers

• ecommerce platform providers

• website hosting providers

• IT and software providers

• delivery, logistics, and fulfilment partners

• customer service providers

• email and newsletter providers

• analytics providers

• advertising or social media partners, where permitted

• accountants, legal advisers, and professional advisers

• public authorities or regulators where legally required

Where third parties process personal data on our behalf, they act as processors and may only process the data in accordance with our instructions and applicable law.

9. International transfers

We aim to process personal data within the European Economic Area (EEA) where possible.

If personal data is transferred outside the EEA, we will ensure that appropriate safeguards are in place as required by applicable law, for example:

• an adequacy decision by the European Commission

• Standard Contractual Clauses

• another lawful transfer mechanism recognised under the GDPR

You may contact us if you would like more information about the safeguards used for international data transfers.

10. Retention periods

We do not keep personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

In general:

• order and invoice data may be retained for as long as required by tax and accounting laws

• customer service correspondence may be retained for a reasonable period to handle follow-up questions, complaints, or legal matters

• account data is retained for as long as the account remains active and for a reasonable period afterwards

• marketing data is retained until you unsubscribe or withdraw consent, unless a longer retention period is justified

• analytics and cookie-related data is retained according to the relevant cookie or platform settings

Where retention periods are not fixed, we determine them based on the nature of the data, the purpose of processing, legal obligations, and the need to protect our legal position.

11. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure.

These measures may include:

• access controls

• secure hosting

• encryption where appropriate

• authentication measures

• internal confidentiality obligations

• monitoring and security updates

However, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

12. Your rights

Under the GDPR, you may have the following rights, subject to applicable conditions and limitations:

• the right of access

• the right to rectification

• the right to erasure

• the right to restriction of processing

• the right to data portability

• the right to object

• the right not to be subject to a decision based solely on automated processing, including profiling, where this produces legal or similarly significant effects

• the right to withdraw consent at any time, where processing is based on consent

If you would like to exercise any of these rights, please contact us at [EMAIL ADDRESS].

We may ask for additional information to verify your identity before responding to your request.

13. Complaints

If you believe that we are processing your personal data unlawfully or not handling your request correctly, you have the right to lodge a complaint with the competent supervisory authority.

In the Netherlands, this is the Autoriteit Persoonsgegevens.

Website: https://autoriteitpersoonsgegevens.nl

You may also contact us first so that we can try to resolve your concern.

14. Children

Our website and services are not intended for children under the age of 16, and we do not knowingly collect personal data from children under 16 without appropriate authorisation where required by law.

If you believe that a child has provided us with personal data without valid consent, please contact us so that we can take appropriate action.

15. Third-party websites and services

Our website may contain links to third-party websites, services, or social media platforms. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies separately.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, or legal obligations.

The most current version will always be published on our website with the updated date shown at the top.

If the changes are material, we may also notify you in another appropriate way where required.

17. Contact

If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact:

Elmenti

Sexbierumerweg 1

8802 PK Franeker

info@elmenti.com

Contact Page