Privacy Policy
Privacy Policy
Last Updated: 03-12-2025
This Privacy Policy constitutes a legally binding data protection notice governing the collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, erasure and destruction of personal data processed by Lo-Cate (“the Company”, “we”, “us”, “our”) in connection with the operation of this website, the provision of associated digital interfaces, and the performance of commercial transactions and customer-facing activities (collectively, the “Services”).
By accessing or engaging with the Services, the user acknowledges and agrees to the processing of personal data as described herein. This Policy is issued pursuant to Regulation (EU) 2016/679 (GDPR), the Dutch Algemene Verordening Gegevensbescherming, the Portuguese Lei de Proteção de Dados Pessoais, and all applicable European data protection principles.
1. Data Controller Identification
Lo-Cate
Local entrepreneur
Marnixstraat 245-3V
1015 WG Amsterdam
The Netherlands
KvK: 96748303
VAT: NL005229124B29
Contact: info@lo-cate.com
2. Definitions
“Personal Data” means any information relating to an identified or identifiable natural person.
“Processing” has the meaning assigned in Article 4(2) GDPR.
“User”, “Data Subject” or “Consumer” refers to any individual engaging with the Services.
“Processor” refers to third parties processing data on behalf of the Company.
3. Categories of Personal Data Collected
The Company may collect and process the following categories of personal data:
Identity and Contact Data: name, address, telephone number, email.
Financial Data: card information, payment data, transaction identifiers.
Account Data: login credentials, preferences and settings.
Transactional Data: purchase history, viewed items, returns and exchanges.
Communications Data: messages, inquiries and support interactions.
Technical Data: IP address, browser details, device identifiers.
Usage Data: traffic metadata, click behaviour, navigation logs.
Cookies and Tracking Data: unique identifiers, analytics and marketing tags.
Anonymous or irreversibly pseudonymized data is not considered Personal Data.
4. Sources of Personal Data
Personal Data may be obtained directly from the User, automatically via cookies, from Shopify as platform provider, from payment processors, logistics partners, or from marketing/analytics partners under contract.
5. Legal Bases for Processing
Processing is based on one or more lawful grounds under Article 6 GDPR:
Performance of a contract.
Compliance with legal obligations.
Legitimate interests in maintaining security, fraud prevention and operational functionality.
Consent for marketing, analytics or other non-essential processing.
Protection of vital interests, where applicable.
6. Purposes of Processing
Personal Data may be processed for:
Providing and optimizing the Services.
Processing orders, payments, returns and refunds.
Account management and authentication.
Customer support and communication.
Personalization and recommendations.
Marketing and advertising communications.
Fraud detection and security enhancement.
Compliance with statutory requirements and administrative obligations.
7. Disclosure of Personal Data
Personal Data may be disclosed to:
Shopify as platform provider.
Payment processors.
Shipping and logistics partners.
IT and infrastructure providers.
Marketing and analytics partners.
Corporate affiliates.
Regulatory authorities when required by law.
Third parties in mergers, acquisitions or business transfers.
8. Relationship with Shopify
Shopify processes certain technical and transactional data to operate the platform.
Further information is available at: https://www.shopify.com/legal/privacy
Users may exercise privacy rights with Shopify at: https://privacy.shopify.com/en/request
9. Cookies and Tracking Technologies
The Services use cookies, pixels and tracking tools for:
Necessary functionality.
Performance and analytics.
Personalization.
Marketing and advertising.
Non-essential cookies are used only where required consent has been obtained.
10. Children’s Data
The Services are not intended for minors. Personal Data of minors is not knowingly collected.
11. Data Security
Appropriate technical and organizational measures are implemented to safeguard Personal Data. Absolute security cannot be guaranteed.
12. Retention Periods
Personal Data is retained only as long as necessary for its purposes, subject to statutory obligations.
Transactional Data: retained for seven years for tax and accounting compliance.
Account Data: retained until deletion.
Marketing Data: retained until consent withdrawal.
Customer Support Data: retained until resolution.
Technical Logs: retained for security and diagnostics for appropriately limited periods.
13. International Transfers
Personal Data may be transferred outside the EEA.
Transfers rely on Standard Contractual Clauses, processor agreements and supplementary safeguards.
14. Automated Decision-Making and Profiling
Fraud detection and analytics systems may involve profiling.
No automated decisions producing significant legal effects are made without human review.
15. Rights of the Data Subject
Users may exercise the following rights:
Access to Personal Data.
Rectification of inaccuracies.
Erasure of data.
Data portability.
Restriction of processing.
Objection to processing.
Withdrawal of consent.
Right to complain to a supervisory authority.
Requests may be submitted via Support@lo-cate.com.
16. Complaints
Users may file complaints with the Company or, where relevant, with their national supervisory authority, including the Autoriteit Persoonsgegevens (NL) or CNPD (PT).
17. Updates to This Policy
This Policy may be updated periodically to reflect technological, operational or legal changes.
The “Last Updated” date will be revised accordingly.
18. Contact Information
Support@lo-cate.com
Lo-Cate, Data Controller