Privacy Policy
We take the security of your personal information very seriously. This Privacy Policy explains what data we collect, why we collect it, and the rights you have regarding your personal information.
1. Who We Are (Data Controller)
Lenoura is owned and operated by Super Patron B.V., which acts as the data controller responsible for processing your personal information through this website.
Company: Super Patron B.V.
Trading Name: Lenoura
Address: Het Hout 35, 9723 LA Groningen, The Netherlands
Email: info@lenoura.com
Phone: +31615603140
2. Information We Collect
We only collect the personal information necessary to provide our services and fulfill our legal obligations. This may include:
Order Information: Your name, billing and shipping address, email address, telephone number (if provided), and transaction details required to process your order.
Account Information: Information relating to your customer account if you choose to create one.
Website Usage Data: Technical information such as your IP address, browser type, device information, and website interactions (collected only where legally permitted or based on your consent).
Marketing Information: Your email address and marketing preferences if you have subscribed to our newsletter.
3. Why We Process Your Data (Legal Basis)
We process your personal data for the following purposes and legal bases under the General Data Protection Regulation (GDPR):
Processing and delivering your orders – Performance of a Contract (Article 6(1)(b) GDPR)
Meeting legal obligations (such as accounting and tax requirements) – Legal Obligation (Article 6(1)(c) GDPR)
Providing customer support – Performance of a Contract (Article 6(1)(b) GDPR)
Fraud prevention and website security – Legitimate Interest (Article 6(1)(f) GDPR)
Analytics and marketing – Consent (Article 6(1)(a) GDPR)
4. How We Share Your Data
We only share your personal information where necessary to operate our business and complete your order.
Recipients may include:
Payment service providers
Shipping and logistics partners
IT service providers and website hosting providers
Professional advisers where legally required
Our online store is hosted by Shopify, which processes data on our behalf. Please refer to Shopify's Privacy Policy for further information about how Shopify processes personal data.
5. Payments and Security
Payments are processed securely through trusted payment providers that comply with PCI-DSS security standards.
We do not store complete payment card information ourselves. Payment information is retained only where necessary for legal, accounting, or fraud prevention purposes.
6. Analytics and Cookies
Our website uses cookies and similar technologies.
Essential Cookies: Required for website functionality, including shopping cart and checkout features.
Analytics Cookies: Used to understand website performance (for example through Google Analytics with IP anonymization where applicable).
Marketing Cookies: Used only after you have provided consent.
You may change or withdraw your cookie preferences at any time through our cookie settings.
For more information about cookies used by Shopify, please refer to Shopify's Cookie Policy.
7. Data Security and Retention
We protect your personal information using industry-standard security measures, including SSL/TLS encryption and secure hosting environments.
Your information is retained only for as long as necessary to:
fulfil your order;
comply with legal obligations;
resolve disputes;
enforce our agreements.
When data is no longer required, it is securely deleted or anonymised.
8. Your Privacy Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
Access your personal information
Correct inaccurate or incomplete data
Request deletion of your personal information
Restrict processing
Receive a copy of your data (data portability)
Object to processing based on legitimate interests
Withdraw your consent at any time where processing is based on consent
To exercise any of these rights, please contact us at:
Email: info@lenoura.com
9. International Data Transfers
Where personal information is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or other approved legal transfer mechanisms in accordance with the GDPR.
10. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or our business operations.
The latest version will always be published on our website. Where legally required, we will notify users of significant changes.