Privacy policy

BALÛ, [Street and number], [Postcode] [City], Luxembourg. RCS Luxembourg: [Registration number]. VAT: [VAT number]. Business permit: [Business permit / autorisation d'établissement no.]. Email: hello@shopbalu.com. Phone: [Phone number].

Order data (name, address, email, phone, order details) — to perform the sales contract (Art. 6(1)(b) GDPR).

Payment data — handled by our payment providers; we only receive the transaction result.

Newsletter email address — only with your consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link.

Contact-form messages — to answer you (Art. 6(1)(b) and (f)).

Technical logs and basic analytics — to keep the shop secure and working (Art. 6(1)(f)).

Shopify (shop, checkout and payments), our hosting and email providers, and our carriers. They act on our instructions under data-processing agreements. Some may process data outside the EU under the EU standard contractual clauses.

Order and invoicing data are kept for 10 years for accounting law. Newsletter data until you unsubscribe. Contact messages up to 2 years.

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent — write to hello@shopbalu.com. You can also lodge a complaint with the Luxembourg data-protection authority (CNPD) or the authority of your country.

We use strictly necessary cookies for the cart and checkout, and optional cookies for measurement only if you accept them. You can clear or block cookies in your browser at any time.