Login

Country

Cart

Your cart is empty

Privacy policy

Introduction

This Privacy Policy explains how BESNARD ("we," "us," or "our"), registered at Zijlstraat 89, 2011 TM Haarlem, the Netherlands (KvK: 68440596, VAT: NL001153681B18), collects, uses, stores, and shares personal data in connection with your use of our website, digital services, communication channels, or other interaction with us (collectively, the "Services").

As a data controller established in Europe, we process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable privacy legislation.

1. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal requirements, internal policy changes, technological developments, or changes in how we process personal data. We will publish the revised version on our website with an updated "last modified" date. Where changes are material, we will inform you in advance where legally required.

2. Data Controller

Unless stated otherwise, BESNARD, Zijlstraat 89, 2011 TM Haarlem, the Netherlands, is the data controller responsible for processing your personal data within the meaning of the GDPR.

3. What personal data do we collect?

a. Data you provide directly
Contact details (name, email, phone number, billing and delivery address), account details, payment details (we do not receive full card data; this is processed by our certified payment providers), and the content of any correspondence with us.

b. Data collected automatically
IP address, device ID, browser type, operating system, visit duration and frequency, approximate location based on IP address, and browsing/click behaviour on our website. See Section 6, Cookies and tracking technologies for details.

c. Data received from third parties
We receive personal data from third parties only where necessary to perform our contract with you, deliver our services, or for marketing purposes. This includes data from:

  • Shopify, our e-commerce platform, which processes technical and order-related data;
  • Payment providers such as Shopify Payments, PayPal, and Apple Pay, which pass transaction data to us;
  • Marketing and advertising partners, such as Meta (Facebook/Instagram), Google Ads, and Klaviyo, where you have consented to cookies or advertising tracking;
  • Shopify Analytics, for user behaviour and website optimisation.
4. Purposes and legal bases for processing

We process your personal data only on the basis of one or more legal grounds under Article 6(1) GDPR:

  • Performance of a contract (Art. 6(1)(b)): processing and fulfilling orders, payments, shipping, returns, and customer service;
  • Legal obligation (Art. 6(1)(c)): tax and accounting record-keeping, fraud prevention;
  • Legitimate interest (Art. 6(1)(f)): improving our website and services, internal analysis, securing our systems, and, where legally permitted, direct marketing to existing customers;
  • Consent (Art. 6(1)(a)): sending marketing communications by email or SMS, placing cookies and tracking technologies, or sharing data with advertising partners.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

5. Marketing and personalised communication

With your consent, or where permitted under our legitimate interest, we may send you promotional communications by email about our products, offers, or news. You can unsubscribe at any time via the link at the bottom of our emails, or by contacting customercare@besnard.co.

6. Cookies and tracking technologies

We use cookies and similar technologies to operate our website, remember your preferences, and understand how our website is used. When you first visit our website, you can choose which categories of cookies to accept.

  • Operate the website: required for the website to function and for essential activities such as protecting against fraud. These cannot be switched off.
  • Store your preferences: help remember choices such as your country or language, to personalise your next visit.
  • Personalise marketing: used to show you advertising on other sites and in marketing communications based on your interests.
  • Measure performance: help us understand how visitors interact with our website and which content is valuable, so we can improve it.

You can accept all cookies, decline all non-essential cookies, or choose which categories apply to you.

7. Sharing personal data with third parties

We share personal data only where necessary to deliver our services, comply with legal obligations, or on the basis of legitimate interest:

  • Service providers: Shopify (e-commerce platform), payment providers (Shopify Payments, PayPal, Apple Pay), logistics and shipping partners, IT and hosting providers;
  • Marketing and analytics partners: Klaviyo (email marketing), Meta and Google Ads (advertising), Shopify Analytics (website behaviour and optimisation);
  • Authorities and regulators, where legally required;
  • Business transfers, in the event of a merger, acquisition, or sale of all or part of the business.

Where personal data is shared with processors, we enter into a data processing agreement covering confidentiality, security, and GDPR compliance.

8. International data transfers

Some of our service providers, including Shopify, are based outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure this occurs only on the basis of a valid transfer mechanism, an EU adequacy decision, the European Commission's Standard Contractual Clauses, or, for transfers to the United States, certification under the EU-US Data Privacy Framework.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure connections (SSL/TLS), access controls, and regular review of our security measures. In the event of a data breach affecting your personal data, we will notify the Dutch Data Protection Authority within 72 hours where required, and inform you where necessary.

10. Retention

We retain personal data no longer than necessary for the purpose for which it was collected, unless a longer period is legally required.

  • Tax and administrative records (invoices, payment information, transaction history): 7 years, per Dutch statutory tax retention requirements.
  • Customer and account data (contact details, order history, communication): we aim to retain this data for as long as your account remains active, and to delete or anonymise it after 3 years of inactivity.
  • Marketing consent and preferences: until you withdraw consent or request deletion.
  • Customer service correspondence: we aim to retain this for up to 3 years after your request is resolved, unless a longer period is necessary for legal evidence.
11. Your rights under the GDPR

You have the right to: access your data (Art. 15), rectify inaccurate data (Art. 16), request erasure (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing (Art. 21), and withdraw consent at any time (Art. 7(3)). To exercise any of these rights, contact us at customercare@besnard.co. We will respond within one month, extendable by two months for complex requests.

12. Children

Our Services are not directed at, or intended for, children under 16, and we do not knowingly collect personal data from them.

13. Complaints and supervision

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands:

Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag
www.autoriteitpersoonsgegevens.nl

14. Contact

BESNARD
Zijlstraat 89, 2011 TM Haarlem, the Netherlands
customercare@besnard.co