PRIVACY POLICY
Last updated: October 19, 2026
At Lureto Gallery, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, make a purchase, contact us, or otherwise interact with our webshop.
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.
Please read this Privacy Policy carefully to understand how we handle your personal information.
1. WHO WE ARE
This Privacy Policy applies to the webshop operated by:
Registered company name: SenFi specialist
Webshop / Brand name: Lureto Gallery
Website: www.lureto-gallery.com
Chamber of Commerce (KvK) number: 87458497
Business address: Feijenoorddijk 86, 3071RG Rotterdam, The Netherlands
Email address: info@lureto-gallery.com
In this Privacy Policy, “we,” “us,” and “our” refer to SenFi specialist, trading as Lureto Gallery.
For the purposes of the GDPR, we are generally the data controller responsible for deciding how and why your personal data is processed in connection with our webshop.
Shopify provides the e-commerce platform that enables us to operate our online store. Shopify and other service providers may process personal data as processors or, in certain circumstances, as independent controllers for their own purposes.
2. PERSONAL DATA WE COLLECT
The personal data we collect depends on how you interact with our webshop.
Information you provide directly
When you place an order, contact us, or interact with our store, we may collect:
- Your name and surname.
- Billing and shipping address.
- Email address and telephone number, where provided.
- Order details, including products purchased, quantities, prices, and order history.
- Payment-related information and transaction references.
- Information you provide when contacting customer support or submitting a return or refund request.
- Marketing preferences and consent records, where applicable.
- Other information you voluntarily provide to us.
We do not intentionally collect more personal data than is reasonably necessary for the purposes described in this policy.
Information collected automatically
When you visit our webshop, certain information may be collected automatically, depending on your privacy settings and the technologies used on our website. This may include:
- Internet Protocol (IP) address.
- Browser type, device type, and operating system.
- Website pages visited and interactions with our webshop.
- Referring website or source of a visit.
- Approximate location derived from technical information, where available.
- Cookie identifiers and similar online identifiers.
- Technical information relating to website performance, security, and usage.
Non-essential analytics and advertising technologies will be used only where the required consent or other lawful basis has been obtained.
Information from third parties
We may receive relevant information from service providers involved in operating our webshop, including payment processors, shipping companies, fraud prevention services, and e-commerce platform providers.
Where you interact with our advertisements or marketing campaigns, we may also receive information from advertising or analytics providers, subject to applicable law and your privacy choices.
3. HOW WE USE YOUR PERSONAL DATA
We use personal data for the following purposes:
Processing and fulfilling orders
We use your contact, delivery, payment, and order information to process purchases, arrange deliveries, provide order confirmations, handle returns and refunds, and provide customer support.
Managing our webshop
We use relevant technical and usage information to maintain, operate, troubleshoot, and improve our website and services.
Customer service and communication
We use your information to respond to questions, resolve complaints, communicate about your orders, and provide assistance when needed.
Payments and fraud prevention
We process relevant transaction and technical information to facilitate payments, verify transactions, prevent fraud, and protect our business and customers.
Marketing and promotions
Where permitted by applicable law, we may use your contact details to send promotional communications about our products, offers, and updates.
Where consent is required, we will obtain it before sending marketing communications or using personal data for relevant marketing purposes. You can withdraw your consent or unsubscribe from marketing communications at any time.
Legal and regulatory obligations
We may process personal data to comply with applicable tax, accounting, consumer protection, and other legal obligations, or to establish, exercise, or defend legal claims.
4. LEGAL BASES FOR PROCESSING
Under the GDPR, we process personal data only where an applicable legal basis permits us to do so.
Depending on the purpose, our legal bases may include:
Performance of a contract
We process information necessary to fulfil your purchase, arrange delivery, process payments, handle returns, and provide services you request.
Legal obligation
We process information where necessary to comply with legal obligations, including applicable accounting, tax, and recordkeeping requirements.
Legitimate interests
We may process certain information for legitimate business interests, such as maintaining website security, preventing fraud, improving our services, responding to customer enquiries, and defending legal claims, provided that your rights and interests do not override those interests.
Consent
We rely on consent where required, including for certain non-essential cookies, tracking technologies, and marketing activities.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Where processing is necessary for a contract or legal obligation, providing the relevant personal data may be necessary for us to fulfil your order or comply with the law. If you do not provide that information, we may be unable to complete the relevant transaction or provide the requested service.
5. HOW WE SHARE PERSONAL DATA
We do not disclose personal data indiscriminately. We share information where necessary to operate our webshop, fulfil orders, comply with the law, or pursue other lawful purposes described in this policy.
Recipients may include the following categories of organisations.
Shopify and e-commerce service providers
Our webshop is hosted by Shopify, which provides the infrastructure and tools necessary to operate our store, manage orders, and support our online business.
Payment providers
Payment information may be processed by the payment providers available during checkout. These providers handle transactions according to their own terms, privacy policies, and legal obligations.
Shipping and fulfilment partners
We share relevant contact, delivery, and order information with shipping companies, fulfilment partners, and logistics providers to deliver your purchases and manage delivery issues.
Technology, analytics, and marketing providers
Where used and legally permitted, we may share relevant information with providers that support website maintenance, analytics, customer communications, marketing, advertising, or fraud prevention.
Professional advisers and public authorities
We may disclose information to accountants, legal advisers, regulators, law enforcement agencies, courts, or other authorities where required or permitted by law.
Business transfers
If our business is sold, reorganised, or transferred, personal data may be disclosed to relevant parties as part of that transaction, subject to applicable legal safeguards.
We do not sell your personal information in exchange for money. Certain data sharing or advertising activities may nevertheless qualify as a “sale,” “sharing,” or targeted advertising under specific privacy laws. Where such laws apply, we will provide any required notices and choices.
6. INTERNATIONAL DATA TRANSFERS
We primarily serve customers in Europe but may accept orders from other countries.
Personal data may be processed or accessed in countries outside the European Economic Area (EEA), depending on the service providers, systems, and integrations used by our webshop.
Where personal data is transferred outside the EEA, we will ensure that an appropriate transfer mechanism is in place where required by applicable data protection law. This may include:
- A European Commission adequacy decision for the destination country.
- Standard Contractual Clauses approved by the European Commission.
- Other lawful transfer mechanisms or safeguards permitted under applicable law.
Where required, additional measures may be implemented to protect personal data during international transfers.
You may contact us using the details in this policy if you would like further information about applicable safeguards.
7. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, meeting legal obligations, resolving disputes, and enforcing agreements.
Different categories of information may be retained for different periods.
For example:
- Order and transaction records may be retained for the period required by applicable accounting and tax legislation.
- Customer support correspondence may be retained for as long as necessary to resolve enquiries and maintain appropriate business records.
- Marketing information may be retained until you unsubscribe, withdraw consent where applicable, or the information is no longer needed.
- Cookie and analytics information may be retained according to the applicable tool settings, consent choices, and retention policies.
When personal data is no longer necessary, we will delete it or anonymise it where appropriate, unless further retention is required or permitted by law.
8. COOKIES AND SIMILAR TECHNOLOGIES
Our webshop may use cookies and similar technologies to support its operation, remember preferences, measure performance, and provide relevant marketing where permitted.
Cookies are small files stored on your device when you visit a website. Other technologies, such as pixels and tags, may also collect information about website interactions.
Essential and functional cookies
These technologies are necessary for functions such as maintaining your shopping cart, processing checkout, supporting security, and remembering certain settings.
Analytics and performance cookies
Where enabled, these technologies help us understand how visitors use our webshop so that we can measure performance and improve the customer experience.
Advertising and marketing cookies
Where enabled, these technologies may be used to measure advertising effectiveness, understand interactions with marketing campaigns, or display relevant advertising.
We will request consent before placing or using non-essential cookies and similar technologies where required by applicable law. You can manage your preferences through the cookie consent tools available on our webshop, where provided.
You can also manage certain cookies through your browser settings. Blocking essential cookies may affect the operation of some website features.
If we use third-party apps, pixels, or advertising tools, the technologies and information processed may depend on the specific services enabled in our store.
9. MARKETING COMMUNICATIONS
We may send promotional emails or other marketing communications where permitted by applicable law.
Where consent is required, we will obtain your consent before sending such communications. In certain circumstances, applicable law may allow marketing to existing customers without separate consent, subject to the relevant legal conditions and the opportunity to object.
You can unsubscribe from marketing emails at any time by using the unsubscribe option included in the email or by contacting us at info@lureto-gallery.com.
Even if you opt out of marketing communications, we may still send non-promotional messages relating to your purchases, delivery updates, refunds, security, or other necessary service matters.
10. YOUR DATA PROTECTION RIGHTS
Depending on your location and the applicable law, you may have the following rights concerning your personal data:
Right of access
You may request confirmation of whether we process your personal data and obtain a copy of that information.
Right to rectification
You may request correction of inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data where the legal conditions for erasure are met.
Right to restriction
You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability
Where applicable, you may request to receive certain personal data in a structured, commonly used, machine-readable format or have it transferred to another controller.
Right to object
You may object to processing based on our legitimate interests where the conditions under applicable law are met. You have an unconditional right to object to the use of your personal data for direct marketing.
Right to withdraw consent
Where processing is based on consent, you may withdraw that consent at any time.
Right to lodge a complaint
If you believe that we have handled your personal data unlawfully, you may lodge a complaint with the competent data protection supervisory authority.
In the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
To exercise your rights, contact us at info@lureto-gallery.com. We may request information reasonably necessary to verify your identity before fulfilling a request.
We will respond within the time limits required by applicable law. Some rights are subject to legal conditions and exceptions, including obligations to retain certain records.
11. DATA SECURITY
We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure.
These measures may include access controls, appropriate security practices, and reliance on service providers that support secure e-commerce operations.
However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
If a personal data breach occurs, we will take appropriate steps and notify the relevant supervisory authority and affected individuals where required by applicable law.
12. CHILDREN'S PRIVACY
Our webshop is intended for people who are legally able to make purchases under the applicable laws.
We do not knowingly collect personal data from children in circumstances where parental consent or other legal authorisation is required and has not been obtained.
If you believe that a child has provided us with personal data unlawfully, please contact us so that we can assess the situation and take appropriate action.
13. THIRD-PARTY WEBSITES AND SERVICES
Our webshop may use or integrate with third-party services, applications, payment providers, social media platforms, and other external tools.
These third parties may process personal data under their own privacy policies and terms.
We do not control the privacy practices of independent third-party services. We encourage you to review their privacy information before providing personal data directly to them.
This does not remove any responsibilities we have under applicable data protection law for processing carried out on our behalf or for which we are otherwise responsible.
14. UNITED STATES AND OTHER INTERNATIONAL PRIVACY RIGHTS
Depending on where you live and whether particular privacy laws apply to our business, you may have additional rights concerning your personal data.
These rights may include requesting access to, correction of, or deletion of personal information, obtaining a portable copy of certain information, or opting out of certain forms of targeted advertising or data sharing.
Where applicable, we will provide the required notices and mechanisms for exercising those rights.
We will not unlawfully discriminate against customers for exercising privacy rights protected by applicable law.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our business practices, website functionality, service providers, technology, or legal obligations.
The updated version will be published on our webshop with a revised “Last updated” date.
Where required by law, we will provide additional notice or seek consent before implementing material changes to our data processing practices.
We encourage you to review this Privacy Policy periodically.
16. CONTACT US
If you have questions about this Privacy Policy, would like to exercise your data protection rights, or have concerns about how we process your personal data, please contact us.
SenFi specialist
Trading as Lureto Gallery
Feijenoorddijk 86
3071RG Rotterdam
The Netherlands
Email: info@lureto-gallery.com
Website: www.lureto-gallery.com
KvK number: 87458497
We will make reasonable efforts to respond to your enquiry and address your concerns in accordance with applicable law.
Thank you for trusting Lureto Gallery with your personal information.