PRIVACYPolicy

1. Introduction

Welcome to Loco Roll, operated by Groenpack Groothandel ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This Privacy Policy explains how we collect, use, process, and safeguard your personal data when you visit our website (locoroll.nl), purchase our products, or use our B2B wholesale and customer portals.

2. Information We Collect

We collect personal information that you voluntarily provide to us when placing an order, registering an account, subscribing to our newsletter, or contacting us. This includes:

• Identity Data: First name, last name, business/company name (for wholesale partners).
• Contact Data: Shipping address, billing address, email address, phone number.
• Financial & Transaction Data: Payment details (processed securely via Stripe), purchase history, VAT number, Chamber of Commerce (KvK) number.
• Technical Data: IP address, browser type, device information, operating system, and tracking data collected via cookies.

3. How We Use Your Information

We only process your personal data based on legitimate legal grounds. We use the information we collect to:

• Fulfill Orders: Process payments, arrange shipping, and manage order deliveries and returns.
• Account Management: Create and maintain your customer or B2B partner account.
• Customer Support: Respond to your inquiries, resolve service issues, and collect feedback.
• Marketing Communications: Send promotional emails, newsletters, and special B2B wholesale offers (only if you have opted in). You can opt out at any time.
• Security & Optimization: Monitor and prevent fraud, protect website security, and optimize our user experience.

4. Sharing & Disclosure of Data

We do not sell, rent, or trade your personal data. We only share necessary data with trusted third-party service providers who assist us in operating our business:

• Payment Processors: We use Stripe to process all online transactions securely. We do not store credit card details on our servers.
• Logistics Partners: Shipping companies (e.g., DHL, PostNL) receive your name and delivery address to fulfill your orders.
• Technology Providers: Cloud providers (like Cloudflare R2), email delivery systems, and database analytics providers.
• Legal Requirements: We may disclose data if required by law, taxation requirements, or in response to valid requests by public authorities.

5. Data Security

We implement robust security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We use industry-standard 256-bit SSL encryption for data transmission and limit access to personal data to employees and contractors who have a legitimate business need to know.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and remember your cart items. You can choose to disable cookies through your browser settings, though doing so may limit your ability to use certain features on our website.

7. Your Rights under the GDPR

If you are residing within the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your data under certain conditions.
• Right to Portability: You can request to transfer your data to another service provider.
• Right to Object/Restrict: You can object to the processing of your data, particularly for direct marketing purposes.

8. Contact Us

If you have any questions about this Privacy Policy, your rights, or wish to make a request regarding your data, please contact our Data Protection Officer: