Terms and policies
Privacy and cookies
What data we keep about you, why, and for how long. In plain language, without changing the meaning. If you have any questions, please email info@el-pasha.com.
In short
We only process what is necessary to fulfill your order and answer your query. We do not sell your data. We retain order data for seven years as required by tax law, and correspondence for two years. We only place analytical and marketing cookies with your consent. You may always request, correct, or delete the data we hold about you. This summary is for ease of reading; the articles below are binding.
1
Who processes your data
EL Pasha is the trade name of EBE Commerce, located in Alkmaar, Netherlands, registered with the Chamber of Commerce under number 98947273. We are the data controller for the data processed via el-pasha.com. You can reach us via info@el-pasha.com, from Monday to Friday from 08:00 to 21:00 and on weekends from 08:00 to 22:00.
2
What data we process
We only process what is necessary to fulfill your order and answer your question. Which data that is depends on what you do.
- If you place an order, we process your name, email address, delivery address, billing address, telephone number if provided, your order details and payment status.
- If you send a message, we process your name, email address, the subject and content of your message.
- If you subscribe to the newsletter, we process your email address and the time of subscription.
- If you visit the website, we process technical data: your IP address, the device and browser you use, the pages you view and the time of viewing.
We never ask for data that we don't need, and we do not process special categories of personal data.
3
What we use them for
Every processing activity has a purpose and a legal basis under the General Data Protection Regulation. We will not use your data for anything other than what is stated below.
- Processing your order, including payment, shipping, and returns — legal basis: the performance of the contract.
- Answering your question — legal basis: the performance of the contract, or our legitimate interest in providing accessible customer service.
- Maintaining our administration and complying with the fiscal retention obligation — legal basis: a legal obligation.
- Sending the newsletter — legal basis: your consent, which you can withdraw with a single click.
- Improving the website and measuring what works — legal basis: your consent for the necessary cookies.
4
How long we keep them
We do not store your data longer than necessary, except where the law prescribes a period.
7 years
Order and invoice data
2 years
Correspondence
Until withdrawal
Newsletter subscription
The seven-year retention period for order and invoice data is a requirement under tax law and cannot be shortened. We retain correspondence for two years so that we can retrieve previous contact when you write to us again. Your newsletter subscription is retained until you unsubscribe; after that, we only record that you have unsubscribed to ensure you no longer receive mail.
5
With whom we share them
We do not sell your data or pass it on for commercial purposes of others. However, we do engage parties that are necessary to make the store work. We have a processor agreement with each of them, and they may only use your data for the assignment we give them.
- Shopify, the platform on which this store operates and where orders and customer data are stored.
- The payment service providers behind the payment methods you choose, including the provider of buy-now-pay-later services.
- The carrier that delivers your order, which requires your name, address, and email address.
- The party that sends our emails and newsletters.
- Our accountant, for administration and tax obligations.
When we share nothing further
Outside of these parties, we only share your data when legally obliged to do so, for example, by order of a competent authority.
6
Processing outside the European Economic Area
Some of the parties we engage are located outside the European Economic Area, or store data there. This includes the platform on which this store operates. In such cases, the transfer is based on the European Commission's standard contractual clauses or an adequacy decision, so that your data remains protected there as well.
7
Cookies
A cookie is a small file placed on your device when you visit. We use three types, and only the first type is placed without asking you anything.
- Necessary cookies keep track of your shopping cart, remember your language choice, and secure the checkout process. Without these cookies, the shop would not function, so no consent is required for them.
- Analytical cookies show us which pages are viewed and where visitors drop off. We only use these to improve the website.
- Marketing cookies allow us to display ads that match what you have viewed.
Retract your choice
We only place analytical and marketing cookies with your consent. You can change this choice at any time via the cookie notification, and you can always delete or block cookies in your browser settings. If you block necessary cookies, the shopping cart will no longer work.
8
Your rights
The General Data Protection Regulation gives you a number of rights. You can exercise all of them by sending us a message at info@el-pasha.com; we will respond within one month.
- Right to access: you can request to see what data we hold about you.<!--en-->Right to rectification: you can have inaccurate data corrected.<!--en-->Right to erasure: you can ask us to delete your data, provided we are not legally obliged to retain it.<!--en-->Right to restriction of processing: you can ask us to temporarily suspend the processing of your data.<!--en-->Right to data portability: you can receive your data in a common file format.<!--en-->Right to object: you can object to processing based on legitimate interest.<!--en-->Right to withdraw consent: where we have requested consent, you may withdraw it at any time.
To prevent us from providing information to the wrong person, we may ask you to confirm your request from the email address known to us.
9
Security
Traffic with this website is encrypted and payment is made via a secure checkout; we never see your full payment details. Access to order and customer data is limited to those who need it for their work. If you suspect that something has gone wrong with your data, please let us know immediately.
10
Complaints and amendments
If you disagree with how we handle your data, please let us know first; we will resolve it. You always have the right to file a complaint with the Dutch Data Protection Authority.
We may change this policy when the store or regulations require it. The date at the top of this page shows when this last occurred; in the event of a major change, we will announce it in advance.
To do before publication
This text is a readable draft model based on current policy and European privacy regulations. Have the final text legally reviewed before publishing it; we are not lawyers.
Check articles 5 and 7 against what is actually running: which analysis and advertising pixels are on the store, which party sends the newsletter, and which carrier delivers. This is where a check will find something fastest.
Check whether the retention periods in article 4 correspond to your own administration.