Privacy & Cookie Policy

Version 1.3
Last updated: june 13 2026

EL Pasha highly values the protection of your personal data. We process personal data carefully, confidentially, and transparently in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.

In this Privacy & Cookie Policy, we explain which personal data we collect, why we process it, how long we retain it, with whom we share it, and what rights you have regarding your personal data.

This Privacy & Cookie Policy applies to all services, orders, communications, and activities through www.el-pasha.com.

1. Data Controller

EL Pasha is responsible for the processing of personal data as described in this policy.

Contact Details

EL Pasha | Luxury Brand
Email: info@el-pasha.com
Website: www.el-pasha.com

Chamber of Commerce Number: 98947273
VAT Number: NL005366146B89
Business Address: Percivalstraat 13, Alkmaar

2. What Personal Data Do We Process?

We process personal data that you provide to us and data that is automatically collected when you use our website.

This may include:

• First and last name

• Address details

• Email address

• Phone number

• Payment information

• Order information

• Order history

• Invoice information

• IP address

• Browser information

• Device information

• Correspondence via email, social media, and customer service

• Marketing and preference data if you have provided consent

We only process personal data that is necessary for the purposes described in this policy.

3. Purposes and Legal Bases for Processing

We process personal data only when there is a valid legal basis for doing so.

Performance of a Contract

We process personal data for:

• Processing orders

• Delivering products

• Processing payments

• Handling returns

• Providing customer service

• Communicating about orders

Legal Obligations

We process personal data for:

• Complying with tax obligations

• Complying with administrative obligations

• Retaining data where legally required

Legitimate Interests

We process personal data for:

• Improving our website

• Improving our services

• Analyzing website usage

• Securing our systems

• Preventing fraud

• Protecting our business interests

Consent

We process personal data based on consent for:

• Newsletters

• Marketing communications

• Marketing cookies

• Tracking cookies

• Personalized advertisements

You may withdraw your consent at any time.

4. Shopify and Third-Party Service Providers

Our online store is hosted by Shopify.

Shopify may process personal data for:

• Web hosting

• Order processing

• Payments

• Security

• Analytics

• Fraud prevention

• Customer service functionalities

In addition, we may share personal data with carefully selected service providers that are necessary for the operation of our online store.

These may include:

• Shopify

• Shopify Payments

• PayPal

• Klarna

• Google Pay

• Meta (Facebook & Instagram)

• TikTok

• Google Analytics

• Shipping partners

• Hosting and IT service providers

Where required, we enter into appropriate data processing agreements with processors.

We never sell personal data to third parties.

5. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are implemented in accordance with the GDPR.

These safeguards may include:

• Standard Contractual Clauses approved by the European Commission

• Adequacy decisions by the European Commission

• Other legally approved protection mechanisms

6. Data Retention Periods

We do not retain personal data longer than necessary for the purposes for which it was collected.

We generally apply the following retention periods:

• Order and invoice data: 7 years

• Customer account data: for as long as the account remains active

• Customer service requests: up to 2 years

• Marketing data: until consent is withdrawn

• Newsletter data: until you unsubscribe

• Cookie data: according to the lifespan of the relevant cookie

Where a legal obligation requires a longer retention period, we will comply with that obligation.

7. Cookies

Our website uses cookies and similar technologies.

Cookies help us ensure that the website functions properly and improve the user experience.

Functional Cookies

These cookies are necessary for the operation of the website.

Without these cookies, certain parts of the website may not function correctly.

Analytical Cookies

These cookies help us gain insight into how our website is used so that we can improve performance and user experience.

Marketing and Tracking Cookies

These cookies are used for:

• Personalized advertising

• Remarketing

• Conversion tracking

• Marketing analytics

These cookies are only placed after you have provided consent, where legally required.

When you first visit our website, we request consent for non-essential cookies through our cookie banner.

You may change your preferences at any time through your browser settings or cookie settings.

8. Security

We take appropriate technical and organizational measures to protect personal data against:

• Loss

• Misuse

• Unauthorized access

• Unlawful processing

• Unwanted disclosure

Although we take reasonable measures to protect personal data, no digital environment can guarantee complete security.

9. Minors

Our website and products are not specifically directed at individuals under the age of 16.

We do not knowingly collect personal data from individuals under the age of 16 without parental or legal guardian consent.

If we become aware that personal data has been collected from a minor without valid consent, we will delete such data.

10. Your Rights

Under the GDPR, you have the right to:

• Request access to your personal data

• Request correction of personal data

• Request deletion of personal data

• Request restriction of processing

• Object to processing

• Withdraw your consent

• Receive your personal data in a portable format

• Not be subject to unlawful automated decision-making

Requests may be submitted to:

info@el-pasha.com

To prevent misuse, we may request verification of your identity.

11. Response Time

We aim to respond to privacy-related requests within one month of receipt.

If a request is particularly complex or multiple requests are submitted simultaneously, this period may be extended in accordance with the GDPR.

If this occurs, we will inform you accordingly.

12. Complaints

If you believe that we are not processing your personal data correctly, we encourage you to contact us first.

You also have the right to lodge a complaint with the competent supervisory authority.

For the Netherlands, this is:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
www.autoriteitpersoonsgegevens.nl

13. External Websites

Our website may contain links to third-party websites.

EL Pasha is not responsible for the content, operation, or privacy practices of external websites.

We recommend reviewing the privacy policies of such websites separately.

14. Changes to This Policy

EL Pasha reserves the right to amend this Privacy & Cookie Policy at any time.

The most current version will always be published on our website.

We recommend reviewing this policy regularly.

15. Contact

If you have any questions regarding this Privacy & Cookie Policy or the processing of personal data, please contact us.

EL Pasha | Luxury Brand
Email: info@el-pasha.com
Website: www.el-pasha.com

Chamber of Commerce Number: 98947273
VAT Number: NL005366146B89
Business Address: Percivalstraat 13, Alkmaar