Privacy policy

This policy explains which personal data Frovelle uses when you visit this website, shop with us or get in touch, why we use it, and what your rights are.

Frovelle is responsible for this data (the controller, in the words of the GDPR):

Trade name

Frovelle

Owner

Mohammad Shanati

Legal form

Sole proprietorship (eenmanszaak)

Address

Genielaan 25A, 2404 CH Alphen aan den Rijn, Netherlands

KVK number (Dutch Chamber of Commerce)

42181941

VAT number

NL005561955B07

Email

support@frovelle.com

Questions about your data? Email us at support@frovelle.com.

We only use the data we need, for these purposes:

• Orders. Your name, address, email address, phone number if you give one, what you order and whether it is paid. We need this to deliver your order, handle returns and help you with questions. Basis: our contract with you. We keep order records because tax law requires it. Basis: a legal obligation.
• Your account. If you create an account: your name, email address, addresses and orders, so you can sign in and see your orders. Signing in runs on Shopify. Basis: our contract with you.
• Contact form and email. Your name, email address and message, so we can answer you. Basis: our legitimate interest in answering questions, or steps you ask for before buying.
• Withdrawal form. Your name, order number, email address and the time we received your withdrawal, to handle it and confirm it to you. Basis: a legal obligation and our contract with you.
• Newsletter. Your email address and when you signed up, to send you our newsletter and, while we offer one, your welcome code. Basis: your consent. You can unsubscribe at any time.
• Using the website. Technical data such as your IP address, your browser and the pages you request, to deliver and secure the website. Basis: our legitimate interest in a working, safe website.
• Statistics and campaigns. Only if you allow analytics cookies: how the shop is used, and which campaign link brought you here, which we add to your order. Basis: your consent. See our cookie policy.

To stop abuse, our forms count how often they are used from each IP address, and the withdrawal form also for each email address. These counts stay in our server’s memory for at most an hour and are never stored.

We don’t sell your data, and we don’t use it to make automated decisions about you.

We work with a few service providers. They process data on our behalf and only as we instruct:

• Shopify (Shopify International Limited, Ireland), our shop platform: the product catalogue, cart, checkout, payments, your account and, if you allow it, shop statistics.
• Payment providers, through Shopify’s checkout, for the payment method you choose.
• Resend (Resend, Inc., United States) sends the emails from our contact form, withdrawal confirmations and welcome codes.
• Mailchimp (The Rocket Science Group LLC, part of Intuit, United States) keeps our newsletter list and sends the newsletter.
• Hostinger (Hostinger International Ltd., Cyprus) hosts this website.
• Sentry (Functional Software, Inc., United States, with our data stored in its EU region), only if we switch on error monitoring: technical details of an error on this website, such as the page, the browser and what went wrong, without IP addresses, email addresses or other contact details.
• The carrier that delivers your parcel gets your name and address, and may get your email address or phone number for delivery updates.

Product photos load from Shopify’s servers, and some images on our homepage from Instagram (Meta) or Unsplash. Your browser shares your IP address with them, as with any website it loads something from.

We only share data with authorities when the law requires it.

Shopify, Resend, Mailchimp and, if we switch it on, Sentry may process data outside the European Union, for example in Canada or the United States. That only happens with the safeguards the GDPR requires: an adequacy decision of the European Commission, such as for Canada and for US companies certified under the EU-US Data Privacy Framework, or the European Commission’s standard contractual clauses.

• Orders and invoices: 7 years, because Dutch tax law requires it.
• Withdrawals: 7 years, with the order they belong to.
• Your account: until you ask us to delete it.
• Contact messages: as long as we need them to help you, and at most 2 years after our last contact.
• Newsletter: until you unsubscribe. After that we only keep a note that you unsubscribed, so we don’t email you again.
• Campaign details on an order: as long as the order itself.
• Error reports, only if error monitoring is on: as long as our Sentry plan keeps them, at most 90 days.
• Technical server logs: only as long as needed for security and to find faults.

You have the right to see the data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive it in a format you can reuse. Where you gave consent, you can withdraw it at any time; that doesn’t affect what we did before.

To use your rights, email us at support@frovelle.com. We answer within one month. To protect your data, we may first ask you to confirm who you are.

You can unsubscribe from the newsletter with the link in every newsletter, or by replying to one of our emails. You can change your cookie choice at any time with Cookie settings.

If you think we handle your data wrongly, please tell us first so we can put it right. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the data protection authority of the EU country where you live.

We protect your data with suitable measures. The website only works over a secure connection (https), the sign-in cookie is encrypted and can’t be read by scripts, and only people who need your data can access it.

Our shop is meant for people aged 16 and over. If you are younger, please ask a parent or guardian before you order or sign up for our newsletter.

We update this policy when our shop or the law changes. The date at the top shows when it last changed.