Privacy

At EroGoods, we take the protection of your personal data seriously. This Privacy Policy explains what personal data we collect, why we process it, how we use and protect it, who we may share it with and what rights you have.

1. How We Protect Your Personal Data

Protecting your privacy is important to us.

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

This Privacy Policy explains how EroGoods handles your personal data and what rights you have under applicable data protection legislation.

If you have any questions about the processing of your personal data, you can contact us using the contact options available on our website.

2. What Is Personal Data?

Personal data is any information relating to an identified or identifiable natural person.

This may include, for example:

• your name;
• billing or delivery address;
• email address;
• telephone number;
• IP address;
• account information;
• order information;
• payment-related information;
• information you provide when contacting customer service.

Information that has been irreversibly anonymised so that it can no longer be linked to an identifiable person is not considered personal data.

You can print or save this Privacy Policy using your browser settings.

3. About EroGoods

EroGoods is a trading name of EliteToys B.V.

EliteToys B.V. is responsible for the processing of personal data described in this Privacy Policy unless otherwise stated.

4. Data Controller

The data controller responsible for processing your personal data is:

EliteToys B.V.
Transportweg 11
9645 KZ Veendam
The Netherlands

Trading under the name:

EroGoods

For questions relating to privacy or the processing of your personal data, please contact us through the contact options available on our website.

5. Orders, Accounts & Payments

5.1 Orders

When you place an order, we process the information necessary to process, fulfil and deliver your purchase.

This may include your:

• name;
• billing address;
• delivery address;
• email address;
• telephone number;
• order information;
• payment-related information.

Purpose: processing and fulfilling your order.

Legal basis: Article 6(1)(b) GDPR – performance of a contract.

5.2 User Account

If you create an account, we process the information necessary to create and maintain your account and allow you to view and manage your information and orders.

Purpose: providing and managing your customer account.

Legal basis: Article 6(1)(b) GDPR – performance of a contract or taking steps at your request before entering into a contract.

5.3 Payments

We process payment-related information where necessary to complete payments, refunds and other financial transactions.

Depending on the payment method you select, your information may also be processed directly by the relevant payment provider.

Purpose: processing payments, refunds and transactions.

Legal basis: Article 6(1)(b) GDPR – performance of a contract.

5.4 Payment Providers

We use external payment service providers, including:

• PAY.;
• PayPal;
• Riverty.

When you select one of these payment methods, information necessary to process your transaction may be shared with or collected directly by the relevant payment provider.

These providers may process your information under their own privacy policies and may, depending on the processing activity, act as independent data controllers.

5.5 Pay Later with Riverty

When you choose a Riverty payment method, Riverty may process personal data for purposes such as:

• payment processing;
• identity verification;
• fraud prevention;
• creditworthiness assessment;
• debt collection where applicable.

Riverty determines the personal data required for its own payment and risk-assessment services and provides further information about this processing in its own privacy documentation.

6. Customer Service

When you contact our customer service team, we process the information you provide in order to answer your question, resolve an issue or otherwise assist you.

This may include:

• your name;
• contact information;
• order number;
• correspondence;
• photographs or attachments you provide;
• information relating to your request.

Purpose: responding to and handling customer service requests.

Depending on the nature of your request, the legal basis is:

Article 6(1)(b) GDPR – performance of a contract; and/or
Article 6(1)(f) GDPR – our legitimate interest in providing effective customer service and resolving customer enquiries.

7. Email Marketing & Customer Communication

7.1 Newsletter

You may subscribe to our newsletter to receive news, offers, promotions and product information.

Where consent is required, we will only send such communications after you have provided the necessary consent.

Purpose: email marketing.

Legal basis: Article 6(1)(a) GDPR – consent, where applicable.

You can withdraw your consent at any time.

7.2 Existing Customers

Where permitted by applicable law, we may contact existing customers about products or services that are relevant or similar to previous purchases.

Where we rely on legitimate interests, our legitimate interest is maintaining our existing customer relationship and providing relevant direct marketing.

You can object to direct marketing at any time.

7.3 Reviews & Customer Satisfaction

We may contact customers to request feedback, a product review or participation in a customer satisfaction survey.

Purpose: evaluating and improving our products, services and customer experience.

Depending on the circumstances, processing may be based on our legitimate interests or consent where required.

7.4 Unsubscribing

You can unsubscribe from marketing emails at any time using the unsubscribe link included in our emails.

You can also contact us and ask us to stop sending marketing communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

7.5 Klaviyo

We use Klaviyo to manage and optimise our email marketing and customer communications.

Where necessary for these services, relevant information such as your:

• email address;
• name;
• subscription status;
• marketing preferences;
• order information;
• interaction with marketing emails

may be processed through Klaviyo.

Where Klaviyo processes personal data on our behalf, appropriate contractual and data protection safeguards are used.

8. Website Usage & Technical Data

When you visit our website, certain technical information may be processed automatically.

This may include:

• IP address;
• browser type;
• device information;
• operating system;
• date and time of access;
• requested pages;
• technical logs;
• security-related information.

We process this information where necessary to operate, secure and maintain our website and to detect and prevent fraud, misuse or technical problems.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in operating a secure and reliable website.

9. Cookies & Similar Technologies

We use cookies and similar technologies on our website.

Some cookies are necessary for our website, shopping cart, checkout and other essential functions to work correctly.

Other cookies may be used for:

• analytics;
• measuring website performance;
• measuring advertising effectiveness;
• marketing and advertising.

Where required by applicable law, non-essential cookies and similar technologies are only used after you have provided consent through our cookie settings.

You can change or withdraw your cookie preferences at any time.

More information can be found in our Cookie Policy.

10. Google Analytics

We use Google Analytics to understand how visitors use our website and to help us improve its performance and usability.

Depending on your cookie preferences, Google Analytics may process information such as:

• pages visited;
• interactions with the website;
• approximate location;
• device information;
• browser information;
• referral source;
• technical identifiers.

Google Analytics is only activated where the required consent has been provided.

Purpose: website analytics and performance measurement.

Legal basis: Article 6(1)(a) GDPR – consent.

You can withdraw your consent at any time through our cookie settings.

11. Google Ads

We use Google Ads to advertise EroGoods and measure the effectiveness of our advertising campaigns.

Subject to your consent, Google Ads technologies may be used to:

• measure conversions;
• understand whether an advertisement resulted in a visit or purchase;
• measure campaign performance;
• create or use advertising audiences;
• provide more relevant advertising.

Purpose: advertising, conversion measurement and marketing.

Legal basis: Article 6(1)(a) GDPR – consent.

Google Ads marketing technologies are only activated where the required consent has been provided.

You can change or withdraw your consent at any time through our cookie settings.

12. Social Media

EroGoods may maintain profiles on social media platforms including:

• Facebook;
• Instagram;
• TikTok;
• LinkedIn.

When you interact with us through these platforms, the relevant social media provider may independently process personal data.

The privacy policies and privacy settings of the relevant platform apply to processing carried out independently by that provider.

13. Third-Party Marketplaces

EroGoods may also offer products through third-party marketplaces such as Amazon or bol.

When you purchase through a third-party marketplace, that marketplace processes personal data in accordance with its own privacy policy.

We may receive information from the marketplace where necessary to:

• fulfil your order;
• arrange delivery;
• provide customer service;
• process returns or refunds;
• comply with legal obligations.

14. Sharing Personal Data

We do not sell your personal data.

We only share personal data where this is necessary for our business operations, the performance of our contract with you, compliance with legal obligations or another lawful purpose.

Recipients may include, where applicable:

• payment service providers;
• delivery and logistics providers;
• IT and hosting providers;
• email service providers;
• marketing service providers;
• analytics providers;
• professional advisers;
• government authorities;
• regulators or courts where legally required.

Where another company processes personal data on our behalf, we take appropriate measures to ensure the processing complies with applicable data protection requirements.

15. International Data Transfers

Some of the service providers we use may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer complies with applicable data protection legislation.

Depending on the destination and provider, safeguards may include:

• an adequacy decision adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission;
• other legally recognised transfer mechanisms.

Where appropriate, additional safeguards may also be implemented.

16. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, tax, accounting and regulatory requirements.

Retention periods depend on the type of information and the purpose of processing.

Order, invoice and transaction information may be retained for the period required under applicable tax and accounting legislation.

Customer service correspondence is retained only for as long as reasonably necessary to resolve the request and where necessary to establish, exercise or defend legal claims.

Account information is generally retained while your account remains active and thereafter where retention is necessary for legal or administrative purposes.

Marketing information is retained until you withdraw consent, object to marketing or the information is no longer required for the relevant marketing purpose, subject to any information we may need to retain to record your opt-out.

Technical and analytical information is retained in accordance with the settings and retention periods applicable to the relevant systems.

When personal data is no longer required and there is no lawful reason to retain it, it will be deleted or anonymised where appropriate.

17. Your Privacy Rights

Under the GDPR, you may have the right to:

• access your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• receive certain personal data in a portable format;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent supervisory authority.

These rights may be subject to conditions or exceptions under applicable law.

To exercise your privacy rights, please contact us through the contact options available on our website.

We may request additional information where reasonably necessary to verify your identity.

You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority, or another competent supervisory authority in your country where applicable.

18. Automated Decision-Making

EroGoods does not generally make decisions that produce legal or similarly significant effects based solely on automated processing.

Certain external payment providers, particularly providers of pay-later services such as Riverty, may use automated systems for identity, fraud or creditworthiness assessments.

Where applicable, the relevant provider is responsible for providing information about such processing and the rights available to you.

19. Data Security

We use appropriate technical and organisational security measures designed to protect personal data against accidental or unlawful:

• destruction;
• loss;
• alteration;
• unauthorised disclosure;
• unauthorised access.

These measures include appropriate access controls, secure systems and encryption technologies such as TLS where applicable.

No method of transmitting or storing information is completely secure. We therefore review and improve our security measures where appropriate.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, processing activities, service providers or applicable legal requirements.

The latest version of this Privacy Policy will always be available on our website.

Where appropriate, we may provide additional notice of material changes.