This Privacy Policy describes how By Alissa collects, uses, and shares your personal data when you visit our website, use our services, make a purchase, or otherwise communicate with us.

In this Privacy Policy, the terms “you” and “your” refer to the user of our services, whether you are a customer, website visitor, or another individual whose personal data we process.

Please read this Privacy Policy carefully. By using our services, you agree to the processing of personal data as described below. If you do not agree with this policy, please do not use our services.

Changes to this Privacy Policy

By Alissa may update this Privacy Policy from time to time to reflect changes in legislation, business practices, or operational reasons.

The updated version will always be published on this page with a revised “Last updated” date.

How We Collect and Use Personal Data

Personal Data We Collect

Depending on how you use our website and services, we may collect the following personal data:

Contact details

Name
Address
Phone number
Email address

Order information

Name
Shipping address
Billing address
Payment information
Email address
Phone number

Account information

Username
Password
Account security settings

Customer service information

Information you provide when contacting our customer support.

Usage data

Information about how you use our website and services, including:

IP address
browser information
device information
cookies
interaction with advertisements or emails

Information from third parties

We may receive information from third-party service providers such as:

Shopify (our e-commerce platform)
payment providers
shipping and logistics partners

This information is only used when necessary to process orders and provide our services.

How We Use Personal Data

We process personal data solely for the following purposes:

Performance of a contract

Processing orders
payments
shipping
returns
account management

Customer support

Responding to questions, requests, and complaints.

Marketing and advertising

Sending emails or advertisements about products or promotions where permitted by law or based on your consent.

Fraud prevention and security

Preventing fraud, abuse, and unauthorized access to accounts.

Improving our services

Analyzing website usage and improving the functionality and performance of our website.

Cookies

By Alissa uses cookies and similar technologies to ensure our website functions properly, remember your preferences, and improve your user experience.

Cookies may also be used for analytics and marketing purposes if you consent to them.

You can manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of the website.

More information about Shopify cookies can be found at:
https://www.shopify.com/legal/cookies

Sharing of Personal Data

We only share personal data with third parties when this is strictly necessary.

This may include:

Service providers

Shopify (e-commerce platform)
payment providers
shipping companies and logistics partners
data analytics services

Commercial partners

Only if you have given explicit consent.

Legal obligations

When required by law or necessary to comply with legal obligations.

We never sell your personal data to third parties.

International Data Transfers

Your personal data may be transferred to or processed in countries outside the European Union or European Economic Area, for example through Shopify or payment providers.

In such cases, we ensure that appropriate safeguards are in place in accordance with the General Data Protection Regulation (GDPR), such as the Standard Contractual Clauses approved by the European Commission.

Data Security and Retention

By Alissa takes appropriate technical and organizational measures to protect your personal data against loss, misuse, or unauthorized access.

We only retain personal data for as long as necessary for the purposes for which it was collected.

Retention periods include:

Order and invoice data: up to 7 years (legal tax retention requirement)

Newsletter data: until you unsubscribe

Other data: as long as necessary to provide our services

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access to your personal data
Right to correct inaccurate data
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object to data processing, including marketing
Right to withdraw consent at any time

To exercise these rights, you can contact us via: info@by-alissa.com

We will respond to your request within 30 days.

Children

Our services are not directed at children under the age of 16, and we do not knowingly collect personal data from minors.

Complaints

If you have a complaint about this Privacy Policy or how we process your personal data, you can contact us at: info@by-alissa.com

You also have the right to file a complaint with a supervisory authority, such as:

the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
or the relevant data protection authority in your country.