Last updated: [5th June, 2026]

1. Introduction

At Cortazu B.V. ("Cortazu", "we", "our", or "us"), we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, purchase our products, create an account, subscribe to our newsletter or otherwise interact with us.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Dutch privacy laws.

2. Who We Are

Cortazu B.V.

Amsterdam
The Netherlands

Chamber of Commerce (KvK): 69694559
VAT Number: NL857971037B01

For privacy-related questions, requests or complaints, please contact us at:

Email: support@cortazu.com

3. What Personal Data We Collect

Depending on how you interact with us, we may collect the following information:

Identity Data

• First name

• Last name

Contact Data

• Email address

• Billing address

• Shipping address

• Telephone number

Account Data

• Customer account information

• Order history

• Wishlist information

• Customer preferences

Transaction Data

• Purchased products

• Order details

• Payment status

• Refund information

Please note that payment card information is processed directly by our payment providers and is not stored by Cortazu.

Technical Data

• IP address

• Browser type

• Device information

• Operating system

• Language preferences

• Website usage information

Marketing Data

• Newsletter subscription status

• Email engagement data

• Marketing preferences

• Advertising interactions

4. How We Collect Personal Data

We collect personal data:

• When you place an order

• When you create an account

• When you subscribe to our newsletter

• When you contact customer support

• When you participate in surveys or promotions

• Through cookies and similar technologies

• Through analytics and advertising tools

5. Why We Process Your Personal Data

We only process personal data where we have a lawful basis under the GDPR.

To Fulfil Your Order

Purpose:

• Process payments

• Deliver products

• Handle returns and refunds

• Provide customer service

Legal Basis:

• Performance of a contract

To Manage Your Customer Account

Purpose:

• Account access

• Order history

• Saved preferences

Legal Basis:

• Performance of a contract

To Provide Customer Support

Purpose:

• Respond to inquiries

• Resolve complaints

• Process warranty claims

Legal Basis:

• Performance of a contract

• Legitimate interests

To Improve Our Website and Services

Purpose:

• Analyse website performance

• Improve customer experience

• Detect technical issues

Legal Basis:

• Consent where required

• Legitimate interests where permitted

To Send Marketing Communications

Purpose:

• Newsletters

• Product updates

• Promotional offers

Legal Basis:

• Consent

• Existing customer relationship where permitted by applicable law

You can unsubscribe at any time by clicking the unsubscribe link in our emails.

To Prevent Fraud and Ensure Security

Purpose:

• Fraud prevention

• Security monitoring

• Risk assessment

Legal Basis:

• Legitimate interests

• Legal obligations

To Comply With Legal Obligations

Purpose:

• Tax compliance

• Accounting obligations

• Regulatory requirements

Legal Basis:

• Legal obligation

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website and improve user experience.

Cookies may include:

Strictly Necessary Cookies

Required for website functionality, shopping cart functionality and security.

Analytics Cookies

Help us understand how visitors use our website.

Marketing Cookies

Used to provide personalised advertising and measure campaign effectiveness.

Where required by law, we will ask for your consent before placing non-essential cookies.

For more information, please see our Cookie Policy.

7. Marketing Communications

If you subscribe to our newsletter or purchase products from us, we may send you information about products, services, events and promotions.

You can opt out at any time by:

• Clicking the unsubscribe link in any email

• Contacting us directly

Opting out of marketing messages will not affect service-related communications.

8. Sharing Personal Data

We only share personal data where necessary to operate our business.

Service providers may include:

E-commerce Platform

Shopify

Payment Providers

• Shopify payments

• Stripe

• Mollie

• PayPal

• Klarna

Email and Marketing Platforms

Klaviyo

Shipping and Return Partners

Carriers, logistics providers and returns platforms used to fulfil orders and process returns.

Analytics Providers

Google Analytics, Triple Whale & Blotout and similar analytics providers.

All third parties are required to process personal data in accordance with applicable privacy laws.

9. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including:

• Adequacy decisions issued by the European Commission;

• Standard Contractual Clauses (SCCs);

• Other legally approved transfer mechanisms.

10. Data Retention

We retain personal data only for as long as necessary.

Typical retention periods include:

Order Information

Up to 7 years to comply with tax and accounting obligations.

Customer Account Information

Until the account is deleted or inactive for an extended period.

Marketing Information

Until consent is withdrawn or marketing communications are no longer relevant.

Customer Service Records

As reasonably necessary to manage customer relationships and legal claims.

Technical and Analytics Data

According to the retention settings of the relevant platform or cookie.

11. Your Rights

Under the GDPR, you may have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion of your data

• Restrict processing

• Object to processing

• Request data portability

• Withdraw consent at any time

To exercise your rights, please contact:

support@cortazu.com

We may request proof of identity before fulfilling your request.

12. Complaints

If you believe we have processed your personal data unlawfully, we encourage you to contact us first.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

13. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.

However, no online system can be guaranteed to be completely secure.

14. Children's Privacy

Our website and services are not directed to children under the age of 16.

We do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any material changes will be published on this page with an updated revision date.

We encourage you to review this Privacy Policy periodically.

16. Contact

If you have questions regarding this Privacy Policy or our privacy practices, please contact:

Email: support@cortazu.com