Privacy Policy

At Soul of Sol, registered in the Netherlands under KvK number 86285483, we deeply respect your privacy and are fully committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and store your personal data when you visit our website, purchase our premium scented candles, or interact with us, strictly adhering to the Dutch General Data Protection Regulation (Algemene Verordening Gegevensbescherming - AVG) and the European GDPR.

1. Personal Data We Collect

When you place an order or interact with our website, we collect the following information:

• Identity & Contact Information: Your full name, delivery address, billing address, email address, and phone number.
• Order & Transaction Data: Details of the items you purchased, payment status (via Mollie), and order totals.
• Technical & Usage Data: Your IP address, browser type, and behavioral data, subject to your explicit cookie consent.

2. Why We Process Your Data (Legal Basis)

In compliance with Article 6 of the GDPR, we only process your personal data under the following legal bases:

• Performance of a Contract: To process, ship, and deliver your ordered candles, and update you on your order status.
• Legal Obligation: To maintain strict financial records required by the Dutch Tax Authorities (Belastingdienst).
• Your Explicit Consent: For technical marketing cookies and pixel tracking, which are completely blocked until you explicitly opt-in.

3. Data Retention

We do not store your data longer than strictly necessary. For legal financial administrative records, we are statutory bound by Dutch law to securely store invoice and transaction data for a minimum period of 7 years. Contact or cart information processed via our system is safely deleted once the contract is fully executed or abandoned.

4. Third-Party Sharing

Your data is strictly confidential and shared only with certified service providers necessary to run our store:

• Payment Providers: Your transaction is processed securely through Mollie API.
• Logistics & Transport: Your shipping address and contact details are securely shared with PostNL or DPD to deliver your parcel.

5. Your Rights Under GDPR/AVG

As a European citizen, you hold full statutory rights over your data. You may exercise these at any moment:

• Right of Access & Rectification: You can request a full copy of your data or request corrections.
• Right to Erasure ("Right to be Forgotten"): You can request total deletion of your personal data, provided it doesn't conflict with fiscal retention laws.
• Right to Data Portability: You can request that we transfer your structural data to another provider.
• Right to Withdraw Consent: You have the right to revoke your cookie or tracking consent instantly at any given time.

To exercise any of your rights, contact us immediately at +31 627202872 or visit us at Hoofdweg 133, 1057 CN Amsterdam.

6. Regulatory Authority

If you feel that your data has not been processed in accordance with the law, you have the absolute legal right to lodge an official complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).