PRIVACY POLICY

At Tavellio, we take your privacy seriously. This policy explains, in plain language, what personal data we collect, why we collect it, who we share it with, and what rights you have. We comply with the General Data Protection Regulation (GDPR).

In short

• We only collect what we need to process your order, help you, and improve our store.
• We never sell your data to third parties.
• You can access, correct, or delete your data at any time.
• Questions? Email us at info@tavellio.com.

This website (www.tavellio.com) is operated by:

Amsterdam Lighting Group (trading as Tavellio)
Keizersgracht 482, 1017 EG Amsterdam, The Netherlands
Chamber of Commerce (KVK) no.: 92601065
VAT no.: NL866112625B01
Email: info@tavellio.com
Phone: +31 20 261 34 28

Amsterdam Lighting Group is the data controller for the personal data processed through this website. See our Terms & Conditions for the full terms governing your order.

Depending on how you use our website, we process the following data:

Data you give us

• Name and contact details (email address, phone number)
• Shipping and billing address
• Order details (which products you buy)
• Payment details, handled by our payment provider, we do not store full card details
• Messages you send us by email or through the contact form
• Your newsletter preferences

Data we collect automatically

• Your IP address and device/browser information
• Which pages you view and how you use our site
• Cookies and similar technologies (see section 6)

We only process your data when we have a legal basis to do so:

• Processing and delivering your order, performance of the contract
• Customer service and answering questions, performance of the contract or legitimate interest
• Handling payments and preventing fraud, legal obligation or legitimate interest
• Improving our website and products, legitimate interest
• Sending newsletters and offers, consent, you can unsubscribe anytime
• Showing you relevant advertising, consent, via cookies
• Meeting legal, e.g. tax, obligations, legal obligation

We never sell your data. We only share it with parties that help us deliver our services, and we have data processing agreements in place with each of them. The main ones are:

Store and hosting

• Shopify, the e-commerce platform our store runs on

Payments

• Mollie, processes your payment
• Klarna, for pay later and instalment payments

See our Billing & Payment page for details on how you can pay.

Delivery

• PostNL, DPD, Bpost, GLS and DHL, deliver your order

See our Shipping & Delivery page for carriers and delivery times.

Email and marketing

• Klaviyo, for our newsletters and customer emails

Reviews

• Yotpo, collects and displays product reviews from our customers

Customer contact

• WhatsApp Business (Meta), to answer your questions when you contact us via WhatsApp

Analytics and advertising

• Google (Analytics and Ads), to understand how our site is used and to show ads
• Meta (Facebook and Instagram), to show ads on their platforms
• Pinterest, to show ads on Pinterest
• Microsoft (Bing Ads), to show ads on Bing

We may also share data with our accountant, legal advisors, or government authorities where legally required.

Some of our service providers, such as Google and Meta, process data, partly, outside the European Economic Area. In those cases, we make sure appropriate safeguards are in place, for example the European Commission's Standard Contractual Clauses, so your data remains protected.

Our website uses cookies and similar technologies:

• Necessary cookies, required for the store to work (e.g. your shopping cart). Always on.
• Analytics cookies, help us understand how the site is used (Google Analytics).
• Marketing cookies, used to show relevant ads (Google, Meta).

On your first visit we ask for your consent for non-essential cookies. You can change your choice at any time through our cookie settings or in your browser.

We don't keep your data longer than necessary:

• Order and invoice data: 7 years, legal tax retention requirement
• Customer account and correspondence: while you're a customer and up to 2 years after
• Newsletter data: until you unsubscribe
• Website and analytics data: usually up to 26 months

Under the GDPR you have the following rights:

• Access, request a copy of the data we hold about you
• Rectification, have inaccurate data corrected
• Erasure, have your data deleted, also known as the right to be forgotten
• Restriction, have processing temporarily paused
• Objection, object to processing, for example for marketing
• Portability, receive your data in a readable format
• Withdraw consent, withdraw any consent you gave, at any time

Want to exercise one of these rights? Email us at info@tavellio.com. We respond within 30 days.

We take appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access, such as encrypted connections (SSL) and access restrictions. Our payment and platform partners meet applicable security standards.

Our store is not aimed at children under 16. We do not knowingly collect data from children. If you believe we have, please contact us and we will delete it.

We may update this privacy policy from time to time. The latest version is always on this page, with the date of the most recent change shown at the top.

Have a question about your privacy or this policy? Email us at info@tavellio.com, call +31 20 261 34 28, or visit our Contact page.

If you're unhappy with how we handle your data, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Last updated: 27 July 2026