Privacy Policy (Privacyverklaring)

1. Who we are

Parfano is a trading name of Spirit of the East VOF, Buitenlanden 20, 1948 PD Beverwijk, The Netherlands. KVK 93964498. Data controller contact: info@spiritoftheeast.nl.

2. What we collect

• Account data: company name, contact person, email, phone, business address, VAT number, KVK number, password (stored as a hash).
• Order data: products, quantities, prices, delivery address, payment reference and status.
• Verification data: the result of the EU VIES check on your VAT number (validity, registered name).
• Technical data: IP address and basic request logs of our hosting provider.

3. Why (purposes and legal bases)

• Providing the wholesale account and processing orders — performance of a contract.
• VAT verification and invoicing — legal obligation (EU VAT rules, Dutch tax law).
• Transactional email about your account and orders — performance of a contract.
• Fraud prevention and platform security — legitimate interest.

4. Retention

Invoices and order records: 7 years (Dutch fiscal retention duty). Account data: for as long as the account exists plus {{TODO: legal review — e.g. 2 years}}.

5. Processors

• Supabase (database and file storage, EU region {{TODO: confirm region}})
• Vercel (hosting)
• Resend (transactional email)
• PostNL (shipping, receives name and delivery address)

6. Your rights

You can request access, correction, deletion or a copy of your personal data, and object to or restrict processing, by emailing info@spiritoftheeast.nl. You can also complain to the Autoriteit Persoonsgegevens.

7. Cookies

We only use a functional session cookie to keep you signed in and your browser's local storage for the cart. No tracking or marketing cookies are set. {{TODO: update if analytics are ever added}}