Privacy policy

1. Who is responsible

Lazy Sunday Haus B.V., a company registered in the Netherlands and trading as Lazy Sunday Haus, runs this storefront. For anything to do with your data — a copy, a correction, a deletion, a complaint — write to hello@lazysundayhaus.com. Email is the only contact channel and it is read by a person.

2. The short version

Your basket, your saved items, any discount code you enter and your cookie choice are stored in your own browser’s local storage, on your device. They are never sent to us, we cannot read them, and clearing your browser’s site data removes them. This storefront has no customer accounts, no passwords and no advertising network.

3. What we hold and why

Data	Purpose	Legal basis	How long
Name, delivery address, email, optional phone	Packing, posting and tracking your order	Contract	7 years (Dutch tax law)
What you ordered, what you paid, the order reference	Order handling, returns, the seam guarantee	Contract	7 years, then anonymised
Payment confirmation from the provider — never card or bank details	Knowing an order is paid	Contract	7 years
Email address on its own	The newsletter, if you asked for it	Consent	Until you unsubscribe
Basket, saved items, discount code, cookie choice	Keeping your basket between visits	Strictly necessary	In your browser only; never transmitted
Aggregate page views	Seeing which pieces get looked at	Consent	13 months, never per person

Card and bank details go straight to the payment provider over their own connection. We never see them and we never store them.

4. Cookies and local storage

• Necessary. Local storage for your basket, saved items and cookie choice. It exists on your device only and the shop does not work without it.
• Measurement. An aggregate count of which pages and pieces are viewed. Set only if you choose “That is fine” on the cookie bar; not set if you choose “Basket only”. Never tied to a name or an email address.

No advertising cookies, no cross-site tracking, no social media pixels, no data brokers.

5. Who else sees it

Only the processors needed to get a parcel to you, each under a data processing agreement and each receiving only what it needs:

• The payment provider — name, email, amount
• The carrier — name, address, and the phone number if you gave one
• The email service — your address, for order mail and the newsletter if you signed up
• The hosting provider — server logs including IP addresses, kept 30 days

We do not sell personal data, we do not share it for anyone else’s marketing, and we do not build profiles.

6. Outside the EEA

Our processors are inside the EEA wherever we can arrange it. Where one is not, the transfer is covered by the European Commission’s Standard Contractual Clauses.

7. Your rights

Under the GDPR you can ask for a copy of your data, have it corrected or deleted, restrict how it is used, object to processing, and have it passed to another provider. You can withdraw consent to the newsletter or to measurement at any time. Write to hello@lazysundayhaus.com; we answer within 30 days and usually within a few.

Where tax law obliges us to keep an order record, we will say so rather than delete it, and delete it when the period ends.

8. Complaints

You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens. We would rather hear from you first so we can put it right.

9. Changes

If this policy changes in a way that matters, the date at the top changes and we note what moved. Earlier versions are available on request.

Terms & conditions