GoEazy B.V. – Privacy & Cookie Policy

Last updated: 11 August 2025

This Privacy & Cookie Policy explains how GoEazy B.V. (“GoEazy”, “we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website www.goeazy.co (the “Site”), purchase our products, or interact with us in any other way. We are established in the Netherlands and comply with the General Data Protection Regulation (GDPR), as well as other applicable global privacy laws.

By using our Site or services, you agree to this policy. If you do not agree, please discontinue use of our Site and services.

1. Who We Are
GoEazy B.V.
Oranjelaan 8
4332VA Middelburg
Netherlands
Email: info@goeazy.co

2. Personal Data We Collect
The personal data we collect depends on how you interact with us.

Data you provide to us directly: Name, billing and shipping address, phone number, email address, payment details (processed securely via our payment provider), account details (if you create an account), order history, and any information you send to our customer service.

Data collected automatically: IP address, device and browser details, browsing behaviour on our Site, shopping cart activity, and cookies (see Section 7).

Data from third parties: Payment processors, shipping partners, and marketing platforms (such as Shopify and advertising networks) may share data with us to fulfil your order, process payments, or deliver marketing (where legally permitted).

3. Purposes & Legal Bases
Order processing and delivery – to fulfil purchases, arrange shipping, and manage returns (Legal basis: performance of a contract).
Customer support – to respond to questions, requests, or complaints (Legal basis: performance of a contract; legitimate interest).
Marketing and offers – to send newsletters or personalised promotions (Legal basis: consent, which you can withdraw at any time).
Security and fraud prevention – to protect our Site and detect misuse (Legal basis: legitimate interest; legal obligation).
Legal compliance – to comply with tax, accounting, or consumer protection laws (Legal basis: legal obligation).

4. Data Retention
We retain personal data only as long as necessary for the purpose collected.
Order records: 7 years (Dutch tax law).
Marketing data: until you withdraw consent.
Customer service records: up to 2 years.
Technical logs: up to 12 months.

5. Sharing Your Data
We share data only when necessary with service providers (Shopify, payment processors, fulfilment partners), IT and marketing partners (with consent), legal authorities if required, and in the event of a business transfer (e.g., sale or merger of GoEazy).

We do not sell personal data under the GDPR definition. For US customers, we do not sell personal information as defined by the CCPA without your consent.

6. International Transfers
We may transfer data outside the EEA, using EU-approved safeguards such as the European Commission’s Standard Contractual Clauses.

7. Cookies & Tracking
Our Site uses cookies to improve your experience, for analytics, and for personalised advertising. Non-essential cookies are only placed with your consent via our cookie banner. You can change your preferences at any time.
More on Shopify’s cookies: https://www.shopify.com/legal/cookies

8. Your Rights (EU/EEA)
You have the right to access, correct, delete, restrict processing, transfer your data, withdraw consent (where applicable), and object to processing based on legitimate interests.
To exercise these rights, contact: info@goeazy.co. Proof of identity may be required.

9. Rights for US Residents (CCPA/CPRA)
If you are a California resident (where applicable), you may have the right to opt out of the “sale” or “sharing” of personal data as defined by California law. We honour Global Privacy Control signals where applicable.

10. Children’s Privacy
Our services are not intended for individuals under 16 in the EU/EAA or under 13 in the US. We do not knowingly collect data from children.

11. Complaints
If you have concerns, contact us first. You may also lodge a complaint with the Dutch Data Protection Authority: https://www.autoriteitpersoonsgegevens.nl

12. Changes to this Policy
We may update this policy to reflect changes in our practices or legal requirements. The latest version will always be posted on our Site.