Privacy policy
Last updated: 22 October 2026
1. Who we are
Levantina Global Coöperatie U.A. ("Levantina", "we") is responsible for your personal data on this website (www.levantinaglobal.com).
- Address and full company details: see our Terms and conditions
- Chamber of Commerce (KVK): 98635379 · VAT NL868578575B01
- Privacy contact: [email protected]
2. What we collect, why, and how long we keep it
| When | Data | Purpose and legal basis | Kept for |
|---|---|---|---|
| You place an order | Name, delivery and billing address, email, phone, order details, and the language of the website you ordered in | To deliver your order and handle returns (contract) | Until the order is complete, then tax records as required by law (7 years) |
| After your order | Name, email, order number | One follow-up email after delivery, asking how your order went, inviting you to rate us on Google, suggesting two of our other products and asking which product you would like to see in our shop (legitimate interest). We tell you about it at checkout. Prefer not to get it? Reply to your order confirmation | Sent once, 1 to 2 weeks after the order |
| You pay | Payment status. Card or bank details go to Stripe, not to us | To take payment (contract) | As above |
| You leave the payment page without paying | Email address and a link to your unfinished cart (kept by Stripe) | One reminder email with a link back to your cart, only if you ticked "keep me updated" on the payment page (your consent) | Sent once; Stripe keeps the link for a limited time |
| You contact us or request a quote | Name, company, email, country, message | To reply and prepare an offer (steps before a contract, legitimate interest) | 24 months after the last contact |
| You message us on WhatsApp or social media | Your name or handle and your message | To answer you (legitimate interest) | 24 months after the last message |
| You subscribe to news (on the website, in our newsletter pop-up, or by ticking "keep me updated" on the payment page) | Email address, language, and the date, place and wording of your consent | To send our newsletter (your consent) | Until you unsubscribe |
| You ask to be told when a product is available | Your email address, the product, the language you used and the date | To send you one email when the product is available (your request) | Until we have told you, or until you ask us to delete it |
| You send us a product idea | Your idea, the page and language you used, and your email address if you give it | To improve our range and, if you gave your email address, to reply about your idea (legitimate interest) | 24 months |
| You visit the site | Cookies and basic usage data | Essential cookies make the site and cart work, and our host Cloudflare processes your IP address and country to deliver the pages and pick your starting language (legitimate interest). We also use Cloudflare Web Analytics to count visits and see which pages are read and how fast they load. It sets no cookies and stores nothing on your device. We do not use advertising or tracking cookies | See the cookie notice |
Levantina’s product sourcing, wholesale, private-label and international trade enquiries can involve long decision and follow-up periods. A 24-month retention period allows Levantina to continue relevant conversations without asking contacts to repeat their requirements. Records are deleted earlier when no longer needed or when a valid deletion request is received.
3. Your account and the newsletter
3. The newsletter
You do not need an account to shop. If you create one, you sign in with your email address and a one-time code that we send you. We never ask you to choose a password.
What we store: your email address; if you add them, your name, phone number and delivery address; the date you created the account and last signed in; and, for orders you place while signed in, the order number, date, items and total. We use this to let you sign in, to prefill your order and to show your order history. The legal basis is carrying out our agreement with you (the account you asked for).
Sign-in codes and links expire after 10 minutes and are kept only in scrambled form. A sign-in lasts 30 days on that device unless you sign out. We keep your account until you delete it. You can delete it yourself on your account page at any time. This removes your details, the order history in the account and your newsletter record. Records of orders that tax and accounting law require us to keep stay with Stripe and in our bookkeeping.
Newsletter: we send news and offers only after you ask to subscribe and confirm your email address. Unconfirmed requests expire after 24 hours. We keep the date, source and exact wording shown to prove your consent. Every email has a one-click unsubscribe link. The legal basis is consent, which you can withdraw at any time.
Newsletter: we send news and offers only after you ask to subscribe and confirm your email address, if you actively select the newsletter option when creating an account, or if you tick "keep me updated" on the payment page when you order. These options are never selected in advance; creating an account or placing an order does not subscribe you by itself. A tick on the payment page subscribes you straight away, without a confirmation email, and never re-subscribes an address that has unsubscribed. Unconfirmed requests expire after 24 hours. We keep the date, source and exact wording shown to prove your consent. Every email has a one-click unsubscribe link, and signed-in customers can also unsubscribe from their account page. The legal basis is consent, which you can withdraw at any time.
Where it is stored: in a database at Cloudflare, our hosting provider, and the sign-in emails go through Resend, from its EU servers.
4. Who we share data with
We do not sell your data. We share it only with providers that help us run the shop:
- Cloudflare: website hosting and delivery, the spam check on our contact form (Turnstile), and cookie-free visit statistics (Web Analytics)
- Zoho: our email
- Google Translate: machine translation of the page text, only after you choose a language other than English or Dutch (in the language menu, or by saying yes when we suggest your browser's language). Our fonts are hosted on our own site, so other pages do not contact Google
- Stripe: payments (card, iDEAL and other methods shown at checkout), the "keep me updated" choice on the payment page, and the link that restores an unfinished cart
- Delivery carriers, such as PostNL and DHL
- Resend: sends contact-form messages to our inbox and the confirmation email for our newsletter, from its EU servers in Ireland
- Resend: sends contact-form messages to our inbox and the emails about your order (order confirmation, one follow-up email and, only if you agreed, one cart reminder to you; order notice to us), from its EU servers in Ireland
- Google Analytics: not used at the moment. If we add it, only with your consent and after updating this policy
- WhatsApp and social platforms, only if you contact us there
- Consultants we hire when needed and, if required, authorities
Levantina Consulting is a separate sister company with its own privacy policy. We do not share any personal data with it.
Some providers, such as Cloudflare and Resend, are US companies and may process data outside the EU. Such transfers are covered by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
Some providers, such as Stripe, Cloudflare and Resend, are US companies and may process data outside the EU. Such transfers are covered by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
Our website links to other websites, such as our social media pages, WhatsApp and our sister company Levantina Consulting. When you visit them, their own privacy policies apply.
5. Your rights
You can ask us to access, correct, delete or limit your data, to move it to another provider, or to object to how we use it. If we use your data because you agreed, you can withdraw consent at any time. Write to [email protected] and we will reply within one month.
You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
We do not make automated decisions about you and do not use profiling.
6. Security
We keep data in the systems of the providers named above and limit access to people who need it.
7. Children
Our website and services are not directed at children. If you are under 16, please do not subscribe to our newsletter or provide personal data without the permission of a parent or guardian. If we learn that we have collected a child’s personal data without valid permission, we will delete it.
8. Changes
If we change this policy we will update the date at the top.