Privacybeleid

1. Who controls your data

ACEFUEL B.V., Beemd 32, 4854 SC Bavel, The Netherlands, is the controller for personal data described in this policy. KVK: 42149628. Privacy email: support@acefuel.com.

2. Personal data we collect

·   Identity and contact data, such as name, billing/delivery address, email address and telephone number.

·   Order, transaction and withdrawal data, such as products purchased, amount, currency, discounts, returns, withdrawal declarations, products concerned, submission timestamps and payment status. Full card details are normally processed by payment providers, not ACEFUEL.

·   Account, support, review, survey and communication data you choose to provide.

·   Marketing preferences and interaction data, including email engagement where permitted.

·   Device, log, cookie and usage data, such as IP address, browser, device identifiers, pages viewed, referral source and approximate location.

·   Fraud-prevention and compliance information where necessary.

3. Why we use data and our legal bases

·   To accept, fulfil, deliver, process and confirm withdrawals and returns, and support orders — performance of a contract, legal obligations and steps requested before a contract.

·   To process payments, prevent fraud and secure the store — contract, legitimate interests and/or legal obligations.

·   To maintain tax, accounting, product-safety and compliance records — legal obligations.

·   To answer enquiries, improve products and services, and manage customer relationships — contract and legitimate interests, balanced against your rights.

·   To send marketing — consent where required, or another lawful basis where specifically permitted. You can opt out at any time.

·   To run analytics, personalisation and advertising technologies — consent where required. Essential technologies are used to operate the store.

·   To establish, exercise or defend legal claims — legitimate interests and legal obligations.

4. Sources

We collect data directly from you, from your device, from Shopify and connected service providers, and from lawful advertising, payment, logistics or fraud-prevention partners. We do not buy sensitive health profiles for advertising.

5. Who receives data

We share only what is reasonably necessary with service providers and other recipients. Depending on the features enabled, these may include Shopify (store hosting), payment providers, Sendcloud and delivery carriers, Klaviyo (email/SMS marketing), Judge.me (reviews), UpPromote (affiliate attribution), Consentmo or another consent platform, Google, Meta and TikTok (analytics/advertising where consented), IT/security providers, advisers, authorities and a buyer or successor in a lawful business transaction.

Each provider may act as our processor, an independent controller, or both, depending on the service. The live website and consent tool should identify the providers actually enabled at launch.

6. International transfers

Some providers may process data outside the European Economic Area. Where required, we use an adequacy decision, approved standard contractual clauses and supplementary safeguards, or another lawful transfer mechanism. You may contact us for information about relevant safeguards.

7. Retention

We keep personal data only as long as necessary for the relevant purpose. Order, invoice and core tax records are generally retained for at least seven years and longer where a specific VAT/OSS or legal rule requires it. Support and dispute records are retained for the period needed to resolve the matter and defend claims. Marketing data is kept until consent is withdrawn, you object, or it is no longer needed. Cookie durations are listed in the live cookie settings.

8. Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction, portability or objection; withdraw consent at any time without affecting earlier processing; and object to direct marketing at any time. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your country of residence.

To exercise a right, email support@acefuel.com. We may ask for information necessary to verify identity. We normally respond within the period required by law.

9. Cookies and choices

See our Cookie Policy. Non-essential cookies and similar technologies are activated only after consent where required. You can reject them and later change or withdraw consent through the cookie settings link.

10. Security, children and automated decisions

We use proportionate technical and organisational safeguards, but no online system is completely secure. Our store is not directed to children under 16 and we do not knowingly collect their data for online services without appropriate authorisation. We do not make decisions based solely on automated processing that produce legal or similarly significant effects unless disclosed and lawfully permitted.

11. Changes and contact

We may update this policy to reflect legal, technical or business changes. The current version and effective date will be posted on acefuel.com. Questions and privacy requests: support@acefuel.com.