Privacy Policy

Sableau (operated by Vijn Enterprises, KvK 42114686, Stille Steeg Oost 14, 3823 ZL Amersfoort, Netherlands) respects your privacy. This policy explains what personal data we collect, why, and what rights you have under the General Data Protection Regulation (GDPR).

1. What data we collect

Order data: name, address, email address, phone number (optional), and payment confirmation — needed to process and ship your order.
Account data: email address and order history if you create a customer account.
Technical data: IP address, browser and device information, collected automatically when you visit our store.
Marketing data: your email address if you subscribe to our newsletter (with your consent).

2. Why we process your data (legal bases)

To perform our contract with you: processing orders, payment, shipping, returns and customer service.
With your consent: email marketing and non-essential cookies. You can withdraw consent at any time.
Legitimate interest: fraud prevention and improving our store.
Legal obligation: tax and accounting record-keeping.

3. Who we share data with

We share personal data only with parties needed to run our store: Shopify (hosting & payments), our fulfilment and shipping partners (to deliver your order), Klaviyo (email, only with consent) and ParcelPanel (order tracking). Some partners process data outside the EEA; in that case appropriate safeguards such as EU Standard Contractual Clauses apply. We never sell your data.

4. Retention

We keep order data for as long as required by Dutch tax law (7 years for administrative records). Marketing data is kept until you unsubscribe.

5. Cookies

We use functional cookies (required for cart and checkout) and, only with your consent, analytics and marketing cookies. You can manage preferences via the cookie banner.

6. Your rights

You have the right to access, correct, delete, restrict or transfer your personal data, and to object to processing. To exercise these rights, email help@sableau.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).