Privacy Policy

1. Controller

Bellavi International B.V. is the controller of your personal data in relation to purchases where we act as Merchant of Record.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification and contact details (name, email address, phone number, billing/shipping address)
• Transaction details (products/services purchased, price, currency, date and time)
• Payment-related data (payment method, masked card numbers, authorization result – we do not store full card numbers ourselves; these are processed by our payment providers)
• Technical data (IP address, browser type, device information)
• Communication data (messages you send to us via email or contact forms)

3. Purposes and Legal Bases

We process personal data for the following purposes:

• To process your orders and payments, provide access to products/services, and manage refunds and customer support (performance of a contract)
• To comply with legal obligations, including tax and accounting requirements and anti-fraud checks (legal obligation)
• To protect our rights and prevent misuse, fraud or illegal activities (legitimate interest)
• To improve our services, website and processes (legitimate interest)

Where required by law, we may request your consent for specific uses (for example, certain marketing communications). You may withdraw consent at any time.

4. Sharing of Data

We may share your personal data with:

• Payment service providers and financial institutions we use to process payments
• Our vendor partners/suppliers, to the extent necessary to deliver the product or service you purchased
• IT and hosting providers who support our infrastructure
• Professional advisers (accountants, legal advisers)
• Authorities, regulators or law enforcement where required by law

We require our service providers to handle your personal data in accordance with applicable data protection laws and only for the purposes specified by us.

5. International Transfers

Some of our service providers or vendor partners may be located outside the European Economic Area (EEA). Where this is the case and your data is transferred outside the EEA, we will ensure that appropriate safeguards are in place, such as EU Standard Contractual Clauses or equivalent mechanisms, unless the destination country has been deemed to provide an adequate level of protection.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described above, including:

• For contracts and transactions: typically up to 7 years to comply with tax and accounting rules
• For customer support: as long as needed to handle your inquiries
• For legal claims: until the end of the applicable limitation periods

After the retention period, data will be deleted or anonymised.

7. Your Rights

Under applicable data protection law (including the GDPR), you may have the following rights:

• Right of access – to obtain a copy of your personal data we hold
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure – to request deletion of your data in certain circumstances
• Right to restriction – to request restriction of processing in certain circumstances
• Right to data portability – to receive certain data in a structured, commonly used format
• Right to object – to object to processing based on legitimate interests, and to direct marketing

To exercise your rights, please contact us at martin@bellaviinternational.com. We may need to verify your identity before fulfilling your request.

You also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

8. Cookies

Our website may use cookies or similar technologies to ensure proper functioning and to understand how visitors interact with the site. Where required, we will ask for your consent for non-essential cookies.