Who we are
Hilox Lighting is a trade name of Daalder Concepts B.V., Torenallee 101, 5617 BR Eindhoven (KvK 82385424). We are responsible for the processing of your personal data as described in this privacy policy, and we handle it with care in accordance with the General Data Protection Regulation (GDPR).
You can ask questions about your data via the contact form on our contact page.
Which data we process and why
Name, address and place of residence. Needed to deliver and invoice your order.
Email address. For your order and shipping confirmation and your invoice. We may also ask you to review a product. We only send newsletters and offers with your consent; you can unsubscribe at any time via the link at the bottom of every newsletter.
Phone number. Only if you provide it yourself, for example for the courier or to answer your question.
Payment details. You pay in the secure environment of our payment service provider. We don't get to see your credit card details; we only hear whether your payment succeeded. We only use your bank account number to refund money.
Account. If you create an account, we keep your details and orders in it, so you don't have to fill everything in again each time.
Customer contact. If you ask a question via the chat or contact form, we keep your message and your contact details to help you. When you open the chat, we use a cookie (nmrc_fp) to remember your conversation, and during the conversation we see which pages you are viewing, what is in your basket, your IP address and the place and country that go with it. We also see this visit data without you opening the chat, from our own statistics. It is erased after 90 days.
IP address. Your browser sends it with every visit. We use it to secure the webshop, prevent fraud and roughly determine which country you come from. We don't identify you with it. In our own statistics we don't store it, or only in shortened form (we erase the last part); it is only stored in full in our customer service inbox, for 90 days. With an order we keep a shortened version and your browser data with your order.
Website use. We measure with our own statistics how visitors use the webshop, so we can improve it. How that works, you can read below under Cookies and measuring.
On what basis
We process your data on the basis of:
1. the performance of the contract, such as handling and delivering your order;
2. a legal obligation, such as the tax retention obligation for invoices;
3. your consent, such as for newsletters. You can withdraw consent at any time;
4. our legitimate interest, such as securing the webshop, preventing fraud and improving the webshop with our own statistics. You can object to processing on this basis (see Your rights).
Who we share data with
We don't sell your data and don't share it with third parties for their own purposes. We only share data with parties needed to provide our service, such as the delivery service, the payment service provider, our bookkeeping and Neuramerce, the supplier of our webshop and customer contact platform, which also runs our own statistics.
Part of our orders is stored, packed and shipped by fulfilment centre Sendly, which uses the Stockitup system for this. They only get what is needed to ship your parcel: your name, your address, your email address, your phone number if you provided one, and what you ordered.
We have made agreements with these parties so that they only process your data on our instructions.
We don't work with advertising partners such as Meta, TikTok or Google on this site: we send no data to them.
We also provide data where we are legally obliged to.
Cookies and measuring
You won't see a cookie banner on this webshop. There is nothing to give or withdraw consent for. We only place cookies for the operation of the webshop (basket, checkout, logging in, language and chat) and for our own statistics. We don't use advertising partners, so nothing goes to Meta, TikTok or Google.
We place our own statistics without consent, based on our legitimate interest in improving the webshop. The impact on your privacy is small: the data does not go to third parties or advertising partners and IP addresses are shortened. We therefore count your visit without you having to click anything. To prevent double counting, we turn your IP address and browser data into an encrypted code with a key that changes every day; we don't store your IP address itself and we throw away the daily key after two days. We also count per day how often a product has been viewed, without knowing by whom.
Objecting and managing yourself. You can object to our statistics via the contact form on our contact page; we will then stop measuring your visit. You can also always clear or block cookies yourself in your browser settings. An overview of all cookies can be found on our cookie page (Cookies, at the bottom of every page).
Statistics and customer recognition
We place the cookie nmrc_fp with a random visitor number, valid for 2 years. With it we measure which pages you visit, how you came to us (advertisement, search engine or link), which products you view and what you put in your basket, check out and buy. That shows us which channels work. With this measurement we can also compare two versions of a page, and we measure the speed of the webshop (Core Web Vitals). If session recordings or heatmaps are switched on, we only use them to make the webshop more user-friendly.
Do you order, log in, sign up for the newsletter or enter your email address? Then we link your visitor number to your customer profile. We do that with an encrypted form of your email address (a SHA-256 hash), not with your email address itself. That way we see that your phone and your laptop belong to the same customer, and earlier visits on those devices (up to a year back) count in our statistics. We don't use fingerprinting: we only recognise your device by the visitor number in the cookie.
How long we keep data
We don't keep your data longer than needed for the purposes above. Order and invoice data we keep for 7 years because of the tax retention obligation. Messages via chat or contact form we keep until 6 months after the last contact. Your account remains until you have it deleted.
Visit data in our customer service inbox we erase after 90 days. The link between your devices and your customer profile we erase 2 years (730 days) after we last saw the device. The anonymous visit count without cookie we keep for 395 days.
Security
We take appropriate technical and organisational measures to protect your data against loss and unlawful use. The webshop uses a secure connection (https) and payments run via a certified payment service provider.
Your rights
You have the right to access, correct or delete your personal data. You can also object to the processing (for example to our statistics), have the processing restricted, have your data transferred and always withdraw consent you have given, such as for the newsletter. Send your request via the contact form on our contact page; we respond within 30 days.
If you think we are not handling your data properly and we can't resolve it together, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Changes
We may amend this privacy policy, for example when we start using new services. The date at the top shows when it was last updated.
