Privacy Policy

Last Updated: January 13, 2026

1. Introduction

This Privacy Policy explains how avaewear ("we", "us", "our") collects, uses, stores, and protects personal information when you use our website (https://www.avaewear.com), purchase products, participate in athlete or influencer programs, or otherwise interact with our services (the "Services").

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), UK GDPR, and applicable Dutch data protection laws.

2. Data Controller & Contact Details

Legal Entity: avaewear
Chamber of Commerce (KvK): 99558688
Email: info@avaewear.com

avaewear is the data controller responsible for processing your personal data.

3. Personal Information We Collect

3.1 Information You Provide

We collect information you actively provide, including:

Name, email address, phone number, shipping and billing address
Account credentials (username, encrypted password)
Order history, size and fit preferences
Payment details (processed securely via third-party providers)
Customer service communications
Athlete/influencer application data (social handles, engagement metrics, experience)
Voluntarily provided demographic data (age, gender, location)

Payment details are never stored by us directly.

3.2 Information Collected Automatically

IP address
Device and browser information
Pages visited, clicks, interactions
Approximate location (based on IP)
Cookies and similar technologies (see Section 8)

3.3 Information from Third Parties

We may receive data from:

Payment providers (e.g. Stripe, Shopify Payments, Klarna)
Analytics & marketing tools (Google Analytics, Meta Pixel, Klaviyo)
Shipping partners (DHL, DPD, UPS or equivalents)
Social media platforms (if you interact with our content or apply for partnerships)

4. Purposes of Processing

4.1 Order & Account Management

Processing purchases and deliveries
Managing customer accounts
Handling returns, refunds, and customer support

4.2 Athlete & Influencer Partnerships

Evaluating applications
Managing collaborations and campaigns
Tracking performance and engagement
Processing commissions or compensation

Any health-related or performance data is processed only if voluntarily provided and with explicit consent.

4.3 Marketing & Communications

Transactional emails (order confirmations, updates)
Marketing emails and SMS only with consent
Personalized recommendations and content
Targeted advertising based on cookie consent

4.4 Analytics & Improvement

Website optimization
Product development
Market research and trend analysis

4.5 Legal & Security Purposes

Fraud prevention
Legal compliance
Protection of our rights and users

5. Legal Basis (GDPR / UK GDPR)

We rely on the following legal grounds:

Consent

Email & SMS marketing
Marketing and advertising cookies
Use of name/image in influencer marketing

Contractual Necessity

Order fulfillment
Account management
Partnership agreements

Legitimate Interest

Improving services
Fraud prevention
Direct marketing to existing customers regarding similar products, subject to opt-out

Legal Obligation

Tax and accounting requirements
Legal requests and enforcement

6. Data Sharing

6.1 Service Providers

We share data with trusted processors, including:

E-commerce & payments: Shopify, Stripe, Klarna
Shipping & logistics: DHL, DPD, UPS
Email & CRM: Klaviyo
Analytics & advertising: Google Analytics, Meta Pixel
Cloud hosting: Shopify infrastructure

All processors are contractually bound under GDPR-compliant data processing agreements.

6.2 Advertising & Analytics

Hashed or anonymized identifiers may be shared with Google, Meta (Facebook / Instagram), and TikTok. This occurs only after cookie consent.

6.3 Legal Disclosure

We may disclose data if legally required or to protect our rights.

7. International Data Transfers

Some service providers are located outside the EU/UK. We safeguard international transfers using EU Standard Contractual Clauses (SCCs), UK IDTA / UK Addendum, and adequacy decisions where applicable.

8. Cookies & Tracking

We use cookies and similar technologies. Marketing and analytics cookies are placed only after explicit consent via our cookie banner. A separate Cookie Policy explains details and preferences.

9. Data Retention

Data Type	Retention
Account data	Account lifetime + 3 years
Orders & invoices	7 years
Marketing data	Until opt-out
Analytics	12-24 months
Partnership data	Duration + 3 years
Legal claims	Statutory limitation periods

10. Data Security

We use SSL/TLS encryption, role-based access controls, PCI-DSS compliant payment processing, and security monitoring and backups.

11. Your Rights (EU / UK)

You have the right to:

Access your personal data
Rectification of inaccurate data
Erasure ("right to be forgotten")
Restriction of processing
Data portability
Object to processing (including marketing profiling)
Withdraw consent at any time
Lodge a complaint with a supervisory authority

Supervisory Authorities:

Netherlands: Autoriteit Persoonsgegevens
UK: ICO

12. Marketing Opt-Out

Email: use the unsubscribe link in any marketing email
SMS: reply STOP
Ads: adjust your browser and platform settings

Transactional messages (order confirmations, shipping updates) remain unaffected.

13. Children

Our Services are not intended for children under 16.

14. Third-Party Services

We are not responsible for third-party privacy practices. Please review their policies separately.

15. Social Media Features

Social login and sharing tools are governed by the respective platform's privacy policy.

16. Policy Updates

We may update this Privacy Policy. Changes are published on our website with the updated date at the top.

17. Automated Processing

We use profiling for personalization and fraud prevention. We do not make decisions with legal or significant effects based solely on automated processing.

18. Do Not Track

We do not currently respond to DNT signals. Cookie controls remain available via our cookie banner.