Privacy
Privacy Policy
Effective 1 August 2026. Abera & Co handles personal data carefully and only for clear account, customer-service, order, payment, delivery, and legal record purposes.
Data we process
- Checkout and delivery details: name, email, phone if supplied, billing and shipping address, ordered items, payment status, and order reference.
- Payment data handled by Stripe, including payment status and transaction identifiers. Abera & Co does not store full card details.
- Contact and complaint messages sent by email.
- Technical logs needed to run, secure, and troubleshoot the website.
- Optional account data: verified email, secure sessions, current profile and saved address defaults, account-to-order links, and privacy or account requests.
Purposes and legal bases
- Processing and delivering paid orders: contract performance.
- Customer service, returns, withdrawal, damaged items, and complaints: contract performance and legitimate interest.
- Tax and business records: legal obligation.
- Website security and technical reliability: legitimate interest.
- Providing an optional customer account and order history: contract performance and your request to use the account service.
Processors and sharing
We use Cloudflare Workers and D1 for site hosting and secure account/session records, Stripe for payments, and WooCommerce/WordPress for customer, order, fulfilment, and transactional email administration. We share data only when needed to provide those services, comply with the law, or protect customers and the business. Account creation does not subscribe you to marketing.
Retention
- Order and payment records are kept for 7 years for tax records.
- Contact, complaint, return, and product safety messages are kept for up to 24 months after the matter is closed.
- Technical logs are kept for up to 30 days unless needed longer for security investigation.
- Account closure is reviewed: sessions are revoked promptly, while order records that must be retained for tax or legal reasons are not automatically deleted.
Your rights
You may ask to access, correct, erase, restrict, or transfer your personal data, and you may object to certain processing. Email info@aberaandco.com. You may also complain to the Dutch Data Protection Authority.
International transfers
Some processors may handle data outside the EU or EEA. Where this happens, Abera & Co relies on contractual safeguards and processor security measures.