Privacy
Privacy Policy
Effective 17 June 2026. Abera & Co handles personal data carefully and only for clear customer-service, order, payment, delivery, and legal record purposes.
Data we process
- Checkout and delivery details: name, email, phone if supplied, billing and shipping address, ordered items, payment status, and order reference.
- Payment data handled by Stripe, including payment status and transaction identifiers. Abera & Co does not store full card details.
- Contact and complaint messages sent by email.
- Technical logs needed to run, secure, and troubleshoot the website.
Purposes and legal bases
- Processing and delivering paid orders: contract performance.
- Customer service, returns, withdrawal, damaged items, and complaints: contract performance and legitimate interest.
- Tax and business records: legal obligation.
- Website security and technical reliability: legitimate interest.
Processors and sharing
We use Cloudflare Workers for site hosting and Stripe for secure payments. We share data only when needed to provide those services, comply with the law, or protect customers and the business. We are not currently collecting newsletter sign-ups through the website.
Retention
- Order and payment records are kept for 7 years for tax records.
- Contact, complaint, return, and product safety messages are kept for up to 24 months after the matter is closed.
- Technical logs are kept for up to 30 days unless needed longer for security investigation.
Your rights
You may ask to access, correct, erase, restrict, or transfer your personal data, and you may object to certain processing. Email info@aberaandco.com. You may also complain to the Dutch Data Protection Authority.
International transfers
Some processors may handle data outside the EU or EEA. Where this happens, Abera & Co relies on contractual safeguards and processor security measures.