Privacy Policy

How we process personal data in accordance with the GDPR.

Privacy Policy

How we collect, use, and protect your personal data in accordance with the GDPR.

Last updated: 14 June 2026

1. Data Controller

VÉLUM Doors B.V. is the data controller for personal data processed through VÉLUM Doors (contact@velumdoors.com).

Registered address: Keizersgracht 123, 1015 CJ Amsterdam, Netherlands. KvK: 12345678. VAT: NL123456789B01.

2. Personal Data We Collect

We may process the following categories of personal data:

• Identity and contact details (name, email, phone, address)
• Account credentials and authentication data
• Order, quotation, and project inquiry details
• Measurements and technical specifications for custom products
• Communication records and customer support messages
• Website usage data and cookie preferences (where consented)

3. Purposes & Legal Bases (GDPR)

We process personal data for the following purposes:

• Contract performance — processing and delivering your order (Art. 6(1)(b) GDPR)
• Legal obligation — tax, accounting, and regulatory compliance (Art. 6(1)(c) GDPR)
• Legitimate interests — fraud prevention, website security, and service improvement (Art. 6(1)(f) GDPR)
• Consent — marketing communications and non-essential cookies (Art. 6(1)(a) GDPR)

4. Data Retention

Account data is retained while your account is active and for up to 24 months after last activity unless a longer period is required by law.

Order and invoice data is retained for 7 years in accordance with Dutch tax and accounting obligations.

Support inquiries are retained for up to 24 months after resolution.

Cookie consent records are retained for 12 months.

5. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing.

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact contact@velumdoors.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6. Sharing & Processors

We share data only with processors necessary to operate our business, such as hosting providers, payment processors, carriers, and email service providers, under appropriate data processing agreements.

We do not sell your personal data to third parties.

7. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration.

Authentication sessions use secure, HTTP-only cookies.

Questions? Contact us at contact@velumdoors.com.