Last updated: 29 October 2026
This policy explains what personal data Eau de Dubai collects when you visit eaudd.com or place an order, why we collect it, how long we keep it, and the rights you have over it. We are the controller of that data under the General Data Protection Regulation (GDPR).
Who we are
Eau de Dubai, Keizersgracht 241, 1016 EA Amsterdam, Netherlands. Registered with the Dutch Chamber of Commerce under number 82548560, VAT number NL862514393B01. You can reach us at info@eaudd.com.
The personal data we collect
- Order details — your name, delivery address, billing address, email address and telephone number, together with what you ordered, the price paid and the date of the order.
- Payment data — the payment method you chose and confirmation that payment succeeded or failed. Your full card number is handled directly by our payment service provider and is never stored on our systems.
- Account details — if you create an account: your email address, an encrypted password, your saved addresses and your order history.
- Messages — the content of emails, contact forms and other correspondence you send us, so we can answer you and keep a record of what was agreed.
- Technical data — your IP address, browser type and the pages you viewed, recorded in our server logs for security and troubleshooting.
We do not knowingly collect special categories of data, and we do not ask for them. Please do not include medical, religious or other sensitive details in messages to us.
Why we use your data, and our legal basis
- To perform your order — processing payment, shipping goods, sending order confirmations and handling returns. Legal basis: performance of a contract with you.
- To run your account — storing your addresses and order history so you do not have to re-enter them. Legal basis: performance of a contract.
- To answer your questions — responding to emails and contact forms. Legal basis: performance of a contract, or our legitimate interest in helping people who approach us.
- To meet legal obligations — in particular Dutch tax law, which requires us to keep invoices and order records. Legal basis: compliance with a legal obligation.
- To keep the shop secure — detecting fraud, abuse and technical attacks. Legal basis: our legitimate interest in protecting the shop and our customers.
- To send marketing email — only where you have asked us to, or where you are an existing customer and we are telling you about similar products. Legal basis: your consent, or our legitimate interest. Every such message contains an unsubscribe link.
Who receives your data
We do not sell your personal data, and we do not share it for other companies’ marketing. We do pass it to the following categories of recipient, only so far as each needs it:
- our hosting and IT providers, who store the website and its database;
- our payment service provider, who processes the payment itself;
- carriers and delivery partners, who need your address to deliver the parcel;
- email and customer-service providers, who transmit the messages we send you;
- our accountant and, where we are legally required to, tax or other authorities.
Each of these acts on our instructions under a written agreement, except where they are independent controllers in their own right, such as a carrier or a public authority.
Transfers outside the European Economic Area
We aim to keep your data within the EEA. If a provider we use processes data outside the EEA, we rely on a transfer mechanism recognised under the GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision for the country concerned.
How long we keep it
- Order and invoice records — seven years, because Dutch tax law requires it.
- Account data — until you ask us to close the account, after which we delete it apart from anything the tax rule above obliges us to keep.
- Correspondence — up to two years after the matter is closed.
- Server logs — a short rolling period, normally no more than a few months.
Your rights
Under the GDPR you may ask us to:
- give you a copy of the personal data we hold about you;
- correct it if it is wrong or incomplete;
- erase it, where we have no continuing reason to keep it;
- restrict how we use it while a dispute about it is resolved;
- send it to you, or to another provider, in a portable format;
- stop using it where we rely on legitimate interests, by objecting to that use;
- withdraw your consent at any time, where consent is what we relied on. Withdrawing it does not affect anything we did beforehand.
Write to info@eaudd.com to exercise any of these. We will respond within one month. We may need to confirm your identity first, so that we do not disclose your data to someone else.
If you are not satisfied with how we have handled your data, you may complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
Security
We serve the whole site over an encrypted HTTPS connection, store passwords in hashed form, and limit access to order data to the people who need it. No system can be guaranteed completely secure, but we review these measures as the shop grows.
Children
The shop is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
Cookies
Cookies and similar technologies are covered separately in our Cookie Policy.
Changes to this policy
If we change how we handle personal data we will update this page and change the date at the top. Where the change is significant we will say so more prominently.
Contact
Questions about this policy, or about your data, can go to info@eaudd.com, or by post to Eau de Dubai, Keizersgracht 241, 1016 EA Amsterdam, Netherlands.