Privacy policy

Last updated: 21 September 2026

This Privacy Policy explains how VPLK DESIGN V.O.F., trading as Vasili Lights (“Vasili Lights”, “we”, “us” or “our”), collects, uses and shares personal data when you visit vasililights.com (the “Site”), contact us, subscribe to our newsletter, submit a review or purchase our products.

1. Who is responsible for your data

The controller responsible for the processing described in this Privacy Policy is:

VPLK DESIGN V.O.F.
Louwesweg 1, ACTAgebouw
1066 EA Amsterdam
The Netherlands

Email: info@vasililights.com
VAT number: NL863407274B01
KvK/CCI Amsterdam: 84844191

2. Personal data we collect

Depending on how you use the Site, we may collect the following categories of personal data.

Information you provide to us

This may include:

your name, email address, telephone number, billing address and shipping address;
your order, delivery and transaction details;
account information if you create or use a customer account;
information contained in messages, enquiries, return requests or other communications;
your email address and marketing preferences when you subscribe to our newsletter;
information you provide when submitting a product review or other content.

Payment details are processed by Shopify and the payment provider selected during checkout. We do not receive or store your complete payment-card number.

Information collected automatically

When you use the Site, Shopify and our authorised service providers may automatically process information such as:

IP address and approximate location;
browser type, device type, operating system and screen size;
pages and products viewed;
referring page or website;
search terms and interactions with the Site;
cart and checkout activity;
cookie identifiers, consent preferences and similar technical identifiers;
URLs, page titles, query parameters and campaign parameters.

The exact information collected depends on your device, settings, location and consent choices.

Information received from other parties

We may receive information from Shopify, payment providers, delivery and fulfilment partners, review services, advertising platforms and other providers involved in processing an order or providing a service you requested.

3. How and why we use personal data

We process personal data for the following purposes:

to operate and secure the Site;
to display products, maintain your cart and provide checkout functionality;
to process payments and fulfil, deliver and administer orders;
to provide order confirmations, invoices and customer support;
to handle returns, refunds, complaints and legal claims;
to detect and prevent fraud, misuse and security incidents;
to maintain business, accounting and tax records;
to send newsletters or promotional messages when you have consented to receive them;
to collect and display product reviews;
to understand Site performance and improve our products and customer experience;
to measure advertising performance and show relevant advertising where you have given the required consent;
to comply with applicable laws and lawful requests.

Under the General Data Protection Regulation (“GDPR”), we rely on one or more of the following legal bases:

Performance of a contract: when processing is necessary to complete or administer your order or provide a service you requested.
Legal obligation: when we must retain or disclose information to comply with tax, accounting, consumer-protection or other legal requirements.
Consent: for optional cookies, certain analytics and advertising technologies, and email marketing where consent is required. You may withdraw consent at any time.
Legitimate interests: for purposes such as operating and protecting the Site, responding to enquiries, preventing fraud and understanding aggregated Site performance, provided that these interests do not override your rights and freedoms.

4. Shopify

Our online store is hosted by Shopify. Shopify processes information needed to provide the storefront, customer accounts, cart, checkout, payment, security, fraud-prevention and related ecommerce services.

Depending on the Shopify services you use, Shopify may also process personal data as an independent controller. More information is available in the Shopify Privacy Policy.

5. Cookies, consent and similar technologies

The Site uses cookies and similar technologies for essential functions such as security, customer privacy preferences, localization, cart operation, customer accounts and checkout.

Where required, Shopify’s cookie banner allows you to:

accept optional technologies;
decline optional technologies; or
manage your preferences by category.

Required cookies cannot be disabled through the banner because they are necessary for the Site and checkout to function.

Depending on your choices, optional technologies may be used for:

personalization;
analytics;
marketing and advertising.

Google analytics and advertising technologies integrated through Shopify are activated only when the required consent has been provided in regions where consent is required.

You can make your selection through the cookie banner when it is displayed. To reset a previous selection, you may use an available cookie-preferences control or clear the Site’s cookies and local storage in your browser and reload the Site.

Cookie names, providers and retention periods may change when Shopify or another authorised provider updates its services. More information about cookies used by Shopify is available in the Shopify Cookie Policy.

6. Cookieless analytics with Rybbit

We use Rybbit to understand aggregated Site traffic and performance.

Rybbit operates without cookies. It may process information such as:

pages visited and page titles;
referring pages;
session duration and entry and exit pages;
browser, operating system, device type and screen information;
URLs, query parameters and UTM campaign parameters;
country and region;
anonymous user and session identifiers.

An IP address is used temporarily to determine country and region but is not stored by Rybbit. The analytics data does not include your name, email address, postal address or payment details unless such information is deliberately included in a URL or otherwise submitted as part of an interaction.

We use this cookieless, privacy-oriented analytics on the basis of our legitimate interest in understanding aggregated Site performance and improving the Site.

More information is available in the Rybbit Privacy Policy.

7. Advertising and marketing

If you consent to marketing or advertising technologies, information about your interaction with the Site may be processed by Google or other authorised advertising partners to measure campaigns or provide relevant advertising.

These providers may combine information received from the Site with information they already hold, in accordance with their own privacy policies. More information is available in the Google Privacy Policy.

We send email marketing only where we have an appropriate legal basis. You may unsubscribe at any time by using the unsubscribe link in an email or by contacting us.

We do not sell personal data for money. Certain disclosures for targeted advertising may nevertheless be legally defined as “selling”, “sharing” or “targeted advertising” in some jurisdictions. Where applicable, you may opt out through the available privacy controls or by contacting us.

8. Reviews

If you submit a product review, the information you provide is processed for the purpose of collecting, verifying and displaying that review. We use Judge.me to provide review functionality.

Your review, display name and any other information you choose to publish may be visible to other Site visitors. Please do not include sensitive or unnecessary personal information in a public review.

9. Service providers and other recipients

We share personal data only where necessary with organisations that help us operate the business and provide our services. These may include:

Shopify and Shopify service providers;
payment processors and payment-method providers;
shipping, delivery and fulfilment partners;
email and newsletter service providers;
Judge.me for product reviews;
Google for consent-based analytics and advertising services;
Rybbit for cookieless website analytics;
hosting, security, IT and customer-support providers;
accountants, legal advisers, insurers and other professional advisers.

We may also disclose information where required by law, to respond to a lawful request, to protect our legal rights or the safety of others, or in connection with a merger, restructuring or transfer of all or part of our business.

Service providers may use personal data only for the agreed services or as otherwise permitted by applicable law.

10. International data transfers

Some of our service providers may process personal data outside the European Economic Area.

Where required, we rely on a recognised legal transfer mechanism, such as an adequacy decision, standard contractual clauses or another safeguard permitted by data-protection law.

11. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to:

complete and administer orders;
provide customer support;
maintain accounting and tax records;
resolve disputes;
prevent fraud and protect the Site;
comply with legal obligations.

Retention periods vary according to the type of information and the applicable legal requirements.

Newsletter information is retained until you unsubscribe or withdraw your consent, unless continued retention is required for a limited record of your preference or another legal reason.

When information is no longer required, we delete or anonymise it where reasonably possible.

12. Your rights

Subject to applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of your data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain data in a portable format;
withdraw consent at any time;
object to or opt out of direct marketing;
submit a complaint to a data-protection authority.

To exercise a right, contact us at info@vasililights.com. We may need to verify your identity before completing a request.

You also have the right to submit a complaint to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the data-protection authority in the country where you live or work.

13. Children’s privacy

Purchases from the Site must be made by an adult or with the involvement of a parent or legal guardian.

We do not knowingly request or collect personal data directly from children. If you believe that a child has provided personal data to us without appropriate authorization, please contact us so that we can investigate and, where appropriate, delete it.

14. Security

We use reasonable organisational and technical measures intended to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.

However, no website, transmission method or storage system can be guaranteed to be completely secure.

15. Third-party websites

The Site may contain links to websites or services operated by other organisations. We are not responsible for their privacy practices. We recommend reviewing the privacy information provided by those organisations before submitting personal data.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, providers, legal obligations or processing activities.

The current version will be published on this page with an updated revision date.

17. Contact and complaints

For questions, privacy requests or complaints, contact: