PRIVACY POLICY

LateNight B.V., trading as Sapone di Toscana

Version: 2.0

Last updated: 31 October 2026

1. Who is responsible?

This privacy policy applies to the processing of personal data by:

LateNight B.V.
Boompjes 40
3011 XB Rotterdam
the Netherlands
Chamber of Commerce (KvK) number: 88882551
VAT ID: NL864810465B01
E-mail: info@saponeditoscana.nl

LateNight B.V. operates the webshop and is an official reseller and market distributor of Sapone di Toscana. Within the meaning of the General Data Protection Regulation (GDPR), LateNight B.V. is the controller.

2. What personal data do we process?

We process personal data that you provide to us yourself and data that is collected automatically when you use our webshop.

a. Orders

• first and last name;
• billing and delivery address, and the chosen pick-up point if you opt for one;
• e-mail address and telephone number (if you provide it);
• payment details (processed by the payment provider; we do not store full payment details);
• order, invoice and return details.

b. Contact and customer service

• name and e-mail address;
• the content of your messages sent by e-mail or via the contact or feedback form, including any photos you attach.

c. Newsletter and welcome discount

• e-mail address and your subscription status;
• the source of your subscription (for example the pop-up or footer) and whether you have used the welcome discount.

d. Business customers (B2B)

• company name, contact person, VAT number, business address;
• order and invoice details.

e. Automatically collected data

• IP address, browser, device and operating system data;
• pages visited, click behaviour, date and time of the visit;
• data from cookies and similar technologies (see article 11).

3. What do we use your data for?

• processing, shipping and delivering orders;
• handling payments, cancellations, returns and refunds;
• customer service and answering questions and complaints;
• sending service e-mails, such as order confirmations, shipping notifications and a reminder about an unfinished order;
• sending the newsletter and the welcome discount (only with your consent);
• requesting and processing reviews;
• improving and securing the webshop and preventing misuse and fraud;
• analysis and statistics;
• complying with legal obligations, such as the statutory tax record-keeping obligation.

4. Legal bases

• Performance of a contract: orders, delivery, payment, returns and customer service.
• Legal obligation: accounting and record-keeping obligations.
• Legitimate interest: security and fraud prevention, improvement of the webshop, a reminder about an unfinished order, a review request after your purchase and limited e-mail marketing to existing customers about similar products. You can object to this at any time.
• Consent: the newsletter and welcome discount, and analytical and marketing cookies for which consent is required. You can withdraw your consent at any time; this does not affect processing that took place before.

5. With whom do we share your data?

We only share personal data with parties that help us provide our services, or where the law requires us to. These include:

• Shopify: webshop platform, hosting, checkout, payment processing, customer accounts and sending service e-mails and marketing e-mails (Shopify Messaging and Shopify Flow);
• payment providers: processing of payments;
• Sendcloud: creating shipping labels, showing pick-up points and tracking shipments;
• PostNL and DHL (and any other carriers): shipping and delivery;
• Cloud86.io: hosting of our e-mail;
• Google: if you click through from our website to our Google Business Profile to post a review, Google's terms and privacy policy apply there.

We have concluded data processing agreements with these parties, or they process the data as independent controllers (such as carriers and payment providers). We never sell personal data to third parties.

6. Transfers outside the European Economic Area (EEA)

Some service providers, such as Shopify or their sub-processors, may process data outside the EEA. This only happens with appropriate safeguards as referred to in the GDPR, for example an adequacy decision of the European Commission or the standard contractual clauses (SCCs).

7. How long do we keep your data?

• order and invoice data: 7 years (statutory tax record-keeping obligation);
• customer accounts: for as long as the account is active;
• customer service contact: up to 2 years after the matter has been resolved;
• newsletter data: until you unsubscribe;
• reviews: for as long as they are displayed on the website, unless you request removal earlier;
• analytics data: as briefly as possible and anonymised where possible.

8. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unlawful processing.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object. Send your request to info@saponeditoscana.nl. We will respond within one month. To prevent misuse, we may ask you to verify your identity.

10. Complaints

Do you have a complaint about how we handle your data? Please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or with the supervisory authority in the country where you live.

11. Cookies

Our webshop uses cookies and similar technologies:

• Necessary cookies: required for the webshop, the shopping cart and the checkout to work. No consent is needed for these.
• Functional storage: we remember in your browser, for example, whether you have already closed a pop-up, so that you do not see it again and again.
• Analytical and marketing cookies: only if you give your consent via the cookie banner.

You can change your cookie preferences at any time via the cookie settings on our website or in your browser.

12. Newsletter and e-mail

You only receive our newsletter if you have signed up for it, or as an existing customer about similar products. Every e-mail contains an unsubscribe link. You can also unsubscribe via support@saponeditoscana.nl. You will continue to receive service e-mails about your order for as long as this is necessary to fulfil your order.

13. Changes

We may amend this privacy policy. The most up-to-date version is always available on our website.

14. Contact

Questions about this privacy policy? E-mail info@saponeditoscana.nl.