Privacy Policy

Last updated: 23-06-2026

This Privacy Policy applies to all personal data collected and used by Alluchi when you visit or use our website, place an order, contact us, or interact with us through social media or other channels. 'Personal data' refers to any information that allows us to identify you, as described below.

Who we are

We are Alluchi ("we", "us", or "our"), a modest swimwear brand based in the Netherlands. Alluchi is responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR).

AlluchiOkari Ventures B.V.
Chamber of Commerce number: 86281488
Weena 690
3012 CN Rotterdam 
Netherlands
Email: hi@alluchi.com

Personal data we collect

We may collect the following categories of personal data:

  • Contact details — name, address, phone number, email address
  • Account and technical data — login details, IP address, browser type, device IDs, geographical location, pages visited, session duration
  • Purchase information — products ordered, order history, delivery address, payment method and status
  • Communication data — messages you send via email, social media, or customer service
  • Marketing preferences — your consent and preferences for receiving updates and promotions
  • Social media activity — engagement with our content on social platforms
  • Cookies and tracking technologies — see our Cookie Policy for more information

Purpose and legal basis of processing

Purpose Legal Basis
Processing orders, handling payments, and providing support Contract performance (Art. 6(1)(b) GDPR)
Sending marketing communications Consent (Art. 6(1)(a) GDPR)
Website analysis and service improvement Legitimate interest (Art. 6(1)(f) GDPR)
Fraud prevention and security monitoring Legitimate interest (Art. 6(1)(f) GDPR)
Compliance with legal and tax obligations Legal obligation (Art. 6(1)(c) GDPR)

Legitimate interests include improving your customer experience, securing our services, and analysing website performance. We have carefully balanced these interests against your privacy rights.

Marketing communication

You will only receive marketing communications if you have given your explicit consent. You can unsubscribe at any time via the unsubscribe link in the email or by contacting us at info@alluchi.com.

Cookies

Our website uses cookies and similar technologies to provide functionality, analyse traffic, and personalise content. Non-essential cookies — such as analytics and advertising cookies — are only placed after you have given consent via our cookie banner. You can adjust your cookie preferences at any time via your browser settings or our Cookie Settings page. See our full Cookie Policy for more information.

How we share your data

We never sell your personal data. We may share data with trusted third parties:

  • Service providers — hosting, analytics, email and SMS delivery, customer service
  • Payment and logistics partners — to process orders and deliver products
  • Marketing and affiliate partners — only with your consent
  • Authorities — when legally required
  • Platform providers — such as Klaviyo, Shopify, and Meta, where necessary for our services

All third parties operate under data processing agreements (DPAs) to ensure that data processing complies with the GDPR.

International data transfer

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. In such cases, we ensure the protection of your data by implementing standard contractual clauses (SCCs) approved by the European Commission, or by using partners certified under appropriate frameworks.

Data security

We take appropriate technical and organisational measures to secure your data, including:

  • SSL encryption
  • Access controls and authentication
  • Regular audits and vulnerability assessments
  • Secure data storage practices

Data retention

We retain your personal data only for as long as necessary for the stated purposes or to comply with legal obligations:

  • Order and account information — 7 years (in accordance with Dutch tax law)
  • Marketing consent — until you unsubscribe or withdraw your consent
  • Customer service interactions — up to 2 years after the last contact
  • Analytics and cookies — as defined in our Cookie Policy

Your rights under the GDPR

You have the following rights regarding your personal data:

Right to access View what personal data we hold about you.
Right to rectification Correct inaccurate or incomplete data.
Right to erasure Request deletion of your data.
Right to restriction Limit the way we use your data.
Right to data portability Receive your data in a portable format.
Right to object Object to processing based on legitimate interest or for marketing.
Right to withdraw consent Withdraw your consent at any time for marketing or optional data collection.

To exercise your rights, please contact us at hi@alluchi.com.

You also have the right to lodge a complaint with the Dutch Data Protection Authority:

Dutch Data Protection Authority Website: autoriteitpersoonsgegevens.nl

Changes to this policy

We may update this Privacy Policy periodically. Material changes will be communicated via our website. Please check this page regularly for updates.