Privacy Policy

Last updated: 6 November 2025

1. Introduction

This Privacy Policy explains how Flowa (“we”, “us”, “our”) collects, uses, and protects personal data when you visit or purchase from flowatoys.com (“the Website”). We are committed to processing your data lawfully, fairly, and transparently in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law. By using the Website, you acknowledge and accept the practices described in this Policy.

2. Company Information

PrimeSelects, Zambezistroom 13, 2721 DC Zoetermeer, Netherlands. Chamber of Commerce (KVK): 94933898. Contact: flowatoys@gmail.com.

3. Personal Data We Collect

We collect the information you provide to us directly, such as name, email address, telephone number, billing and shipping address, order details, account details, and messages sent to customer support. We also receive technical data generated by your use of the Website, including IP address, device and browser information, pages viewed, and referring URLs. Payment details are processed securely by our payment providers; we do not store complete card numbers on our servers.

4. How We Use Personal Data

We use personal data to process and deliver orders, provide customer service, manage accounts and order history, communicate about purchases and returns, improve the Website and our services, comply with legal and tax obligations, prevent fraud and misuse, and—where you have given consent—send newsletters or marketing communications. You may unsubscribe from marketing at any time.

5. Legal Bases for Processing

We process personal data where necessary for the performance of a contract with you, to comply with legal obligations, to pursue our legitimate interests in operating and improving our business and preventing fraud, and on the basis of your consent where required. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing of Personal Data

We share data only with trusted service providers when necessary to operate the Website and fulfill your orders, such as payment processors, shipping carriers, IT and hosting providers, and analytics or customer-support tools. These parties act on our instructions and are bound by contractual and legal obligations to protect personal data. We do not sell or rent your personal data to third parties.

7. International Transfers

Personal data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure adequate protection through mechanisms such as adequacy decisions, Standard Contractual Clauses, or other safeguards required by the GDPR.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this Policy or as required by law. Order and invoice records are typically retained for up to seven years for tax and accounting compliance. Customer service communications may be retained for up to two years after resolution. When data is no longer needed, it is deleted or anonymized.

9. Cookies and Similar Technologies

The Website uses cookies and similar technologies to enable core functionality, remember preferences, analyze site usage, and personalize content. You can control cookies through your browser settings. Disabling certain cookies may affect the performance and features of the Website. We may use privacy-friendly analytics to measure traffic and improve the user experience.

10. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. While we strive to safeguard your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Under the GDPR, you have the right to request access to your personal data, correction of inaccurate data, deletion of data in certain circumstances, restriction of processing, objection to processing based on legitimate interests, and data portability. Where processing is based on consent, you may withdraw your consent at any time. To exercise these rights, contact us at flowatoys@gmail.com. We will respond within one month where feasible and lawful.

12. Children and Age Restriction

Our Website and products are intended exclusively for adults aged eighteen years or older. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a person under 18, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, identified by the “Last updated” date above. Continued use of the Website after an update constitutes acceptance of the revised Policy.

14. Contact

If you have questions about this Privacy Policy or how we process your personal data, please contact us at flowatoys@gmail.com or by post at PrimeSelects, Zambezistroom 13, 2721 DC Zoetermeer, Netherlands.