Privacy policy
Last updated: 10 August 2026
This Privacy Policy explains how ACHIVA collects, uses, stores, shares, and protects personal information when you visit our website, place an order, contact us, subscribe to communications, or otherwise interact with our online store.
1. Who We Are
ACHIVA is responsible for the processing of personal data described in this Privacy Policy where we determine the purposes and means of that processing.
Contact details
ACHIVA
The Netherlands
Email: hello@getachiva.com
Where required by applicable law, our legal entity name, Chamber of Commerce/KVK number, VAT number, and other statutory business details will be displayed on our website.
2. Personal Information We Collect
Depending on how you interact with us, we may collect the following categories of personal information:
Contact information
- name;
- email address;
- telephone number, where provided;
- billing address;
- shipping address.
Order and transaction information
- products purchased;
- order number;
- order value;
- shipping method;
- payment status;
- returns, refunds, and cancellation information;
- communications relating to an order.
Payment information
Payments are generally processed through Shopify and/or third-party payment providers.
We may receive limited information about your payment transaction, but we do not necessarily receive or store your complete payment-card details.
Account information
If customer accounts are available, we may process information associated with your account, such as your login details, order history, and saved preferences.
Communications
When you contact us, we may collect:
- the contents of your message;
- your email address;
- information you provide about an order or product;
- any attachments or photographs you choose to send us.
Marketing information
If you subscribe to our email or other marketing communications, we may process:
- your contact details;
- marketing preferences;
- whether you opened or interacted with communications, where permitted;
- information used to personalize marketing where permitted by law.
Technical and usage information
When you visit our website, certain information may be collected automatically, such as:
- IP address;
- browser type;
- device information;
- operating system;
- pages visited;
- referring website;
- approximate location based on IP address;
- timestamps;
- cookie and similar technology identifiers.
3. How We Use Personal Information
We may process personal information for the following purposes:
To process and fulfil orders
This includes:
- accepting and processing purchases;
- arranging payment;
- preparing and shipping orders;
- providing order confirmations and tracking;
- processing returns and refunds;
- responding to order-related questions.
Legal basis: performance of a contract or steps taken at your request before entering into a contract.
To provide customer service
We use personal information to respond to questions, complaints, requests, product inquiries, and other customer-service communications.
Legal basis: performance of a contract where the request relates to an order, or our legitimate interests in providing effective customer service.
To comply with legal obligations
We may process and retain information where necessary to comply with tax, accounting, consumer-protection, product-safety, regulatory, fraud-prevention, or other legal obligations.
Legal basis: compliance with a legal obligation.
To prevent fraud and protect our business
We may use information to detect suspicious transactions, prevent misuse, protect our website, and maintain the security of our systems.
Legal basis: our legitimate interests in preventing fraud, protecting customers, and securing our business, subject to applicable law.
To improve our website and services
We may analyze how visitors interact with our website to understand performance, troubleshoot problems, and improve the customer experience.
Where non-essential cookies or similar tracking technologies are involved, we will rely on consent where required by law.
Legal basis: legitimate interests for strictly necessary operational analytics where permitted, or consent where required.
To send marketing communications
Where permitted, we may send you email or other marketing communications regarding ACHIVA products, offers, launches, or news.
Where consent is legally required, we will only send such communications after receiving your consent.
Legal basis: consent where required, or another lawful basis where permitted by applicable law.
You may unsubscribe from marketing communications at any time using the unsubscribe link included in an email or by contacting us.
4. Cookies and Similar Technologies
Our website may use cookies, pixels, local storage, and similar technologies.
These technologies can be used for purposes such as:
- keeping the website functioning;
- remembering your cart or preferences;
- enabling checkout;
- maintaining security;
- measuring website performance;
- analytics;
- advertising and marketing, where permitted.
We distinguish between technologies that are necessary for the website to function and non-essential technologies used for analytics, personalization, or advertising.
Where required by applicable law, non-essential cookies and tracking technologies will not be used until you have provided valid consent.
You can manage applicable privacy and cookie choices through the consent tools made available on our website.
5. Shopify
Our online store is powered by Shopify.
Shopify provides the ecommerce infrastructure that allows us to operate our website, process orders, manage customer information, and provide related services.
In many circumstances, ACHIVA acts as the controller of customer personal data and Shopify processes information on our behalf. Shopify may also act independently as a controller for certain services or features, depending on how Shopify services are configured. Shopify explains that merchants are generally controllers of their customers’ data and remain responsible for configuring their stores in accordance with GDPR requirements.
6. Service Providers and Other Recipients
We may share personal information with third parties where reasonably necessary to operate our business, including:
- Shopify;
- payment processors;
- shipping and fulfilment providers;
- delivery carriers;
- customer-service providers;
- email and marketing platforms;
- website hosting and technical service providers;
- analytics providers;
- professional advisers such as accountants, lawyers, or consultants;
- fraud-prevention and security providers;
- governmental, regulatory, judicial, or law-enforcement authorities where legally required.
We do not authorize service providers to use personal information for unrelated purposes where they process it solely on our behalf.
7. Advertising and Analytics
Depending on the technologies enabled on our store, we may use analytics or advertising services provided by third parties.
These services may process information about your device, browser, website activity, or interactions with advertisements.
Where such processing requires consent under applicable privacy or electronic communications law, we will request consent before activating the relevant non-essential tracking technologies.
If we later use services such as Meta advertising, Google Analytics, Google Ads, TikTok advertising, or similar platforms, this Privacy Policy and our cookie settings should be updated where necessary to reflect those specific services.
8. International Data Transfers
Some of our service providers may process personal information in countries outside the European Economic Area.
Where personal data is transferred outside the EEA, we take steps required by applicable data-protection law to ensure an appropriate level of protection.
Depending on the circumstances, those safeguards may include:
- an adequacy decision adopted by the European Commission;
- approved Standard Contractual Clauses;
- other lawful transfer mechanisms recognized under applicable data-protection law.
Shopify notes that GDPR does not require personal data to remain physically stored in Europe, but transfers outside Europe must be protected in accordance with applicable law.
9. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- fulfil orders;
- maintain appropriate business records;
- comply with tax, accounting, and legal requirements;
- resolve disputes;
- enforce agreements;
- prevent fraud;
- establish, exercise, or defend legal claims.
Retention periods vary depending on the type of information and the legal or business reason for keeping it.
When information is no longer required, we will delete, anonymize, or otherwise handle it in accordance with applicable law.
10. Your Privacy Rights
If the GDPR or another applicable privacy law applies to you, you may have rights including:
Right of access
You may request confirmation of whether we process your personal data and request a copy of that data.
Right to rectification
You may ask us to correct inaccurate or incomplete personal information.
Right to erasure
In certain circumstances, you may request deletion of your personal information.
Right to restriction
You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability
Where applicable, you may request certain personal data in a structured, commonly used, machine-readable format or request that it be transferred to another controller.
Right to object
You may object to certain processing based on our legitimate interests and may object at any time to the use of your personal information for direct marketing.
Right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Rights relating to automated decision-making
Where applicable, you may have rights regarding decisions based solely on automated processing that produce legal or similarly significant effects.
GDPR transparency rules require organizations to inform individuals about these rights and about the right to complain to a data-protection authority.
11. Exercising Your Rights
To make a privacy request, contact:
Please clearly describe the right you wish to exercise.
We may need to verify your identity before fulfilling a request in order to protect your information.
We will respond within the timeframe required by applicable law.
12. Complaints
If you have concerns about how ACHIVA processes your personal information, please contact us first at:
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
As ACHIVA is based in the Netherlands, the relevant Dutch supervisory authority is the Autoriteit Persoonsgegevens, subject to your right to contact another competent supervisory authority where applicable.
13. Children’s Privacy
Our online store is not intended to knowingly collect personal information from children who are below the age at which they can validly provide consent or enter into transactions under applicable law.
If you believe a child has provided us with personal information unlawfully, please contact us so we can review and, where appropriate, delete it.
14. Security
We use reasonable organizational and technical measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no internet transmission or storage system can be guaranteed to be completely secure.
15. Links to Third-Party Websites
Our website may contain links to websites or services operated by third parties.
Their privacy practices are governed by their own policies, and we encourage you to review those policies before providing personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- our business practices;
- the services we use;
- our website;
- applicable legal requirements.
The updated version will be published on this page with a revised “Last updated” date.
17. Contact Us
For questions about this Privacy Policy or the way we process personal data, contact:
ACHIVA
The Netherlands
hello@getachiva.com