Privacy policy

PRIVACY POLICY

Last updated: July 2026
Issued in: Amsterdam, The Netherlands

At AEON, accessible through https://aeonofficial.com, protecting the privacy and security of our customers and visitors is of paramount importance.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, make a purchase, create an account, or communicate with us.

This Privacy Policy is intended to comply with applicable privacy and data protection legislation, including:

  • The EU General Data Protection Regulation — GDPR (Regulation (EU) 2016/679)

  • Applicable Dutch data protection laws, including the Algemene Verordening Gegevensbescherming (AVG)

  • Applicable UK data protection legislation

  • Other applicable international privacy laws and regulations

1. DATA CONTROLLER & CONTACT INFORMATION

AEON is the data controller responsible for determining how and why your personal information is processed.

2. RELATIONSHIP WITH SHOPIFY

Our online store is hosted by Shopify Inc., which provides the e-commerce platform that enables us to offer and sell our products and services.

Shopify may collect and process personal information relating to your access to and use of our store in order to provide, maintain, secure, and improve its services.

For more information about how Shopify processes personal information, please review the Shopify Consumer Privacy Policy:

https://privacy.shopify.com/en

Depending on your location, you may also be able to manage certain Shopify privacy preferences through the Shopify Privacy Portal:

https://privacy.shopify.com/en

3. PERSONAL INFORMATION WE COLLECT

We may collect personal information:

  • Directly from you

  • Automatically through your device or browser

  • From trusted third-party service providers

The information we collect depends on how you interact with our website and services.

A. CONTACT & ACCOUNT DETAILS

We may collect:

  • Full name

  • Email address

  • Telephone number

  • Shipping address

  • Billing address

  • Account information and preferences, where customer accounts are enabled

  • Securely encrypted account credentials, where applicable

B. FINANCIAL & TRANSACTION DATA

We may collect or receive:

  • Payment method used

  • Transaction confirmation details

  • Order and purchase history

  • Billing and payment status information

  • Refund and return information

Sensitive payment information is processed securely by authorised payment providers, such as Shopify Payments, Stripe, PayPal, or Klarna, where applicable.

AEON does not directly store complete, unencrypted credit or debit card numbers.

C. COMMUNICATIONS

We collect information that you provide when you contact us, including:

  • Customer service inquiries

  • Return or refund requests

  • Product questions

  • Complaints

  • Emails and other messages sent to info@aeonofficial.com

D. DEVICE & USAGE INFORMATION

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Network connection information

  • Time zone

  • General geographic location

  • Pages and products viewed

  • Items added to your cart or wishlist

  • Session duration

  • Referral source

  • Interactions with our website and advertisements

4. HOW WE USE YOUR PERSONAL INFORMATION

We process your personal information only where we have an appropriate legal basis.

FULFILLING ORDERS & CONTRACTS

We use your information to:

  • Process payments

  • Confirm, prepare, and dispatch orders

  • Provide delivery and tracking updates

  • Manage returns, refunds, and complaints

  • Communicate with you about your order

  • Provide customer support

This processing is generally necessary to perform our contract with you.

MARKETING & PROMOTIONS

With your consent, where required, we may use your contact information to send:

  • Newsletters

  • Product updates

  • Promotional offers

  • Relevant marketing communications

You may withdraw your consent at any time by:

Withdrawing your consent will not affect processing that was lawful before your withdrawal.

SECURITY & FRAUD PREVENTION

We may process information to:

  • Authenticate transactions

  • Detect or prevent fraud

  • Investigate suspicious activity

  • Protect our customers

  • Secure our website, systems, and services

IMPROVING OUR SERVICES

We may analyse website and purchase activity to:

  • Improve store navigation and performance

  • Understand customer preferences

  • Improve our product selection

  • Diagnose technical problems

  • Evaluate the effectiveness of our services and marketing

Where possible, we use aggregated or anonymised information for these purposes.

LEGAL COMPLIANCE

We may process and retain information where necessary to:

  • Comply with Dutch tax and accounting obligations

  • Maintain legally required business records

  • Respond to lawful requests from courts, regulators, or public authorities

  • Establish, exercise, or defend legal claims

  • Enforce our agreements and policies

5. HOW WE DISCLOSE PERSONAL INFORMATION

AEON does not sell or rent your personal information in exchange for money.

We may disclose personal information to trusted third parties where necessary to operate our business, provide our services, comply with the law, or protect our legitimate interests.

E-COMMERCE & IT INFRASTRUCTURE

We may share information with:

  • Shopify Inc.

  • Website hosting providers

  • Technical support and security providers

  • Customer service platforms

SHIPPING & LOGISTICS

We may provide the necessary delivery information to selected courier and logistics providers, such as:

  • PostNL

  • DHL

  • UPS

  • Other shipping providers used to complete your order

Shipping providers generally require information such as your name, delivery address, email address, telephone number, and order delivery details.

PAYMENT PROCESSORS

Payment and transaction information may be processed by providers such as:

  • Shopify Payments

  • Stripe

  • PayPal

  • Klarna

  • Other payment providers selected at checkout

Only the payment providers actually offered by AEON apply to your transaction.

ANALYTICS & ADVERTISING

Where enabled and permitted by law, we may use analytics and marketing providers such as:

  • Google Analytics

  • Shopify analytics and marketing services

  • Social-media advertising platforms

  • Other analytics or advertising providers disclosed through our cookie settings

Non-essential analytics or advertising technologies will be used only where a valid legal basis exists and, where required, after you have provided your consent.

LEGAL REQUIREMENTS

We may disclose personal information to:

  • Courts

  • Regulators

  • Law-enforcement authorities

  • Tax authorities

  • Government agencies

  • Professional advisers

We will only do so where required or permitted by applicable law.

6. COOKIES & TRACKING TECHNOLOGIES

AEON uses cookies, pixels, local storage, and similar technologies to operate the website, remember your preferences, maintain your shopping cart, analyse website traffic, and support advertising activities.

ESSENTIAL COOKIES

Essential cookies are required for functions such as:

  • Website security

  • Cart retention

  • Checkout

  • Payment processing

  • Account authentication

  • Fraud prevention

Because these cookies are necessary for the website to function, they generally cannot be disabled through our cookie-consent tool.

ANALYTICS COOKIES

Analytics cookies help us understand:

  • How visitors use our website

  • Which pages and products are viewed

  • How customers navigate the store

  • Whether technical improvements are needed

Where required by law, analytics cookies will be used only after you have provided your consent.

MARKETING & ADVERTISING COOKIES

Marketing cookies may be used to:

  • Measure advertising performance

  • Understand the effectiveness of campaigns

  • Show advertisements that may be more relevant to you

  • Limit how frequently you see particular advertisements

Where required by applicable law, these technologies will be activated only after you have provided your consent.

MANAGING YOUR COOKIE PREFERENCES

You can manage or withdraw your cookie preferences through the cookie banner or privacy settings available on our website.

You may also restrict or delete cookies through your browser settings. Disabling certain cookies may affect how some parts of the website function.

GLOBAL PRIVACY CONTROL — GPC

Where supported by our website settings and required by applicable law, a recognised Global Privacy Control (GPC) signal may be treated as a request to opt out of certain targeted advertising or data-sharing activities on the relevant browser or device.

More information is available at:

https://globalprivacycontrol.org

7. INTERNATIONAL DATA TRANSFERS

AEON is based in The Netherlands, but some of our service providers operate internationally.

As a result, personal information may be transferred to, accessed from, or stored in countries outside the European Economic Area (EEA) or the United Kingdom, including countries such as Canada and the United States.

Where required, international transfers are protected through recognised legal safeguards, which may include:

  • An adequacy decision issued by the European Commission or another competent authority

  • The European Commission’s Standard Contractual Clauses (SCCs)

  • The UK International Data Transfer Addendum or other approved UK transfer mechanisms

  • Additional contractual, technical, and organisational safeguards

8. DATA RETENTION

We retain personal information only for as long as reasonably necessary to:

  • Provide our products and services

  • Complete orders and transactions

  • Comply with legal and regulatory obligations

  • Resolve complaints or disputes

  • Prevent fraud

  • Establish, exercise, or defend legal claims

Different categories of information may be retained for different periods.

ORDER & FINANCIAL RECORDS

Business, transaction, invoice, and financial records that form part of our legally required administration may generally be retained for at least 7 years, in accordance with applicable Dutch tax and accounting requirements.

CUSTOMER SUPPORT RECORDS

Customer service correspondence may generally be retained for up to 2 years after the inquiry or complaint has been resolved, unless a longer period is reasonably necessary for legal, contractual, fraud-prevention, or dispute-resolution purposes.

MARKETING SUBSCRIPTIONS

Marketing subscription information is retained until:

  • You unsubscribe

  • You withdraw your consent

  • The information is no longer required for the relevant marketing purpose

We may retain limited suppression information to ensure that we continue to respect your request not to receive marketing communications.

ACCOUNT INFORMATION

Where customer accounts are available, account information may be retained for as long as the account remains active and for a reasonable period afterwards, subject to legal retention requirements.

9. YOUR RIGHTS UNDER THE GDPR & APPLICABLE PRIVACY LAWS

Depending on your location and the applicable law, you may have rights regarding your personal information.

These rights may include:

RIGHT OF ACCESS

You may request confirmation of whether we process your personal information and ask for a copy of the information we hold about you.

RIGHT TO RECTIFICATION

You may request the correction of personal information that is inaccurate or incomplete.

RIGHT TO ERASURE

You may request the deletion of your personal information in certain circumstances.

This right is not absolute. We may retain information where required for:

  • Legal or tax obligations

  • Fraud prevention

  • The establishment, exercise, or defence of legal claims

  • Other lawful purposes

RIGHT TO RESTRICT PROCESSING

You may request that we temporarily or permanently limit how we process certain personal information in specific circumstances.

RIGHT TO OBJECT

You may object to processing based on our legitimate interests.

You also have the right to object at any time to the use of your personal information for direct marketing purposes.

RIGHT TO DATA PORTABILITY

Where applicable, you may request certain personal information in a structured, commonly used, and machine-readable format or request that it be transferred to another organisation where technically feasible.

RIGHT TO WITHDRAW CONSENT

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

RIGHTS RELATING TO AUTOMATED DECISION-MAKING

Where applicable, you may have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

HOW TO EXERCISE YOUR RIGHTS

To exercise a privacy right, contact us at:

info@aeonofficial.com

Please include enough information for us to:

  • Understand your request

  • Identify the relevant information

  • Verify your identity where reasonably necessary

We will respond without undue delay and generally within one month, as required by applicable law.

In certain complex cases, or where multiple requests have been made, the response period may be extended where permitted by law. We will inform you if an extension is necessary.

You will generally not be charged for exercising your rights. However, where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

10. CHILDREN’S DATA

AEON’s website and services are not directed towards children, and we do not knowingly collect personal information from individuals who are below the applicable age required to provide valid consent in their jurisdiction.

If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorisation, please contact us immediately at:

info@aeonofficial.com

Where appropriate and legally required, we will take reasonable steps to delete the information.

11. THIRD-PARTY LINKS

Our website may contain links to third-party websites and platforms, including social-media platforms such as Instagram.

AEON does not control and is not responsible for the:

  • Content

  • Security

  • Availability

  • Data-processing activities

  • Privacy practices

of third-party websites or platforms.

We encourage you to review the privacy policy of each third-party website before providing personal information.

12. DATA SECURITY

We use reasonable technical, administrative, and organisational safeguards designed to protect personal information from:

  • Unauthorised access

  • Loss

  • Misuse

  • Alteration

  • Disclosure

  • Destruction

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping your account credentials confidential and for contacting us promptly if you believe that your account or personal information has been compromised.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business operations

  • Changes to our services or providers

  • Technical developments

  • Legal or regulatory requirements

  • Changes to how we process personal information

Any updated version will be published on this page with a revised Last updated date.

Where required by law, we will provide additional notice of material changes.

14. COMPLAINTS & CONTACT INFORMATION

For questions about this Privacy Policy, requests concerning your personal information, or complaints about how your information is handled, contact us at:

Email: info@aeonofficial.com
Location: Amsterdam, The Netherlands
Website: https://aeonofficial.com

We encourage you to contact us first so that we can review and attempt to resolve your concern.

You also have the right to lodge a complaint with the competent data-protection authority in your country of residence, place of work, or the location of the alleged infringement.

In The Netherlands, the supervisory authority is:

Autoriteit Persoonsgegevens (AP)
https://autoriteitpersoonsgegevens.nl