Legal
Privacy Policy
Effective date: 19 May 2026. This policy is a GDPR-oriented template for Essentialshub.eu. Replace every bracketed placeholder with verified business details before publishing.
1. Scope
This Privacy Policy explains how Essentialshub.eu collects and uses personal data when you visit the website, contact us, request a catalogue, create an account, place an order, subscribe to updates, or exercise privacy rights.
If the live site later adds checkout, payment, analytics, advertising, account, review, or fulfilment tools, this policy must be updated to match those real services and data flows.
2. Personal data, purposes, lawful bases, and retention
| Purpose | Data used | Lawful basis | Typical retention |
|---|---|---|---|
| Website operation and security | IP address, device/browser data, pages requested, timestamps, security logs. | Legitimate interests in running, securing, and improving the website; legal obligations where applicable. | Normally up to 12 months unless needed longer for security, fraud prevention, disputes, or legal duties. |
| Catalogue enquiries and customer support | Name, email, message content, interest area, correspondence history. | Steps before a contract, contract performance, and legitimate interests in responding to enquiries. | Up to 24 months after the last contact unless a longer period is needed for an order, dispute, or legal duty. |
| Orders, fulfilment, payments, and returns | Identity, contact details, billing/shipping address, order details, payment status, refund and return records. | Contract performance; legal obligations for accounting, tax, product safety, and consumer rights. | For the account/order lifecycle and then as required by applicable tax, accounting, warranty, and limitation laws. |
| Newsletter and promotional updates | Email address, consent record, preferences, unsubscribe status. | Consent, or soft opt-in rules where legally available and properly implemented. | Until you withdraw consent or unsubscribe, plus a suppression record to respect the opt-out. |
| Cookie preferences | Consent choices stored in your browser. | Consent for optional categories; legitimate interests/strict necessity for remembering your preference. | Stored locally for up to 6 months, or until you clear browser storage or change preferences. |
| GDPR rights requests | Identity verification details, request content, response records. | Legal obligation and legitimate interests in documenting compliance. | Normally up to 6 years where needed to show how a request was handled. |
3. Recipients and processors
Personal data may be shared with service providers that help operate the website and business, including hosting providers, email providers, payment processors, fraud prevention tools, delivery partners, customer support systems, professional advisers, and public authorities where required by law.
Processors must only process personal data under documented instructions and appropriate contractual safeguards. Do not add a third-party service to the live site unless it is reflected in this policy and covered by the required data processing terms.
4. International transfers
If personal data is transferred outside the European Economic Area, Essentialshub.eu will rely on an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism, and will apply supplementary measures where required.
5. Your GDPR rights
Depending on the situation, you may have the right to be informed, access your data, rectify inaccurate data, erase data, restrict processing, receive data portability, object to processing, withdraw consent, and avoid decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise these rights, email privacy@essentialshub.eu or use the GDPR Rights page. You may also lodge a complaint with your local data protection authority.
6. Cookies and similar technologies
The current static site does not load analytics or marketing scripts by default. It uses local browser storage only to remember cookie preferences. See the Cookie Policy and use to change your choice.
7. Security, children, and changes
Essentialshub.eu uses appropriate technical and organisational measures to protect personal data. The service is not directed to children, and children should not provide personal data without parental or guardian involvement where required by local law.
We may update this policy when services, laws, or data flows change. Material updates should be signposted clearly and dated.