Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains how SonielSupply collects, uses, shares and protects your personal data when you visit our online store, place an order, or otherwise interact with us. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Luxembourg data protection law.

1. Who we are (Data Controller)

The controller responsible for your personal data is:

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

  • Identity and contact data: your name, billing and shipping address, email address and telephone number.
  • Order and transaction data: details of the products you purchase, order history, and payment information (processed securely by our payment providers; we do not store full card details).
  • Account data: login credentials and preferences if you create an account.
  • Communications: messages you send us, including customer service enquiries and marketing preferences.
  • Device and usage data: IP address, browser type, device information, pages viewed and how you use our website.
  • Cookies and similar technologies: information collected through cookies and similar tracking technologies (see section 6).

3. How we use your data and our legal bases

We only process your personal data where we have a valid legal basis under the GDPR. The main purposes and legal bases are:

  • To fulfil your order — process purchases, arrange delivery, handle returns and provide customer support. Legal basis: performance of a contract with you.
  • To send marketing communications — newsletters, promotions and offers by email or SMS. Legal basis: your consent, which you may withdraw at any time.
  • To prevent fraud and ensure security — verify transactions and protect our store and customers. Legal basis: our legitimate interests and, where applicable, compliance with a legal obligation.
  • To comply with the law — meet accounting, tax and other legal requirements. Legal basis: compliance with a legal obligation.
  • To improve our website and services — analyse usage and enhance your experience. Legal basis: your consent (for non-essential cookies) and/or our legitimate interests.

4. Who we share your data with

We do not sell your personal data. We share it only with trusted parties who help us operate our business, and only to the extent necessary:

  • Shopify — our e-commerce platform provider, which hosts our store and processes order and customer data on our behalf.
  • CJ Dropshipping — our fulfilment supplier, which receives your name and shipping address in order to pack and ship your order.
  • Payment providers — to process payments securely.
  • Analytics and advertising partners — such as Meta (Facebook and Instagram) and similar services, to measure and improve our marketing, where you have consented.
  • Email and SMS service providers — to send you transactional and, where you have consented, marketing messages.
  • Professional advisers and authorities — where required by law or to protect our legal rights.

5. International data transfers

Some of our service providers and suppliers are located outside the European Economic Area (EEA), including CJ Dropshipping and certain analytics and advertising partners. Where your personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data continues to receive an adequate level of protection.

6. Cookies and consent

We use cookies and similar technologies to make our website work, to remember your preferences, and — with your consent — for analytics and advertising. You can manage your cookie preferences and consent at any time through the cookie/consent settings on our website. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

7. How long we keep your data

We retain your personal data only for as long as necessary for the purposes described in this policy. Order and transaction records are generally kept for the period required to meet legal, accounting and tax obligations. Marketing data is kept until you withdraw your consent or object. When your data is no longer needed, we securely delete or anonymise it.

8. Your rights under the GDPR

Subject to the conditions set out in the GDPR, you have the following rights in relation to your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data in certain circumstances.
  • Restriction — ask us to limit how we process your data.
  • Portability — receive your data in a structured, commonly used and machine-readable format.
  • Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
  • Withdraw consent — withdraw any consent you have given, at any time.

To exercise any of these rights, please contact us at info@sonielsupply.com. We will respond within the timeframes required by law.

9. Right to lodge a complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), or with the supervisory authority in your country of residence.

10. Children's data

Our store is intended for adults and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last revised. We encourage you to review it periodically.

12. Contact us

If you have any questions, requests or concerns about this Privacy Policy or your personal data, please contact us: