Privacy Policy
Last updated: 20th September, 2025
1. Who we are
We are Niva Home B.V., trading as Huis Van Mango, a company registered in the Netherlands (KvK 98161202).
Address: Posthoornstraat 11, 3011WD,Rotterdam, Netherlands
Email: hello@huisvanmango.nl
We are the data controller for personal data collected through our website.
2. What personal data we collect
| Data | Why we collect it | Legal basis |
|---|---|---|
| Name, shipping & billing address, phone, email | Process and deliver orders, customer support | Contract |
| Payment info (via secure processors) | Take payment, issue refunds | Contract / Legal obligation |
| Account login (optional) | Manage your orders and preferences | Contract |
| IP address, browser/ device data | Site security, troubleshooting, analytics | Legitimate interest (or consent for tracking) |
| Chat data (messages, name, email entered in Tidio) | Provide real-time support | Legitimate interest or consent |
3. How long we keep data
- Order & billing records: 7 years (tax law).
- Account data: while your account is active or 3 years after last order.
- Chat transcripts: [INSERT RETENTION PERIOD for Tidio, e.g., 6–12 months].
- Analytics/tracking: up to 12 months, unless you withdraw consent earlier.
4. Sharing your data
We only share data where needed:
- Shopify (hosting/platform)
- Payment & delivery providers
- Tidio (live-chat provider) — processes chat content & technical data on our behalf (DPA in place)
- Analytics & advertising services (if you consent to cookies)
- Public authorities if legally required
We never sell your personal data.
5. International transfers
If data is transferred outside the EEA (e.g., by Shopify, Tidio, or analytics providers), we ensure safeguards such as EU Standard Contractual Clauses or adequacy decisions.
6. Your rights (GDPR)
You can:
- Access, correct or erase your data
- Restrict or object to processing (including marketing)
- Request data portability
- Withdraw consent at any time
- Contact hello@huisvanmango.nl to exercise these rights. You may also complain to the Autoriteit Persoonsgegevens (NL) or the Gegevensbeschermingsautoriteit (BE).
7. Security
We use appropriate technical and organisational measures to protect data against loss, misuse, or unauthorised access.
8. Children
Our services are not aimed at children under 16. We do not knowingly collect their data.
9. Changes to this policy
We may update our Privacy Policy as our services or the law change. The latest version will always be on our website.

