[P] Privacy
Your data.
Nothing more.
Functional storage for the storefront to work, privacy-preserving aggregated analytics, and nothing else. No tracking, no ad profiling, no third-party data sharing.
This site is in preview. Checkout is not yet open — personal data from orders (name, email, address) is collected only when ordering is enabled.
[S] Storage
Functional only.
The storefront uses two cookies and two local storage entries. All are functional — they exist to make the site work, not to track behaviour.
bb_cart_id cookie · 30 daysKeeps your cart connected between page views.
bb_last_order cookie · 1 hourHolds a brief order summary for the confirmation page.
theme localStorageRemembers your light or dark mode choice.
bb_cookie_notice localStorageRecords that you dismissed the storage notice.
Full details on purpose, duration, and type are on the Cookie Notes page.
[A] Analytics
Aggregated only.
This site uses Vercel Analytics, which measures aggregated page traffic. It does not use cookies, does not fingerprint devices, and does not create individual visitor profiles.
The data is used solely to understand which pages are visited. It cannot identify you and is not shared with advertisers or data brokers.
No other analytics platform, heatmap tool, or tracking script is active on this site. If that changes, this page will be updated before any new measurement tool is introduced.
[O] Orders
When you shop.
Checkout is not yet open. This section applies when ordering is enabled.
When you place an order, we collect the personal data needed to process and deliver it:
- Email address — order confirmation and customer contact path.
- Name and shipping address — delivery and legal distance-selling requirements.
- Payment data — processed by Stripe. We do not see or store card details.
Order data is retained as long as legally required under Dutch tax and commercial law (typically seven years for invoices). We do not use order data for marketing without a separate opt-in.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR).
[R] Rights
Your GDPR rights.
Under the GDPR (AVG), you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — request deletion where no legal retention obligation applies.
- Portability — receive your data in a structured, machine-readable format.
- Restriction — limit how we process your data in certain circumstances.
- Objection — object to processing based on legitimate interests.
For preview-data questions, email hello@brightnessbased.shop. The live operator must publish and own the formal rights-request process before checkout opens.
If you believe your rights have not been respected, you may lodge a complaint with the Autoriteit Persoonsgegevens.
[Q] Questions
Something unclear?
Questions about privacy or preview data — email hello@brightnessbased.shop.
Browse plants