[P] Privacy

Your data.
Nothing more.

Functional storage for the storefront to work, privacy-preserving aggregated analytics, and nothing else. No tracking, no ad profiling, no third-party data sharing.

This site is in preview. Checkout is not yet open — personal data from orders (name, email, address) is collected only when ordering is enabled.

[S] Storage

Functional only.

The storefront uses two cookies and two local storage entries. All are functional — they exist to make the site work, not to track behaviour.

bb_cart_id

Keeps your cart connected between page views.

bb_last_order

Holds a brief order summary for the confirmation page.

theme

Remembers your light or dark mode choice.

bb_cookie_notice

Records that you dismissed the storage notice.

Full details on purpose, duration, and type are on the Cookie Notes page.

[A] Analytics

Aggregated only.

This site uses Vercel Analytics, which measures aggregated page traffic. It does not use cookies, does not fingerprint devices, and does not create individual visitor profiles.

The data is used solely to understand which pages are visited. It cannot identify you and is not shared with advertisers or data brokers.

No other analytics platform, heatmap tool, or tracking script is active on this site. If that changes, this page will be updated before any new measurement tool is introduced.

[O] Orders

When you shop.

Checkout is not yet open. This section applies when ordering is enabled.

When you place an order, we collect the personal data needed to process and deliver it:

  • Email address — order confirmation and customer contact path.
  • Name and shipping address — delivery and legal distance-selling requirements.
  • Payment data — processed by Stripe. We do not see or store card details.

Order data is retained as long as legally required under Dutch tax and commercial law (typically seven years for invoices). We do not use order data for marketing without a separate opt-in.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR).

[R] Rights

Your GDPR rights.

Under the GDPR (AVG), you have the right to:

  • Access — request a copy of the data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion where no legal retention obligation applies.
  • Portability — receive your data in a structured, machine-readable format.
  • Restriction — limit how we process your data in certain circumstances.
  • Objection — object to processing based on legitimate interests.

For preview-data questions, email hello@brightnessbased.shop. The live operator must publish and own the formal rights-request process before checkout opens.

If you believe your rights have not been respected, you may lodge a complaint with the Autoriteit Persoonsgegevens.

[Q] Questions

Something unclear?

Questions about privacy or preview data — email hello@brightnessbased.shop.

Browse plants