Privacy Policy

The controller of your personal data is Van Lier Group FZCO, DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates ("Lio", "we"). Because we are established outside the EU, we have appointed Fresh@Work B.V., Jelle Zijlstraweg 128, 1689 ZX Zwaag, the Netherlands, as our representative in the European Union under Article 27 GDPR. You can contact us and our representative at support@breathelio.com.

• Contact and order data: name, shipping and billing address, email address, phone number, the products you buy and your order history.
• Payment data: payment method and transaction status. Card details are processed by our payment providers and never stored by us.
• Communication data: messages you send our support team, reviews and survey answers.
• Account data: login details and preferences if you create an account.
• Device and usage data: IP address, browser, device type, pages visited and how you got to our Website, collected through cookies and similar technologies (see our Cookie Policy).
• Marketing data: whether you opened our emails or clicked a link, if you subscribed.

We do not knowingly collect data from anyone under 18.

• To process and deliver your order, handle returns and refunds, and send service emails about your order. Basis: performance of a contract.
• To answer your questions and provide customer support. Basis: contract and our legitimate interest in helping you.
• To send newsletters, offers and text messages.Basis: your consent, which you can withdraw at any time via the unsubscribe link. Existing customers may receive emails about similar products based on our legitimate interest; you can opt out at any time.
• To show relevant advertising on platforms such as Meta, Google and TikTok, and to measure it. Basis: your consent via the cookie banner.
• To improve our Website and products through analytics. Basis: consent where cookies are required, otherwise legitimate interest.
• To prevent fraud and keep our Website secure.Basis: legitimate interest.
• To meet legal obligations such as tax and accounting rules. Basis: legal obligation.

We only share data with parties who need it to help us run Lio, and only under contracts that protect it:

• Shopify (our store platform) and our payment providers, such as Shopify Payments, PayPal and Klarna;
• Fresh@Work B.V. (warehouse and returns), carriers such as PostNL and local delivery partners, and Parcel Panel (order tracking);
• Klaviyo (email and text messages) and Zendesk (customer support);
• Meta, Google and TikTok for advertising and measurement, including the Meta pixel, Google Analytics and the TikTok pixel, only with your consent;
• Trustpilot, when we invite you to leave a review;
• our accountants, legal advisers and authorities where the law requires it.

We never sell your personal data.

Some of our service providers, and we ourselves, are located outside the European Economic Area, for example in the United Arab Emirates and the United States. Where a country does not have an adequacy decision from the European Commission, we protect your data with the European Commission's Standard Contractual Clauses or another lawful transfer mechanism. You can ask us for a copy.

• Order and invoice data: 7 years, because tax law requires it.
• Support conversations: up to 2 years after the last contact.
• Marketing data: until you unsubscribe, plus a short period to make sure we respect your choice.
• Account data: until you delete your account.
• Cookie data: see our Cookie Policy.

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable format and to withdraw any consent you gave, without affecting earlier processing. To use these rights, email support@breathelio.com. We may ask you to verify your identity and will respond within one month.

You also have the right to lodge a complaint with the data protection authority in your country, for example the Autoriteit Persoonsgegevens in the Netherlands.

We protect your data with appropriate technical and organisational measures, including encrypted connections, access controls and working only with reputable providers. No method is completely secure, so please use a strong password and keep your login details private.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our fraud-prevention tools may flag an order for manual review.

We may update this policy when our services or the law change. The latest version is always on this page, with the date it was last updated.