Privacy Policy

Last updated: 21 July 2026

ABEL B.V., trading under the name ExoticsAtHome, processes personal data when you visit our website, use an account, place an order, contact us or use our other services.

This Privacy Policy explains which personal data we process, why we process it, with whom we share it, how long we retain it and which rights you have.

1. Data controller

The data controller responsible for the processing activities described in this Privacy Policy is:

ABEL B.V.
Trading under the name ExoticsAtHome
Baron van Dedemlaan 9
7701 HT Dedemsvaart
Overijssel
The Netherlands

Chamber of Commerce number: 80612849
VAT identification number: NL861735948B01
Email: info@exoticsathome.com
Telephone: +31 6 20 63 74 66
Website: www.exoticsathome.com

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at info@exoticsathome.com.

2. Which personal data do we process?

The personal data we process depends on how you use our website and services.

We may process the following categories of personal data:

first and last name;
billing address and delivery address;
city and country of residence;
email address;
telephone number;
account and login details;
company name and VAT number;
order details, such as the products ordered, quantities, prices and order number;
invoice details;
payment method, payment status and transaction details;
shipping details and Track & Trace information;
information contained in contact, return and withdrawal requests;
correspondence with our customer service;
photographs, documents or other evidence you provide in connection with a report or claim;
newsletter preferences;
IP address;
browser, device and technical information;
information about your use of our website;
cookie preferences and information collected through cookies and similar technologies.

In principle, we do not process special categories of personal data, such as medical information. We therefore ask you not to include special categories of personal data or other unnecessary personal data in messages, free-text fields or attachments.

3. How do we obtain your personal data?

We receive personal data:

directly from you, for example when you create an account, place an order or contact us;
automatically when you use our website, for example through cookies, log files and similar technologies;
from parties involved in your order, payment or delivery, such as payment service providers and carriers;
from Trusted Shops when you use Trusted Shops services or submit a review.

4. Why do we process personal data?

We process personal data only where there is a valid legal basis for doing so.

4.1 Creating and managing an account

An account may be required to place and manage orders. We process your account information in order to:

create and secure your account;
enable you to log in;
manage your personal information and addresses;
make your orders and invoices available to you;
link returns and other requests to your order.

This processing is necessary for the performance of a contract or in order to take steps at your request before entering into a contract.

4.2 Processing orders

When you place an order, we process personal data in order to:

register your order;
perform our agreement with you;
prepare the ordered products;
send order and shipping confirmations;
deliver the order;
answer questions about the order;
process cancellations, returns and refunds.

The legal basis for this processing is the performance of the contract.

4.3 Payments and refunds

To process and verify payments, we process information including your order number, the payment amount, payment status and selected payment method.

Full bank or credit card details are generally processed directly by the relevant payment service provider and are not fully visible to ExoticsAtHome.

This processing is necessary for the performance of the contract. Data may also be processed to prevent fraud, misuse and unlawful payments. This is based on our legitimate interest in maintaining a secure payment process or on compliance with a legal obligation.

Payment service providers may act as independent data controllers for their own processing activities. In that case, their own privacy policies also apply.

4.4 Shipping and delivery

We share the information required for delivery with DPD or, where an order is shipped outside the regular delivery area by another carrier at the customer’s request, with that other carrier.

This may include:

your name;
your delivery address;
your email address;
your telephone number;
the parcel number;
necessary order and shipping information.

This information is used for shipping, delivery, Track & Trace and delivery notifications. The legal basis for this processing is the performance of the contract.

4.5 Customer service and contact

When you contact us, we process the information necessary to:

answer your question or request;
verify your identity, account or order;
investigate a complaint or problem;
record arrangements and correspondence;
improve our services.

Depending on the situation, the legal basis is the performance of the contract, taking steps at your request or our legitimate interest in providing proper customer service and maintaining accurate records.

4.6 Returns, withdrawals and delivery problems

When you report a return, withdrawal or delivery problem, we may process your contact details, order details, explanation and any photographs, documents or other evidence you provide.

We use this information to:

handle your report or request;
determine what happened to an order or delivery;
communicate with you and the service providers involved;
issue a refund, provide a replacement or arrange another solution;
prevent misuse and unjustified claims;
protect our legal position;
comply with legal obligations.

The legal basis is the performance of the contract, compliance with a legal obligation or our legitimate interest in maintaining evidence, preventing fraud and protecting our legal position.

We ask you to provide only evidence that is necessary for handling your report.

4.7 Administration and legal obligations

We process and retain certain personal data to comply with tax, accounting and other legal obligations. This includes information contained in orders, invoices, credit notes and payment records.

The legal basis for this processing is compliance with a legal obligation.

4.8 Newsletter and commercial communications

When you subscribe to our newsletter, we use your email address and any stated preferences to send you information about ExoticsAtHome products, offers and news.

Where consent is required, we send these messages only after you have given your consent. You may unsubscribe at any time using the unsubscribe link in the email or by contacting info@exoticsathome.com.

Withdrawing your consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

Where permitted by law, we may inform existing customers about our own similar products without obtaining separate consent. Every such message will contain a clear and free way to unsubscribe.

4.9 Trusted Shops

Our website uses Trusted Shops services for:

displaying the Trusted Shops trustmark;
collecting and displaying customer reviews;
offering buyer protection;
sending invitations to submit customer reviews.

To verify whether you are registered for Trusted Shops services and to enable buyer protection or review invitations, information may be transferred to Trusted Shops.

Depending on the service used, this may include:

your email address;
your name;
the order number;
the time of the order;
the order value;
the products purchased;
other information necessary for the selected service.

If you are already registered for Trusted Shops services, the processing may be necessary for the performance of your agreement with Trusted Shops.

Where a review invitation cannot be based on an existing agreement with Trusted Shops, your information will be processed for this purpose only if you have given your consent or another valid legal basis applies.

ExoticsAtHome and Trusted Shops may be joint controllers when sending review invitations. Trusted Shops is independently responsible for the services it provides on its own behalf, and the Trusted Shops Privacy Policy applies to those services.

4.10 Security and fraud prevention

We may process personal data in order to:

secure our website and accounts;
detect fraud, misuse and unauthorised access;
investigate technical errors and security incidents;
protect our rights and those of our customers;
prevent or handle legal disputes.

The legal basis is our legitimate interest in operating a secure online shop, providing reliable services and protecting our legal position.

4.11 Website analysis and improvement

We may process information about the use of our website in order to:

monitor the operation of the website;
identify technical errors;
understand how pages and functions are used;
improve the website and our services;
measure transactions and campaign performance.

Depending on the technology used, the legal basis is your consent or our legitimate interest, where processing without consent is permitted by law.

5. Required provision of information

We require certain personal data to create an account and to enter into and perform a contract.

If you do not provide the required information, we may be unable to:

create an account for you;
process your order;
process a payment or refund;
deliver your order;
handle your question, return or complaint.

Information that is not required will be marked as optional or does not need to be provided.

6. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small data files that may be stored on or read from your device through your browser.

Functional cookies

Functional cookies are necessary for the website and online shop to operate correctly. They are used, for example, for:

the shopping basket;
logging in to and securing accounts;
language and other preferences;
the ordering process;
remembering your cookie choices.

Prior consent is not required for strictly necessary cookies.

Analytical cookies

Analytical cookies help us understand how visitors use our website. This allows us to improve the operation, content and usability of the website.

Where consent is required, these cookies will be placed or read only after you have given your consent.

Marketing and tracking cookies

Marketing and tracking cookies may be used to measure visitor behaviour, analyse campaigns and better tailor advertisements.

These cookies are used only after you have given your consent, insofar as consent is legally required.

Google Ads was not active when this Privacy Policy was last updated. If we activate Google Ads or another new advertising service, we will update the information concerning the relevant processing activities.

Changing your cookie preferences

During your first visit, you can set your preferences through the cookie notification. You can subsequently change or withdraw your choice through the cookie settings on our website.

You can also delete or block cookies through your browser. This may prevent certain website functions from operating correctly.

7. Google Analytics and Google Tag Manager

We use Google Analytics 4 to understand how our website is used and to improve the website and our services.

The following information may be processed:

IP and technical information;
device type and browser;
pages visited;
duration of use;
general location information;
traffic source;
actions performed on the website;
purchase and transaction information, without full payment details.

Google Tag Manager is used to technically manage measurement codes and other tags. The information processed depends on the tags activated through Google Tag Manager.

We use Google Consent Mode V2 to communicate your cookie choices to the Google services we use and to adjust the operation of tags accordingly.

Where consent is required, analytical or marketing-related storage and processing are used only in accordance with your cookie choices. You can change or withdraw your consent through the cookie settings.

8. With whom do we share personal data?

We do not sell your personal data.

We may share personal data with parties required for our business operations and services, including:

CCV Shop for the technical operation and hosting of the online shop;
CCV Online Payments and the relevant payment service providers for payments and refunds;
DPD and any other carriers used to deliver orders;
Trusted Shops for the trustmark, customer reviews, buyer protection and review invitations;
Google for website analysis and tag management;
IT, hosting, security and maintenance service providers;
administrative service providers, accountants and professional advisers;
public authorities and supervisory authorities where we are legally required to provide information;
parties involved in a legal dispute where necessary for the establishment, exercise or defence of legal claims.

Depending on their activities, these parties may act as processors, independent data controllers or joint controllers.

We enter into appropriate arrangements concerning privacy, security and confidentiality with parties that process personal data exclusively on our behalf.

9. Transfers outside the European Economic Area

Some service providers or their subcontractors may process personal data outside the European Economic Area.

Where personal data is transferred to a country for which the European Commission has not adopted an adequacy decision, a valid transfer mechanism must be used. This may include Standard Contractual Clauses approved by the European Commission and, where necessary, additional security measures.

Where a service provider is covered by a valid adequacy mechanism, the transfer may be based on that mechanism.

10. Retention periods

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless a legal obligation or legitimate reason requires a longer retention period.

We apply the following principles:

account information is retained for as long as the account remains active;
after an account is deleted, information is erased or anonymised unless we still require it for a legal obligation, contract or legal claim;
basic tax records, including relevant invoice and payment information, are generally retained for seven years;
information covered by the European Union’s One Stop Shop scheme is retained for ten years after the end of the year to which it relates;
customer service messages, complaints, return information, delivery problems and evidence are retained for as long as necessary for their handling, evidence and any legal claims;
general correspondence is deleted when it is no longer required;
newsletter information is retained until you unsubscribe or the newsletter service is discontinued;
cookie and analytics information is retained in accordance with the retention period configured for the relevant cookie or service;
information relevant to a dispute or potential legal claim may be retained for as long as reasonably necessary for that purpose.

Where information forms part of records that we are legally required to retain, we may be unable to delete it immediately when you close your account or submit a deletion request.

11. Security of personal data

We take appropriate technical and organisational measures to protect personal data against:

loss;
misuse;
unauthorised access;
unauthorised alteration;
accidental disclosure;
destruction;
other forms of unlawful processing.

These measures are tailored to the nature of the information, the processing activities and the potential risks.

12. Automated decision-making

ExoticsAtHome does not make decisions based solely on automated processing that have legal effects on you or otherwise significantly affect you.

Automated checks may be used for security, fraud prevention, payments and website analysis. Where an external payment service provider independently carries out automated checks, for example for payment acceptance or fraud prevention, that party is responsible for the relevant processing.

13. Your privacy rights

To the extent permitted by the GDPR in your situation, you have the right to:

receive information about the processing of your personal data;
access your personal data;
have inaccurate or incomplete information corrected;
have your personal data erased;
restrict the processing of your personal data;
object to processing based on a legitimate interest;
object to direct marketing;
withdraw your consent at any time;
receive certain personal data in a portable format;
not be subject to decisions based solely on automated processing that have significant consequences.

You may submit a request by emailing info@exoticsathome.com. Please clearly state which right and which information your request concerns.

You may also call us about your request. To ensure that it is handled securely and correctly, we may ask you to confirm the request in writing by email.

To prevent personal data from being disclosed to the wrong person, we may ask you to verify your identity in an appropriate manner. We will not request more information than necessary.

We generally respond within one month. If a request is complex or we receive a large number of requests, this period may be extended in accordance with the GDPR. We will inform you of the extension and the reason for it in due time.

Your rights are not absolute in every situation. We may reject a request in whole or in part where, for example, we must retain information due to a legal obligation, an ongoing contract or a legal claim. We will explain any rejection to you.

14. Objection to direct marketing

You may object to the use of your personal data for direct marketing at any time.

You can unsubscribe from newsletters using the unsubscribe link. You can also unsubscribe by emailing info@exoticsathome.com.

After you unsubscribe, we may retain your email address on a limited suppression list to prevent you from unintentionally receiving commercial communications again.

15. Minors

Our website and services are not specifically intended for children under the age of sixteen. We do not knowingly process children’s personal data without valid consent from a parent or legal representative where such consent is required by law.

If you believe that we are processing a minor’s personal data without valid consent, please contact us at info@exoticsathome.com.

16. Links to third-party websites

Our website may contain links to third-party websites or services. When you leave our website through such a link, the third party’s privacy policy may apply.

ExoticsAtHome is not responsible for the content, security or data processing practices of external websites that we do not control.

17. Submitting a complaint

If you have a question or complaint about the processing of your personal data, please contact us at info@exoticsathome.com, so that we can investigate your question or complaint.

You also have the right to submit a complaint to the Dutch supervisory authority:

Dutch Data Protection Authority
Website: www.autoriteitpersoonsgegevens.nl

18. Changes to this Privacy Policy

We may amend this Privacy Policy when our website, services, service providers or legal obligations change.

The most recent version will be published on our website. The date on which the Privacy Policy was last updated is stated at the top of this page. In the event of significant changes, we will provide additional information where appropriate or legally required.