Privacy policy
Privacy Policy
Last updated: June 11, 2026
LRS ECOM B.V. (hereinafter "Seroa", "we" or "our") attaches the utmost importance to protecting your personal data. This privacy policy describes how we collect, use, store and protect your information when you visit seroa.fr, place an order or interact with our customer service team.
We process your personal data in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and applicable national laws.
1. Data controller
- Company name: LRS ECOM B.V.
- VAT number: NL867774125B01
- KVK number: 96816031
- Address: Bertha van Moerdregtpad 22, 2841 SR Moordrecht, Netherlands
- Email: support@seroa.fr
- Telephone: +31 6 20081625
- Hours: Monday - Friday 9:00 a.m. - 5:00 p.m. (CET)
2. Personal data collected
We collect the following categories of data:
- Identification data: surname, first name.
- Contact data: email address, telephone number, postal address.
- Order data: items ordered, prices, purchase history, returns.
- Payment data: processed directly by our payment provider (Shopify Payments, PayPal, Klarna). We never store your complete banking details on our servers.
- Technical data: IP address, browser type, operating system, pages viewed, visit duration, source of the visit.
- Communication data: content of your communications with our customer service team (email, contact form).
- Marketing data: communication preferences, email opening history (if you have consented to receive our communications).
3. Purposes and legal bases for processing
In accordance with Article 6 of the GDPR, we process your data for the following purposes:
- Performance of a contract (Art. 6(1)(b)): processing and delivering your order, managing returns and refunds, communicating about your order.
- Legal obligations (Art. 6(1)(c)): retaining invoices and accounting documents, combating fraud, responding to competent authorities.
- Consent (Art. 6(1)(a)): sending marketing communications (newsletter, promotions), placing non-essential cookies, sharing data with marketing partners.
- Legitimate interest (Art. 6(1)(f)): improving our website and services, securing the online store, preventing fraud, anonymized statistical analyses.
4. Retention periods
- Order data: 10 years from the last transaction (accounting and tax obligations).
- Customer account data: until your account is deleted or after 3 years of inactivity.
- Marketing data: until you withdraw your consent or 3 years after the last contact.
- Cookies: up to 13 months.
- Technical logs: 12 months.
- Customer service data: 3 years after the last interaction.
5. Recipients and processors
Your information may be shared with the following categories of recipients and processors. This list is not exhaustive and may be updated as we add or remove services:
Platform and payment
- Shopify Inc. - online store hosting, order management, payment processing (Shopify Payments).
- Payment service providers: PayPal, Shop Pay, Apple Pay, Google Pay, and other payment gateways used at checkout.
- TrackiPal: automatic synchronization of PayPal transactions and tracking numbers.
- Disputely / Chargeflow: chargeback and payment dispute management.
Email and SMS marketing
- Klaviyo: email and SMS marketing and segmentation (only with your consent).
- SMSGo: abandoned cart recovery by SMS (only with your consent).
- Yotpo: email and SMS campaigns, customer reviews.
- Aftersell: post-purchase upselling and follow-up campaigns.
Analytics, attribution, and user behavior
- Google Analytics / Google Ads: traffic analytics and advertising (only with cookie consent).
- Microsoft Clarity: session recordings and heatmaps to improve the user experience (UX) (only with cookie consent).
- Propel Replays & Heatmaps: session recordings and user behavior analysis.
- TrackBee: multi-channel marketing attribution and analytics.
- wetracked.io : conversion tracking and advertising attribution.
Advertising and sales channels
- Meta (Facebook, Instagram): targeted advertising and social commerce (only with cookie consent).
- Google & YouTube: Shopping ads and video campaigns (only with cookie consent).
- Pinterest: advertising and product pins.
- Microsoft Advertising: Bing ads.
Customer service
- Help Scout: management of customer inquiries and support tickets.
- SmartBot / Jack AI: AI-powered assistance with customer communications.
- Shopify Inbox: live chat with customer service.
Logistics and delivery
- International carriers - for delivery of your order.
- ParcelWILL (Parcel Panel): parcel tracking and delivery notifications.
Public authorities - where required by law (tax authorities, judicial authorities).
All our processors are contractually required to respect the confidentiality of your data and to process it only on our instructions, in accordance with Art. 28 of the GDPR.
6. International data transfers
Some of our processors (Shopify, Google, Meta, Klaviyo) are located outside the European Union, primarily in the United States. In this case, the transfer is governed by:
- the EU-U.S. Data Privacy Framework (DPF) for certified providers;
- the Standard Contractual Clauses approved by the European Commission;
- additional safeguards (encryption, technical and organizational measures).
7. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
- Right of access (Art. 15) - obtain a copy of the data concerning you.
- Right to rectification (Art. 16) - correct inaccurate or incomplete data.
- Right to erasure (Art. 17) - request the deletion of your data ("right to be forgotten").
- Right to restriction of processing (Art. 18) - restrict the use of your data.
- Right to data portability (Art. 20) - receive your data in a structured format.
- Right to object (Art. 21) - object to processing for direct marketing purposes or on legitimate grounds.
- Right to withdraw your consent at any time, without affecting the lawfulness of prior processing.
- Right to establish directives concerning the handling of your data after your death.
To exercise these rights, contact us at support@seroa.fr. We will respond within one month (extendable to three months in the case of a complex request).
8. Complaint to a supervisory authority
If you believe that the processing of your personal data does not comply with the GDPR, you may lodge a complaint with the supervisory authority in your country of residence:
- France: CNIL - www.cnil.fr
- Belgium: Data Protection Authority - www.autoriteprotectiondonnees.be
- Germany: BfDI - www.bfdi.bund.de
- Austria: DSB - www.dsb.gv.at
- Poland: UODO - www.uodo.gov.pl
- Czech Republic: ÚOOÚ - www.uoou.cz
- Denmark: Datatilsynet - www.datatilsynet.dk
- Spain: AEPD - www.aepd.es
- Romania: ANSPDCP - www.dataprotection.ro
- Netherlands: Autoriteit Persoonsgegevens - www.autoriteitpersoonsgegevens.nl
9. Data security
We implement appropriate technical and organizational measures to protect your data:
- SSL/TLS encryption across the entire website and checkout process.
- Encrypted storage (AES-256) of sensitive data.
- PCI-DSS compliance for payment processing via Shopify Payments.
- Strict access control to customer data.
- Regular backups and a continuity plan.
- Notification of a data breach within 72 hours to the competent authorities and affected individuals, in accordance with Article 33 of the GDPR.
10. Cookies and similar technologies
Our website uses cookies to ensure the store functions properly, measure traffic, and personalize your experience. On your first visit, a banner allows you to accept, reject, or customize your preferences. You can change your choices at any time via your browser settings or by resetting the banner on our website.
Categories of cookies used:
- Strictly necessary cookies - cart, session, security (no consent required).
- Analytics cookies - Google Analytics (with consent).
- Marketing cookies - Google Ads, Pinterest, Klaviyo (with consent).
11. Minors
Our services are not intended for people under 16 years of age. We do not knowingly collect personal data concerning minors. If you believe that a minor has provided us with their data, contact us at support@seroa.fr and we will delete it.
12. Marketing and communications
We send marketing emails (newsletters, promotions, new products) only to people who have given their explicit consent. You can unsubscribe at any time:
- by clicking the "unsubscribe" link included in each email;
- by writing to us at support@seroa.fr;
- by changing your preferences in your customer account.
13. Changes to this policy
We reserve the right to modify this privacy policy at any time to adapt it to legal, technical, or business developments. Any significant changes will be announced on this page and, where applicable, by email. The date of the last update is shown at the top of the document.
14. Related documents
- Terms and Conditions of Sale
- Shipping Policy
- Return Policy
- Your privacy choices (CCPA for U.S. residents)
15. Contact
For any questions relating to this policy or the processing of your personal data:
- Email: support@seroa.fr
- Phone: +31 6 20081625 (Mon-Fri 9 a.m.-5 p.m. CET)
- Address: LRS ECOM B.V., Bertha van Moerdregtpad 22, 2841 SR Moordrecht, Netherlands





























