Privacy Statement — BYLIMA B.V.

In this privacy statement we explain how BYLIMA B.V. processes your personal data. Personal data means any information relating to an identified or identifiable natural person (“data subject”), such as your name, address, email address, telephone number and order details. This privacy statement applies to the processing of personal data of visitors to our website, customers, newsletter subscribers and individuals who contact us. Statistical or analytical data that cannot be directly linked to you as a person is not considered personal data.

Legal grounds & consent

We process personal data only when this is:

• necessary for the performance of an agreement;

• required by law;

• based on a legitimate interest; or

• based on your consent.

Where processing is based on consent, you may withdraw this consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal or processing based on a legitimate interest.

Contact details

BYLIMA B.V.

Willemsplein 2

5211AK Den Bosch

The Netherlands

T: (085) 060-8048

E: info@bylima.nl

Contact person for privacy matters: Salima Tarzati

Article 1 — What personal data does BYLIMA process?

Website visitors & customers

Contact

When you contact us via email, contact forms or other communication channels, we may process your:

• name;

• email address;

• telephone number;

• message content.

This data is used solely to respond to your request and provide customer service.

Orders & delivery

To process and deliver your order, we process:

• name and address details;

• email address;

• telephone number (if required for delivery);

• payment and transaction information;

• order history, returns and exchanges.

Your email address is used for order confirmations, shipping updates and handling returns.

Customer account

If you create a customer account, we process your email address and login credentials. Through your account you can view and manage your personal data. Accounts are protected with appropriate technical security measures.Newsletter & marketing communication You may subscribe to our newsletter to receive updates, inspiration and offers. Subscription is voluntary and confirmed via a double opt-in. You can unsubscribe at any time via the link included in each email. After unsubscribing, your data will be deleted within a reasonable period, unless retention is required for another lawful purpose.

Reviews

After placing an order, you may be invited to leave a review. For this purpose, we may process your name, email address and order reference to verify authenticity and prevent misuse. Your email address is never displayed publicly.

Article 2 — Purpose of processing

We process personal data for the following purposes:

• fulfilling and delivering orders;

• processing payments and returns;

• providing customer service;

• managing customer accounts;

• sending service-related communications;

• sending marketing communications (with consent where required);

• improving our website and services through analytics;

• preventing fraud and misuse;

• complying with legal and tax obligations.

Article 3 — Fraud prevention

BYLIMA may process personal data to detect and prevent fraudulent or unusual activity, such as abnormal ordering behavior. This processing is based on our legitimate interest to protect customers and our business.

Article 4 — Cookies & analytics

When you visit our website, we collect certain technical data via cookies and similar technologies, such as:

• IP address;

• browser type and device information;

• visited pages and interaction data.

Cookies are used to:

• ensure website functionality;

• analyze website performance;

• improve user experience.

Where required, consent is requested via our cookie banner. You can manage or delete cookies through your browser settings. Disabling cookies may affect website functionality.

Article 5 — Sharing personal data with third parties

We do not sell your personal data. We may share personal data with trusted third parties where necessary, such as:

• webshop and hosting providers;

• payment service providers;

• delivery partners;

• newsletter and email platforms;

• review platforms;

• IT and support service providers.

All third parties are contractually required to protect your data and process it in accordance with applicable data protection laws. If personal data is transferred outside the European Union, appropriate safeguards are applied, such as EU Standard Contractual Clauses.Article 6 — Retention periods Personal data is not stored longer than necessary for the purposes for which it is processed, unless a longer retention period is required by law (for example, accounting and tax obligations).

Article 7 — Your rights

You have the right to:

• access your personal data;

• correct inaccurate or incomplete data;

• request deletion of your data where legally permitted;

• restrict processing in certain circumstances;

• object to processing based on legitimate interest;

• request data portability where applicable.

Requests can be submitted via info@bylima.nl.

We will respond within one month, unless an extension is legally permitted.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit

Persoonsgegevens).

Article 8 — Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access or disclosure. Access to personal data is limited to authorised personnel only.

Article 9 — Children

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children.

Article 10 — Changes to this privacy statement

BYLIMA may update this privacy statement from time to time. The most recent version will always be available on our website.