Privacy and cookie policy
Version 27 October 2026
Who is responsible?
Laserpointeronline.co.uk (trade name), Zuidoever 7, 2371 JD Roelofarendsveen, Nederland, Chamber of Commerce (KvK) 55358365, is the controller responsible for processing your personal data as described in this policy. Questions? Email support@starlightlasers.eu.
What data do we process and why?
| Data | Purpose | Legal basis |
|---|---|---|
| Name, address, email, telephone number, order, payment status | Processing, shipping and taking payment for your order, keeping you informed about your order | Performance of the contract |
| Company name, Chamber of Commerce (KvK) and VAT number (business orders) | Issuing a valid invoice and verifying the business | Contract and legal obligation |
| Invoices and order data | Our accounts | Statutory (tax) retention obligation |
| Account details (password stored encrypted) | Viewing your account, orders and returns | Performance of the contract |
| Messages to customer service, chat conversations, return requests | Answering your questions, handling returns and warranty claims | Contract and legitimate interest |
| Email address entered at checkout without completing an order | Sending one or two reminders that your order is still open (you can always unsubscribe) | Legitimate interest |
| IP address, device and browser data | Website security, fraud prevention, fixing errors | Legitimate interest |
| Browsing behaviour on the website, where your visit came from, ad clicks | Statistics, improving the website and measuring advertising | Only with your consent (cookies) |
We do not use your data for automated decisions that significantly affect you, and we never sell your data.
Who do we share data with?
We only share what is necessary, with parties that work for us (processors) or that we need in order to fulfil your order:
- Payment service providers (Mollie, Buckaroo) for processing your payment.
- PostNL for delivering your parcel.
- Hosting and technology: our server in the EU, Cloudflare (security and speed), Amazon Web Services in Frankfurt (sending and receiving email) and Sentry (error reporting).
- Chat assistant: the chat on the website is answered by an AI assistant from Anthropic. Your chat messages are processed for this purpose. Please do not share sensitive information in the chat; for questions about your order we only ask for your order number and email address.
- Only with your consent: Google (Analytics and Ads) and Microsoft (Clarity) for statistics and measuring advertising.
- Google Ads (customer lists): to show existing customers relevant ads, or no ads for something they already have, we send the e-mail address, name and postcode of people who bought from us to Google in encrypted (hashed) form. Google only uses this to check whether it belongs to a Google account and does not keep it if it does not. If you unsubscribe from our e-mails, we no longer include you. You can object at any time via customer service.
Some of these parties are based in the United States. Data is only transferred to the US with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long do we keep your data?
- Order and invoice data: 7 years (statutory retention obligation).
- Your account: until you ask us to delete it.
- Customer service, chats and returns: 2 years after completion, or for as long as the warranty runs.
- Statistics and advertising data: a maximum of 14 months.
Cookies
- Strictly necessary cookies (basket, logging in, your cookie choice) are always set; the shop does not work without them.
- Statistics cookies (Google Analytics, Microsoft Clarity) and marketing cookies (Google Ads) are only set if you give your consent.
- You can change your choice at any time via the “Cookie settings” link at the bottom of every page.
Security
The website uses a secure connection (https). We store passwords encrypted, and only staff who need it have access to your data.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to object and to have your data transferred (data portability). You can withdraw any consent you have given at any time. Send your request to support@starlightlasers.eu; we will respond within one month. If you are not satisfied with how we handle your data, you can lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), with the Information Commissioner's Office (ICO) if you live in the UK, or with the data protection authority in your country.
Changes
We may update this policy. The date at the top shows which version applies.