Privacy policy

Last updated: 6 August 2026

1. Who we are

SAYORY is a trade name operated by Liubo.
Liubo
Ridderhoflaan 63
3451 XC Vleuten
The Netherlands

Liubo is the controller responsible for the processing of personal data described in this Privacy Policy. You can contact us at support@sayory.com.

This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit our website, create or use a customer account, place an order, request a return or cancellation, subscribe to marketing communications, contact us or otherwise use our services.

2. Personal data we process

Depending on how you interact with SAYORY, we may process:

identification and contact details, such as your name, billing and delivery address, email address and telephone number;
order and transaction details, such as the products ordered, order value, payment status, delivery, tracking, cancellation, return and refund information;
customer account information, preferences and account activity;
communications with us, including customer-service and complaint correspondence;
marketing preferences, including whether you have subscribed to or unsubscribed from marketing communications;
technical and usage data, such as your IP address, device type, browser, cookie identifiers and information about how you use our website;
fraud-prevention and security information where necessary to protect transactions, customers and our services.

We do not receive or store complete payment-card details. Payments are processed by Shopify Payments or another payment provider selected at checkout, in accordance with that provider's privacy notice.

3. How we collect personal data

We collect personal data:

directly from you, for example when you place an order, create or access an account, request a return or cancellation, subscribe to marketing communications or contact us;
automatically when you use our website, through necessary cookies and, where you have consented, optional cookies or similar technologies;
from service providers involved in operating our store, processing payments, fulfilling and delivering orders, providing customer accounts, preventing fraud, sending communications or supporting other business functions;
from other parties where permitted by law and relevant to providing our services.

4. Purposes and legal bases

We process personal data only where we have a valid legal basis.

Performance of a contract

We process personal data to:

process payments and fulfil, deliver and track orders;
operate customer accounts;
handle cancellations, returns, refunds, complaints and customer-service requests;
communicate important information about an order or our services.

Legal obligations

We process and retain personal data where necessary to comply with tax, accounting, consumer-protection and other legal obligations, and to respond to lawful requests from public authorities.

Legitimate interests

Where our interests are not overridden by your rights and interests, we process personal data to:

secure our website, accounts and transactions;
prevent and investigate fraud, misuse and technical problems;
manage and improve our services and business operations;
establish, exercise or defend legal claims;
maintain appropriate business and customer-service records.

Consent

Where required, we rely on your consent to:

send email marketing and promotional communications;
use non-essential cookies and similar technologies, including analytics or personalised advertising technologies if these are introduced;
carry out any other processing for which consent is required by law.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Marketing communications

If you subscribe to our marketing communications, we may use your name, email address and relevant preferences to send you news, offers and product information. You may unsubscribe at any time by using the unsubscribe link in an email or by contacting support@sayory.com. Unsubscribing from marketing does not prevent us from sending necessary service messages, such as order, payment, delivery, return, refund or account communications.

6. Cookies and similar technologies

We use cookies and similar technologies to operate and secure the website, remember choices and understand how the website is used. Necessary cookies may be used without consent where permitted by law. Optional analytics, advertising or personalisation technologies will be used only where a valid legal basis exists and, where required, after you have given consent through our cookie settings.

You can review or change your cookie choices through the cookie-preference tool available on our website. Further information about the cookies currently used, their providers, purposes and durations is provided in our Cookie Policy or cookie settings.

7. Service providers and recipients

We disclose personal data only where necessary for the purposes described in this Privacy Policy. Recipients may include:

Shopify, which hosts and operates our online store and customer-account services;
payment and fraud-prevention providers;
our EU-based fulfilment and manufacturing service provider, where necessary to prepare and fulfil your order;
postal, courier, logistics and tracking providers;
providers supporting email delivery, marketing, reviews, customer service, website functionality, security, analytics, accounting, legal compliance or IT services;
professional advisers, public authorities, courts or regulators where disclosure is required or permitted by law;
a successor or relevant party in connection with a merger, acquisition, restructuring or sale of all or part of the business, subject to appropriate safeguards.

Service providers are permitted to process personal data only for the relevant services and in accordance with applicable data-protection requirements. We do not sell personal data.

8. Shopify

Our store is hosted by Shopify. Shopify processes personal data to provide the ecommerce platform, checkout, customer-account and related services. In some circumstances Shopify may also process personal data for its own purposes as described in its consumer privacy policy.

More information is available at: https://privacy.shopify.com/en

Shopify's privacy portal is available at: https://privacy.shopify.com/en/portal

9. International data transfers

Some service providers may process personal data outside the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use or require appropriate safeguards, such as the European Commission's Standard Contractual Clauses, together with any additional safeguards required by law.

10. Retention periods

We retain personal data only for as long as necessary for the purpose for which it was collected and to meet legal obligations. In general:

order, invoice, payment and other information forming part of our tax and business administration is retained for at least 7 years, or longer where a different statutory period applies;
records subject to the EU One Stop Shop scheme will be retained for the legally required period if and when that scheme applies to us;
customer account information is retained while the account remains active and afterwards only where necessary for legal, security or administrative purposes;
customer-service and complaint correspondence is normally retained for up to 2 years after the matter is closed, unless a longer period is necessary for a legal claim or obligation;
marketing information is retained until you unsubscribe or withdraw consent, after which we may keep limited suppression information to ensure that your preference is respected;
cookie and technical-data retention periods are stated in our Cookie Policy or cookie settings.

At the end of the applicable period, personal data is deleted or anonymised unless continued retention is required or permitted by law.

11. Security

We use appropriate technical and organisational measures intended to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. No method of transmission or storage is completely secure, but we regularly consider the safeguards appropriate to the nature of the data and the risks involved.

12. Your rights

Subject to the conditions and limitations of the GDPR, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests and to direct marketing;
receive personal data you provided in a structured, commonly used and machine-readable format, and request its transfer where applicable;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a data-protection supervisory authority.

To exercise your rights, contact support@sayory.com. We may request information necessary to verify your identity. We will respond within the period required by applicable law.

You may lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens
https://www.autoriteitpersoonsgegevens.nl

You may also contact the supervisory authority in the EU or EEA country where you live or work, or where you believe an infringement has occurred.

13. Children's privacy

Our website and services are intended for adults. We do not knowingly collect personal data directly from children. If you believe that a child has provided personal data to us without appropriate authorisation, please contact support@sayory.com so that we can take appropriate action.

14. Third-party websites

Our website may contain links to websites or services operated by third parties. Their processing of personal data is governed by their own privacy notices. We are not responsible for the privacy practices or content of third-party websites that we do not control.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our services, service providers or legal obligations change. The latest version will be published on this page with a revised "Last updated" date. Where required by law, we will provide additional notice or request renewed consent.