Privacy Policy

Last updated: 10 September 2026

This Privacy Policy explains how Largo Upperstream B.V. collects, uses, stores and protects personal data when you visit our website, create an account, place an order or contact us.

1. Data controller

The controller responsible for processing your personal data is:

Largo Upperstream B.V.
Jan de Verwerstraat 10
5911 BJ Venlo
The Netherlands

KvK number: 42043344
RSIN: 869447142
Email: hello@largoupperstream.com
Telephone: +49 2131 3875040

2. Personal data we collect

Depending on how you use our website, we may process:

• Your name

• Billing and delivery address

• Email address and telephone number

• Account and login information

• Order, return and communication history

• Payment status and limited payment information

• Products viewed, purchased or added to your basket

• IP address, browser type and device information

• Cookie preferences and website usage information

• Newsletter and marketing preferences

• Any information you voluntarily provide when contacting us

We do not normally receive or store your complete payment-card details. Payments are processed by the payment provider selected at checkout.

3. Purposes and legal grounds

We process personal data for the following purposes:

Processing orders

We use your information to process payments, deliver products, provide order updates, handle returns and provide customer service.

Legal basis: performance of a contract or steps taken before entering into a contract.

Compliance with legal obligations

We retain certain invoices, transactions and business records to comply with tax, accounting and other legal requirements.

Legal basis: compliance with a legal obligation.

Customer service

We process your contact details and correspondence to answer questions, resolve complaints and provide assistance.

Legal basis: performance of a contract and our legitimate interest in providing effective customer service.

Fraud prevention and website security

We may process technical, account and transaction data to prevent fraud, misuse, unauthorised access and other security incidents.

Legal basis: our legitimate interest in protecting our customers, website and business.

Website operation and improvement

We may use necessary technical data to operate the website and, with your consent where required, analytics data to understand how visitors use it.

Legal basis: our legitimate interest for strictly necessary functionality and your consent for non-essential analytics technologies.

Marketing and newsletters

We send promotional emails only where we have a valid legal basis, including your consent where required. You can unsubscribe at any time by using the link in our emails or contacting us.

Legal basis: consent or, where legally permitted, our legitimate interest in promoting similar products to existing customers.

4. Wix platform

Our website and online shop are hosted and operated using services provided by Wix.com Ltd. and its affiliated companies.

Wix may process personal data on our behalf to provide website hosting, e-commerce functions, security, customer accounts, order processing and related technical services. Data may be stored using Wix infrastructure and contracted service providers.

Where personal data is transferred outside the European Economic Area, appropriate safeguards must be used, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.

5. Payment providers

Payments are processed by the payment method selected during checkout. The relevant payment provider may receive information required to process the transaction, prevent fraud and comply with financial regulations.

Payment providers used by us:

[Insert the names of all payment providers, such as Wix Payments, Mollie, PayPal or Stripe.]

Each payment provider processes certain information under its own privacy policy.

6. Delivery providers

To deliver your order, we share the necessary information with our selected delivery provider, including your name, delivery address, contact details and relevant order information.

Delivery providers used by us:

[Insert the names of the delivery providers.]

7. Other recipients

Where necessary, we may share personal data with:

• Wix and other website technology providers

• Payment and fraud-prevention providers

• Delivery and logistics companies

• Newsletter and email-service providers

• IT, hosting and security providers

• Accountants, tax advisers, legal advisers and auditors

• Government authorities where legally required

• A buyer, investor or adviser involved in a business restructuring, merger or sale

Service providers may only process personal data for the agreed purposes and must protect it appropriately.

We do not sell personal data.

8. Cookies

Our website uses cookies and similar technologies.

Strictly necessary cookies may be placed without consent where they are required for functions such as security, shopping baskets, checkout and account access.

Analytics, advertising and other non-essential cookies are used only after you provide consent where required. You can accept, reject or change your cookie preferences through our cookie settings.

Further information should be provided in our separate Cookie Policy.

9. International transfers

Some service providers may process personal data outside the European Economic Area.

Where required, we use appropriate safeguards for these transfers, including:

• An adequacy decision by the European Commission

• The European Commission’s Standard Contractual Clauses

• Additional technical and organisational safeguards where necessary

10. Retention periods

We keep personal data only for as long as necessary for the purpose for which it was collected or as required by law.

In general:

• Order, invoice and accounting records are normally retained for seven years where required under Dutch tax law.

• Customer-service correspondence is retained for as long as necessary to resolve the matter and manage possible legal claims.

• Account information is retained while the account remains active and for a reasonable period afterward.

• Newsletter information is retained until you unsubscribe or withdraw your consent.

• Cookie information is retained according to the period stated in the cookie settings.

• Information connected to disputes or legal claims may be retained until the applicable limitation period has expired.

After the applicable retention period, personal data is deleted or anonymised.

11. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

These measures may include access controls, encryption, secure connections, account authentication, backups and restricted access to customer information.

No online system is completely secure. You are responsible for keeping your password confidential and informing us if you suspect unauthorised use of your account.

12. Your privacy rights

Subject to the applicable legal conditions, you may have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request deletion of your data

• Restrict the processing of your data

• Object to processing based on legitimate interests

• Receive certain data in a portable format

• Withdraw your consent at any time

• Object to direct marketing

• Submit a complaint to a supervisory authority

Withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.

To exercise your rights, contact us at hello@largoupperstream.com. We may request additional information to verify your identity.

13. Complaints

If you believe that your personal data has not been handled correctly, please contact us first so that we can investigate the matter.

You also have the right to submit a complaint to the Dutch supervisory authority:

Autoriteit Persoonsgegevens
Website: www.autoriteitpersoonsgegevens.nl

You may also contact the supervisory authority in the EU or EEA country where you live or work.

14. Children

Our webshop is intended for adults. We do not knowingly collect personal data directly from children who cannot legally provide valid consent.

If you believe that a child has provided personal data to us without appropriate permission, please contact us so that we can investigate and delete the information where required.

15. Automated decision-making

We do not make decisions that produce legal or similarly significant effects based solely on automated processing, unless this is necessary for a transaction, permitted by law or based on explicit consent.

Payment and fraud-prevention providers may conduct automated risk assessments under their own responsibilities and privacy policies.

16. External links

Our website may contain links to third-party websites. We are not responsible for how those parties process personal data. Please review their privacy policies before providing information.

17. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The latest version will always be published on our website with the updated revision date.

18. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact:

Largo Upperstream B.V.
Jan de Verwerstraat 10
5911 BJ Venlo
The Netherlands

Email: hello@largoupperstream.com
Telephone: +49 2131 3875040