Privacy Policy

Last updated: 12/09/2025

This Privacy Policy explains how MAKEBLOCK EUROPE B.V. and its affiliates (“Linogy”, “we”, “us”, “our”) collects, uses, shares, and protects your information when you visit eu.linogy.com or interact with us.

This Policy is designed to meet the requirements of the EU/EEA General Data Protection Regulation (GDPR). If you access our other regional websites (for example, the U.S. site), additional or different privacy notices may apply.

1. Who is responsible for your data?

For visitors and customers in the EU/EEA, the primary “data controller” responsible for your personal data is:
MAKEBLOCK EUROPE B.V.Westplein 12
3016 BM Rotterdam, Netherlands
Email: hello@linogy.com

In some cases, MAKEBLOCK EUROPE B.V. may also act as a joint controller or data recipient, for example where we manage our global services centrally. Where this is the case, we do so in accordance with applicable cross-border transfer rules (see Section 8).

We use Shopify as our e-commerce platform and hosting provider. Shopify acts as a service provider / data processor on our behalf for many of the processing activities described in this Policy. For more information on how Shopify processes personal data, please see Shopify’s own privacy documentation on their website.

2. What personal data do we collect?

“Personal data” means any information that identifies, or can reasonably be linked to, an individual.

2.1. Information you provide to us
We collect personal data that you choose to give us, for example, when you place an order, create an account, or contact customer support:
- Identity and contact details
– name, email address, phone number, billing and shipping address.
- Account information – login details (such as email and password), account preferences, saved addresses, order history.
- Order and payment information – products purchased, order amount, payment method, invoices and transaction details. Payment card data is processed by our payment providers; we do not store your full card details.
- Support and communications – content of emails, chat messages, or other communications with our support team, including any attachments or photos you choose to send.
- Marketing preferences – your choices about receiving newsletters, offers and other marketing communications from us.
- User-generated content – product reviews, photos, comments or other content you choose to submit or share with us (for example, on the Site or on our official social media accounts).

2.2. Information we collect automatically
When you visit or use the Site, we automatically collect certain data about your device and how you interact with us, for example:
- Device and technical information – browser type and version, operating system, device type, language and time-zone settings, approximate location based on IP address.
- Usage information – pages you visit, clicks, scrolls, referring/exit pages, time spent on pages, search terms, and other information about how you navigate and interact with the Site.
- Cookies and similar technologies – identifiers stored in cookies, pixels and similar technologies, which help us remember your preferences, keep you logged in, analyse traffic and, where permitted, personalise marketing (see Section 6 for more on cookies).
This information is typically collected using cookies, log files, pixels and analytics tools provided by us and our partners.

2.3. Information from third parties
We may receive personal data about you from third parties, for example:
- Payment providers – information confirming payment status, fraud checks and limited card information (such as last four digits).
- Logistics and fulfilment partners– updated delivery information, tracking data and delivery status.
- Analytics and advertising partners – aggregated or pseudonymised information about how users interact with our Site and ads.
- Social media platforms – if you interact with us via social media (for example, by following our official accounts or sending messages), we receive information associated with your profile as permitted by the platform’s privacy settings.
We combine this information with the personal data we collect directly from you where relevant, for example to investigate issues, improve our services or personalise your experience.

3. For what purposes and on what legal basis do we use your data?

Under GDPR, we must have a legal basis for processing your personal data. The main bases we rely on are: performance of a contract, compliance with legal obligations, legitimate interests, and consent.
Below we explain the main purposes and legal bases:

3.1. To process and deliver your orders
- What we do: process your orders, take payment, arrange shipping and delivery, manage returns, refunds and warranty claims, and provide customer service.
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR); compliance with legal obligations (e.g. accounting and tax) (Art. 6(1)(c)).

3.2. To manage your account and relationship with us
- What we do: create and maintain your account, store your order history, manage your preferences, communicate about your orders and service updates.
- Legal basis: performance of a contract; our legitimate interests in providing a smooth and secure user experience (Art. 6(1)(f)).

3.3. To improve our products, services and Site
- What we do: analyse how customers use our Site and products, fix bugs, develop new features, and optimise performance and security.
- Legal basis: our legitimate interests in improving our products and services and ensuring network and information security (Art. 6(1)(f)).

3.4. To prevent fraud and ensure security
- What we do: detect suspicious activities, verify certain transactions, prevent abuse of promotions, and protect our systems and customers.
- Legal basis: our legitimate interests in fraud prevention and security; compliance with legal obligations.

3.5. To send you service-related communications
- What we do: send order confirmations, shipping updates, important notices about your account, product or service changes, or safety/recall information.
- Legal basis: performance of a contract; compliance with legal obligations (for example, safety information).

3.6. To send you marketing communications
- What we do: send newsletters, offers, product updates, and event information; show personalised content and ads where permitted by law.
- Legal basis: your consent where required (for example, most email marketing in the EU/EEA and Norway); our legitimate interests in promoting our products where consent is not required and local law allows.
You can opt out of marketing at any time (see Section 7). We do not use your personal photos or user-generated content for advertising or promotional purposes without your explicit consent.

3.7. To comply with legal obligations
- What we do: keep records for tax and accounting, respond to requests from authorities, comply with consumer protection, product safety and other regulatory requirements.
- Legal basis: compliance with legal obligations (Art. 6(1)(c)).

3.8. Other purposes with your consent
In specific situations, we may ask for your consent to process personal data for a particular purpose (for example, participation in certain campaigns or surveys, or optional cookies). Where we rely on consent, you may withdraw it at any time (see Section 7), without affecting the lawfulness of processing before withdrawal.

4. How we use cookies and similar technologies

We use cookies and similar technologies for:
- Essential functions – enabling core features such as shopping cart, account login and security. These cookies are strictly necessary for the Site to work.
- Preferences and functionality – remembering your language, region and other preferences.- Analytics – understanding how visitors use our Site, which helps us improve content and user experience.
- Marketing and personalisation – where permitted, showing relevant offers and measuring the effectiveness of our campaigns.

In the EU/EEA, we only set non-essential cookies (e.g. analytics or marketing cookies) if you consent via the cookie banner or preference centre, in line with applicable e-privacy rules. You can change or withdraw your consent at any time using the cookie settings link in the footer (where available) or by adjusting your browser settings.

5. How we share your personal data

We do not sell your personal data. We share your personal data only with the categories of recipients listed below, and only to the extent necessary for the purposes described in this Policy:
- Service providers / processors – such as hosting providers (including Shopify), payment processors, logistics and delivery partners, customer support platforms, analytics and marketing tools, and IT/security service providers. They process data on our behalf under written contracts that require appropriate data protection.
- Group companies – other Linogy entities that support our operations (for example, global customer support, finance, IT).
- Professional advisers – such as lawyers, auditors and consultants, where reasonably necessary for the management of our business and to defend legal claims.
- Legal and regulatory authorities – where required to comply with laws, regulations, legal processes or enforceable governmental requests, or to protect our rights, safety or property, or that of our customers and third parties.
- Business transfers – in connection with a merger, acquisition, reorganisation or sale of some or all of our assets, your data may be transferred to the new owner subject to confidentiality obligations and in accordance with applicable law.

We require all recipients to protect your personal data appropriately and to process it only in accordance with applicable data-protection laws.

6. International data transfers

We are a global business and use service providers located in countries outside the EU/EEA, including the United States.
When we transfer your personal data to a country that is not recognised as providing an adequate level of data protection by the European Commission (or, for Switzerland, by the Swiss authorities), we take appropriate safeguards, such as:
- relying on an adequacy decision by the European Commission (such as the EU-U.S. Data Privacy Framework where the recipient participates in the Framework);
- using the EU Standard Contractual Clauses (SCCs) and, where required, additional technical and organisational measures, and/or
- other safeguards permitted under GDPR and relevant Swiss and Norwegian law.

You can contact us (see Section 11) if you would like more information about the safeguards we use for international transfers.

7. Your privacy rights

If you are located in the EU/EEA, you have a number of rights regarding your personal data under GDPR-style laws, including:
- Right to be informed – to receive clear, transparent information about how we use your data (this Policy aims to provide that).
- Right of access – to obtain confirmation whether we process your personal data and, if so, to receive a copy and certain information about how we use it.
- Right to rectification – to have inaccurate or incomplete personal data corrected.
- Right to erasure (“right to be forgotten”) – to request that we delete your personal data in certain circumstances (for example, where it is no longer needed for the purposes for which it was collected, or you withdraw consent and there is no other legal basis).
- Right to restrict processing – to request that we temporarily suspend processing of your data in certain situations (for example, while we verify its accuracy or assess an objection).
- Right to data portability – to receive certain personal data in a structured, commonly used and machine-readable format and to transmit it to another controller, where technically feasible.
- Right to object – to object at any time to processing based on our legitimate interests (including profiling), on grounds relating to your particular situation. We will stop this processing unless we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or we need the data for legal claims. You also have an absolute right to object to direct marketing.
- Rights relating to automated decision-making – not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you, except in specific situations permitted by law.

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

Exercising your rights
You can exercise your rights at any time by contacting us at: hello@linogy.com
To help protect your privacy, we may need to verify your identity before acting on your request. We aim to respond within one month, or as required by applicable law.
You also have the right to lodge a complaint with your local data protection authority, in particular in:
- the EU/EEA Member State where you live or work, or where you believe an infringement has occurred; or
- Switzerland, with the Federal Data Protection and Information Commissioner.
However, we would appreciate the chance to deal with your concerns first, so please consider contacting us before contacting a supervisory authority.

8. How long do we keep your data?

We keep your personal data only for as long as necessary to fulfil the purposes described in this Policy, including for:
- the duration of our relationship with you (for example, while you have an account or an active order),
- any retention period required by law (e.g. tax and accounting rules), and
- the time needed to establish, exercise or defend legal claims.

When personal data is no longer needed, we will delete it or anonymise it so that it can no longer be linked to you.

9. Security of your personal data

We use a combination of technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse or disclosure. These may include encryption, access controls, secure hosting and staff training.

However, no system is completely secure. We cannot guarantee absolute security of your data, and you are responsible for keeping your account password safe and notifying us promptly if you suspect any unauthorised use of your account.

10. Children’s privacy

Our Site and products are not directed to children under 16, and we do not knowingly collect personal data from children under this age.
If you are a parent or guardian and believe that your child has provided personal data to us without your consent, please contact us so that we can delete that information.

11. Third-party websites and services

The Site may contain links to third-party websites, plug-ins or services. Clicking those links may allow third parties to collect or share data about you.
We do not control these third-party sites and are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party site you visit.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our services or in applicable law.
If we make material changes, we will post the updated Policy on this page with a new “Last updated” date, and take additional steps if required by law (for example, notifying you by email or asking for your consent to new processing activities).
We encourage you to review this Policy regularly to stay informed about how we manage your personal data.

13. How to contact us

We may update this Policy and will post the new effective date.
Questions or requests: support@linogy.com