Privacy Policy

Privacy Policy

Last updated: 14 June 2026

LRS ECOM B.V. (hereinafter "Roborro", "we" or "us") attaches the highest priority to the protection of your personal data. This Privacy Policy describes how we collect, use, store, and protect your data when you visit roborro.com, place an order, or contact our customer service.

We process your personal data in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and applicable national laws.

1. Controller

  • Company Name: LRS ECOM B.V.
  • Commercial Register (KvK): 96816031
  • VAT ID: NL867774125B01
  • Address: Paxtonstraat 3N, 8013 RP Zwolle, Netherlands
  • Email: support@roborro.com
  • Telephone: +31 85 083 0017
  • Opening Hours: Monday to Friday, 09:00 - 18:00 (CET)

2. Personal Data Collected

We collect the following categories of data:

  • Identification Data: First and last name.
  • Contact Data: Email address, telephone number, delivery and billing address.
  • Order Data: Ordered items, prices, purchase history, returns.
  • Payment Data: is processed directly by our payment service provider (Shopify Payments, PayPal). We never store your full card details on our servers.
  • Technical Data: IP address, browser type, operating system, pages visited, duration of visit, referring source.
  • Communication Data: Content of your correspondence with our customer service (email, contact form).
  • Marketing Data: Communication preferences, email open history (if you have consented).

3. Purposes and Legal Bases

In accordance with Article 6 GDPR, we process your data for the following purposes:

  • Performance of a Contract (Art. 6(1)(b)): Processing and delivery of your order, management of returns and refunds, order-related communication.
  • Legal Obligations (Art. 6(1)(c)): Retention of invoices and accounting records, fraud prevention, providing information to competent authorities.
  • Consent (Art. 6(1)(a)): Sending marketing communications (newsletters, promotions), setting non-essential cookies, sharing data with marketing partners.
  • Legitimate Interests (Art. 6(1)(f)): Improvement of our website and services, securing the online shop, fraud prevention, anonymised statistical analyses.

4. Storage Period

  • Order Data: 10 years from the last transaction (accounting and tax obligations).
  • Account Data: until your account is deleted or after 3 years of inactivity.
  • Marketing Data: until you withdraw your consent or 3 years after the last contact.
  • Cookies: a maximum of 13 months.
  • Technical Logs: 12 months.
  • Customer Service Data: 3 years after the last interaction.

5. Recipients and Data Processors

Your information may be shared with the following categories of recipients and data processors. This list is not exhaustive and may be updated as we add or remove services:

Platform and Payment

  • Shopify Inc. - hosting of the webshop, order management, payment processing (Shopify Payments).
  • Payment providers: PayPal, Shop Pay, Apple Pay, Google Pay and other gateways used at checkout.
  • TrackiPal: automatic synchronization of PayPal transactions and track-and-trace numbers.
  • Disputely / Chargeflow: management of chargebacks and payment disputes.

Email and SMS Marketing

  • Klaviyo: email and SMS marketing and segmentation (only with your consent).
  • SMSGo: SMS recovery of abandoned carts (only with your consent).
  • Yotpo: email and SMS campaigns, customer reviews.
  • Aftersell: post-purchase upselling and follow-up campaigns.

Analytics, Attribution, and User Behavior

  • Google Analytics / Google Ads: traffic analysis and advertising (only with cookie consent).
  • Microsoft Clarity: session recordings and heatmaps for UX improvement (only with cookie consent).
  • Propel Replays & Heatmaps: session recordings and user behavior analysis.
  • TrackBee: attribution and cross-channel marketing analysis.
  • wetracked.io: conversion tracking and ad attribution.

Advertising and Sales Channels

  • Meta (Facebook, Instagram): targeted advertising and social commerce (only with cookie consent).
  • Google & YouTube: shopping ads and video campaigns (only with cookie consent).
  • Pinterest: advertising and product pins.
  • Microsoft Advertising: Bing ads.

Customer Service

  • Help Scout: management of customer inquiries and support tickets.
  • SmartBot / Jack AI: AI assistance in customer communication.
  • Shopify Inbox: live chat with customer service.

Logistics and Delivery

  • International shipping carriers - for the delivery of your order.
  • ParcelWILL (Parcel Panel): track-and-trace and delivery notifications.

Public authorities - when required by law (tax authorities, judicial authorities).

All our data processors are contractually obligated to respect the confidentiality of your data and to process it only in accordance with our instructions, pursuant to Art. 28 GDPR.

6. International Data Transfers

Some of our data processors (Shopify, Google, Meta, Klaviyo) are based outside the European Union, primarily in the USA. In these cases, the transfer is based on the following:

  • EU-U.S. Data Privacy Framework (DPF) for certified providers;
  • Standard Contractual Clauses of the European Commission;
  • additional safeguards (encryption, technical and organisational measures).

7. Your Rights

In accordance with Art. 15-22 GDPR, you have the following rights:

  • Right of Access (Art. 15) - to obtain a copy of the data concerning you.
  • Right to Rectification (Art. 16) - to have inaccurate or incomplete data corrected.
  • Right to Erasure (Art. 17) - "right to be forgotten".
  • Right to Restriction of Processing (Art. 18).
  • Right to Data Portability (Art. 20) - to receive data in a structured format.
  • Right to Object (Art. 21) - in particular against direct marketing.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact us at support@roborro.com. We will respond within one month (extendable to three months for complex requests).

8. Complaint to a Supervisory Authority

If you believe that the processing of your personal data does not comply with the GDPR, you can lodge a complaint with the supervisory authority in your country of residence:

9. Data Security

We implement appropriate technical and organisational measures to protect your data:

  • SSL/TLS encryption of the entire website and the ordering process.
  • Encrypted storage (AES-256) of sensitive data.
  • PCI-DSS compliance for payment processing via Shopify Payments.
  • Strict access control to customer data.
  • Regular data backups and emergency plan.
  • Notification of data breaches within 72 hours to competent authorities and affected individuals (Art. 33 GDPR).

10. Cookies and Similar Technologies

Our website uses cookies to ensure the proper functioning of the shop, to measure reach, and to personalise your experience. On your first visit, a banner allows you to accept, reject, or customise your cookie preferences. You can change your selection at any time via your browser settings or by resetting the banner.

Cookie categories used:

  • Strictly Necessary Cookies - Shopping cart, session, security (no consent required).
  • Performance Cookies - Google Analytics (with consent).
  • Marketing Cookies - Meta Pixel, Google Ads, Klaviyo (with consent).

11. Minors

Our services are not directed to persons under the age of 16. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with their data, please contact us at support@roborro.com so that we can delete it.

12. Marketing and Communication

We send marketing emails (newsletters, promotions, news) exclusively to individuals who have expressly consented. You can unsubscribe at any time:

  • by clicking the unsubscribe link in every email;
  • by writing to support@roborro.com;
  • by adjusting your preferences in your customer account.

13. Changes to this Policy

We reserve the right to amend this Privacy Policy at any time to adapt it to legal, technical, or business developments. Material changes will be communicated on this page and, where appropriate, by email. The date of the last update is stated at the top of the document.

14. Related Documents

15. Contact

For all questions regarding this policy or the processing of your personal data: