Privacy Policy

EVE GOLD – PRIVACY POLICY Version: 22 October 2026

This privacy policy explains which personal data EVE Gold processes, why, for how long and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR).

This is a translation of the Dutch "Privacyverklaring". In the event of any difference, the Dutch version prevails.

1. Who is responsible? Alashkars Company V.O.F., trading as EVE Gold Liesveld 161, 3131 CK Vlaardingen, the Netherlands Chamber of Commerce (KvK) number: 92296246 E-mail: info@evegold.nl Phone: +31 10 230 6982 WhatsApp: +31 6 84845527

2. Which data do we process? • Contact and customer details: name, address, e-mail address, phone number. • Account details: login details and preferences. • Order and transaction details: products bought or sold, prices, fixings, invoices and order history. • Payment details: IBAN, account holder and payment references. Card details are processed by our payment providers; we do not store them ourselves. • Identification and verification details: details from your ID document, date of birth and, for business customers, Chamber of Commerce, VAT and UBO details, where required by law or a justified check. • Information about the source of funds or goods, where legally required. • Details when we buy used goods: seller details and a description of the goods for the mandatory dealers' register (opkopersregister). • Camera footage of visitors to our shop. • Communication: e-mails, WhatsApp messages and notes of phone calls. • Website and device data: IP address, browser, pages visited and cookie data.

3. Why, and on what legal basis? • Performing the contract (orders, payments, delivery, collection, customer service, account): performance of a contract. • Legal obligations: customer due diligence and reporting under the Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft) and the Sanctions Act, the dealers' register (Article 437 of the Dutch Criminal Code and municipal rules) and tax record-keeping obligations. • Fraud prevention and security, including camera surveillance in the shop: legitimate interest, namely protecting customers, staff and valuable goods. • Improving our website and services with analytics data: consent, insofar as cookies are not strictly necessary. • Marketing, such as newsletters and personalised advertising: consent. You can withdraw this consent at any time.

4. Who do we share data with? We never sell your data. We only share what is necessary with: • Payment providers: Stripe and Pay.nl. • Carriers: PostNL and CargoShield. • Hosting, IT and e-mail service providers that run our website and systems. • Our bookkeeper or accountant. • Google (Analytics) and Meta (Facebook/Instagram Pixel), only with your consent. • Government authorities where required by law, such as the Dutch Tax Administration, the police (dealers' register) and FIU-the Netherlands. We conclude data processing agreements with service providers that process data on our behalf.

5. Transfers outside the EEA Some service providers, such as Google, Meta and Stripe, may process data outside the European Economic Area, for example in the United States. This only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. How long do we keep data? • Wwft data (customer due diligence and transactions): 5 years after the end of the business relationship or the transaction. • Invoices and accounts: 7 years (tax retention obligation). • Dealers' register: in accordance with statutory and municipal periods. • Camera footage: up to 4 weeks, unless footage is needed to handle an incident. • Account details: as long as your account exists; after that we delete them, unless a statutory retention obligation applies. • Marketing data: until you unsubscribe or withdraw your consent.

7. Camera surveillance Cameras are installed in and around our shop to protect people and goods. This is indicated by signs. Footage is only viewed in the event of an incident or suspicion of one and may be shared with the police.

8. Cookies We use necessary cookies to make the website work (such as the shopping cart and logging in). We only place analytics cookies (Google Analytics) and marketing cookies (Meta Pixel) with your consent via the cookie banner. You can change your choice at any time or delete cookies in your browser.

9. Your rights You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. You can also withdraw any consent you have given at any time. Send your request to info@evegold.nl. We respond within one month and may ask you to confirm your identity. Some data may not be deleted while a statutory retention obligation applies. Under the Wwft, we are also not permitted to inform you about any reports to FIU-the Netherlands.

10. Complaints Not happy with how we handle your data? Please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl).

11. Security We take appropriate technical and organisational measures, such as encrypted connections (HTTPS), restricted access to data and secure payment environments, to protect your data against loss and unlawful use.

12. Automated decision-making We do not take decisions with legal effects based solely on automated processing. Our payment providers may, however, carry out automated fraud checks.

13. Changes We may update this privacy policy. The latest version is always available on our website.

EVE GOLD – ALASHKARS COMPANY V.O.F. Liesveld 161, 3131 CK Vlaardingen www.evegold.nl · info@evegold.nl