Privacy Policy

Definitions

• Website: https://stdtestkits.com
• Controller (Data Controller): Surevia, Vleutstraat 10, 5298 NE, Liempde, The Netherlands.
• Personal Data: any information relating to an identified or identifiable natural person.
• Processing: any operation performed on Personal Data (for example collection, storage, use, disclosure, or deletion).

By using this website, you agree to this Privacy Policy and our Cookie Policy, unless a different method of consent is provided on our site. This Privacy Policy remains in effect until replaced by an updated version.

Website access and acceptable use

Your access to and use of this website is intended for personal use. You must not use information from this website for commercial resale, political campaigning, unsolicited advertising, or sending unsolicited offers (spam).

Intellectual property

All content on this website, including logos, images, texts, videos, layout, and technical applications, is protected by copyright and other intellectual property laws. Copying, modifying, distributing, or reproducing any part of this website without our prior written permission is prohibited.

Website management and availability

To ensure proper operation and security, Surevia may:

• Temporarily limit or suspend access to the website for maintenance, updates, or security reasons.
• Remove or restrict content where required by law or where it violates online etiquette or our policies.
• Deploy updates that may make the website temporarily unavailable.

Responsibilities and security

• Surevia is not responsible for disruptions, malware, viruses, or security issues that originate from your device, your internet connection, or third-party systems outside our reasonable control.
• You are responsible for safeguarding your device, credentials, and data while browsing.
• To the maximum extent permitted by law, Surevia is not liable for damages resulting from improper use of the website or failure to follow security best practices.
• If a dispute, claim, or damage arises due to misuse of the website, Surevia reserves the right to take appropriate legal action and seek compensation where permitted by law.

What data we collect

Depending on how you use our website and services, we may collect the following categories of Personal Data:

• Identity and contact information: name, email address, phone number, billing and shipping address.
• Order and account information: purchase history, order details, customer support requests.
• Payment-related information: payment method and transaction references. We do not store full card details; payment processing is handled by payment service providers.
• Technical and usage information: IP address, device identifiers, browser type, pages visited, and interaction data, primarily via cookies and similar technologies.
• Order activity records: when you view an order in your account, use an order option (such as cancelling, returning or changing the address), or open a link in our shipping emails, we record the date and time, the order and link concerned, the network you connected from (your IP address with the last part removed), a one-way coded form of your full IP address and browser, and your browser and operating system type. We do not record the other pages you visit.

Why we process your data

We process Personal Data only when we have a lawful basis under the GDPR, including:

• Contract performance: to process and fulfill your orders, provide customer service, manage returns, and communicate essential order updates.
• Legal obligation: to comply with tax, accounting, and regulatory requirements.
• Legitimate interests: to prevent fraud (including keeping records of how an order was accessed and delivered so we can answer payment disputes and chargebacks), secure our website, improve services, and maintain business operations, provided your rights do not override these interests.
• Consent: for certain cookies and marketing communications where required by law.

Sharing and disclosure of data

We do not sell your Personal Data to third parties for commercial purposes. We may share your data with trusted third parties only as necessary to provide our services, including:

• Payment service providers to process payments.
• Shipping and logistics partners to deliver orders and provide tracking.
• IT and hosting providers to operate our website and systems.
• Professional advisers (for example legal or accounting) where necessary.

Where required, we use contractual safeguards to protect your data, such as GDPR-compliant data processing agreements.

International transfers

If we transfer Personal Data outside the European Economic Area (EEA), we will do so using appropriate safeguards required by law, such as adequacy decisions or Standard Contractual Clauses.

Data retention

We retain Personal Data only for as long as necessary for the purposes described above, and as required by applicable law (including tax and accounting retention obligations). We may retain certain data longer where necessary to establish, exercise, or defend legal claims.

Order activity records are deleted after 540 days, or kept until a payment dispute about the order is resolved if one is still open. Records linked to your account are deleted when your account is deleted.

Your rights (GDPR)

Under the GDPR, you have the right to:

• Access your Personal Data.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests, in certain circumstances.
• Data portability where processing is based on consent or contract and carried out by automated means.
• Withdraw consent at any time where processing is based on consent (withdrawal does not affect prior processing).
• Lodge a complaint with a supervisory authority.

To exercise these rights, please open a support ticket. For security and fraud-prevention reasons, we may need to verify your identity before processing your request. We typically respond within one month, and may extend by up to two additional months for complex requests as permitted by law.

Legal requirements and law enforcement

If required by law, court order, or valid governmental request, we may disclose Personal Data to competent authorities. Where legally permitted, we will attempt to notify you of such disclosure.

Marketing and communications

• Service communications: we may send essential messages about your orders, shipping, returns, and account security. You cannot opt out of these without closing your account, as they are necessary for service delivery.
• Marketing emails: we may send promotional emails where permitted by law. You can opt out at any time by using the unsubscribe link in the email or by opening a support ticket.
• No partner marketing: we do not share Personal Data with third parties for their own marketing purposes.

Cookies and similar technologies

Cookies are small files stored on your device to enable website functionality, improve performance, and support analytics. Where required, we request consent for non-essential cookies. Cookie consent (where required) is stored for a maximum of 13 months, after which we may request consent again.

• Functional cookies: essential for site operation, such as login sessions and the shopping cart.
• Analytical cookies: to understand website usage and improve performance. Where required, these are set in an anonymized or consent-based manner.

List of cookies we collect

The table below lists the main cookies we use and what they store. The specific cookies may change over time depending on platform, plugins, and analytics configuration; where required, our cookie banner provides current details and choices.

Product images and descriptions

Product images on the website are for reference only. Actual product packaging or appearance may vary slightly due to supplier updates.

Governing law

This Privacy Policy is governed by Dutch law. In case of disputes, the competent court in the Netherlands will have jurisdiction, unless mandatory law provides otherwise.