Privacy Policy

Infinity Labs processes personal data only when it has a clear purpose and legal basis. We apply data minimisation: checkout asks for the information required to process, deliver and support an order, and we do not bundle marketing consent into checkout.

Data we process

• Account data: name, email address, authentication identifiers and session information when you create or use an account.
• Order and delivery data: name, email address, delivery address, country, order contents, totals, payment reference and order status.
• Support and after-sales data: information you send when contacting us, including cancellation, withdrawal, return, product-issue and refund records linked to an order.
• Technical storage: strictly necessary browser storage for cart state, authentication and pending payment/order status.

Why we use it

• To perform the purchase contract, deliver products and provide customer service.
• To create and maintain a customer account when requested.
• To meet accounting, tax, consumer-law and fraud-prevention obligations.
• To secure the website and investigate technical or payment problems.

Service providers

Depending on the feature you use, data may be processed by Netlify (hosting/serverless functions/forms), Supabase (authentication and secure customer/order database), Mollie (payment and refund processing), Resend (transactional order/service emails), and Google only if you choose Google sign-in. These providers process data under their own terms and/or data-processing arrangements as applicable.

Tracking and marketing

As of this update, the Infinity Labs website does not load advertising pixels or behavioural analytics trackers. We do not sell personal data to advertisers. If optional analytics or advertising technology is added later, it must be blocked until valid consent is obtained where required.

Retention

Account data is kept while the account is active and then deleted or anonymised when no longer needed, except where retention is legally required. Order and accounting records may need to be retained for the Dutch statutory administration period (generally at least 7 years). Cart and temporary payment-reference browser storage remains on the device until it is cleared, replaced or removed after relevant checkout actions. Delivery addresses and order line items are stored in the secure server-side order database rather than browser storage.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Where processing is based on consent, you may withdraw consent. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Contact

Privacy requests can be sent to alwalid@infinity-labs.nl. We may need to verify identity before acting on a request.

Last updated

1 October 2026.