Effective Date: October 14, 2026
Welcome to the privacy policy of Outdoor Diffusion LUX S.à r.l. (referred to as “we”, “us” or “our” in this policy). We operate the e-commerce website www.outdoordiffusionlux.com, a dedicated platform offering field-tested, low-waste outdoor essentials for casual explorers, local trail walkers, castle-path explorers and weekend outdoor lovers. We are deeply committed to protecting the personal information privacy of every user who visits our website, browses our product catalogues, creates an account, places an order or interacts with our services. This policy clearly explains how we collect, use, store, share, protect and manage your personal information in full compliance with applicable data protection regulations, while respecting your rights and freedoms related to your personal data.
By accessing, browsing or using any part of our website and our outdoor gear shopping services, you acknowledge that you have fully read, understood and agreed to all terms outlined in this privacy policy. If you do not agree with any provision of this policy, please discontinue the use of our website and services immediately.
1. Who We Are
We are Outdoor Diffusion LUX S.à r.l., a local Luxembourg-based outdoor gear retailer, with our registered and operational address at 25, Boulevard F.W. Raiffeisen, L-2411 Luxembourg. Our team consists of passionate local trail walkers, castle-path explorers and weekend outdoor lovers who know every hidden valley, forest trail and riverbank spot in this small, beautiful country. With over 7 years of industry experience, a community of more than 110,000 happy customers, and over 240 unique outdoor products in our collection, we have built a 4.9-star customer rating by delivering practical, high-quality gear for every trail, hike, camp and ride.
As the data controller for all personal information processing activities conducted through our website, we take full legal and operational responsibility for safeguarding your personal data, and we are always ready to respond to your inquiries about your information processing practices. You can reach our data protection team at any time via our contact email: thyrza@outdoordiffusionlux.com, or call us at +352 621 171 491 during our working hours.
2. What Personal Information We Collect
We strictly adhere to the principles of legality, fairness, transparency and data minimisation, only collecting personal information that is necessary to deliver our e-commerce services and fulfil the purposes clearly stated in this policy. The personal information we collect falls into the following categories:
2.1 Information You Provide Actively
This refers to all data that you voluntarily submit to us when interacting with our website:
- Account registration data: When you create a user account on our platform, we will collect your email address or mobile phone number, and the password you set for account security. You may also choose to provide optional supplementary information including your nickname, preferred outdoor activity types, and personal preferences to help us customise your shopping experience.
- Transaction and order fulfilment data: To process your purchases of outdoor gear, complete payment and arrange smooth delivery, we require you to provide your full name, contact phone number, detailed shipping address, and the specific order information of the collapsible cups, camping gear, trail accessories or other outdoor products you select. We do not store your complete payment card details: all payment information is directly transmitted to and processed by our licensed, PCI DSS compliant payment service providers, who take full responsibility for the security of your payment credentials.
- Interaction and support data: When you contact our customer service team for product consultation, after-sales support, order query or feedback submission, we will collect the content of your messages, your order number, the photos or description of product issues you provide, and your preferred contact method, to ensure we can resolve your concerns efficiently and deliver the professional service our customers expect.
- Marketing preference data: When you sign up for our newsletter to receive updates about new arrivals, limited-time promotions, and local Luxembourg outdoor trail recommendations, we will record your subscribed email address and your stated preferences for specific product categories.
2.2 Information We Collect Automatically
When you browse our website and interact with our digital services, we automatically collect non-sensitive technical data to optimise our platform performance, prevent security risks and improve your shopping experience:
- Device and environment information: We record your device model, operating system version, browser type and version, unique device identifier, IP address, network operator information, and network connection type (Wi-Fi, 4G/5G etc.) to ensure our website displays correctly on your device, and to diagnose technical faults promptly.
- Behavioural log data: We collect your browsing records on our website, search keywords for outdoor products, click history for product pages, collection records, stay duration on different sections of our platform, and the pages that led you to our website. This data helps us understand how users interact with our product catalogues, so we can optimise our page layout and showcase our featured top-rated outdoor essentials more reasonably.
- Cookies and similar tracking technologies: We use Cookies, pixel tags and other standard tracking technologies to remember your login status, save your shopping cart contents between visits, and analyse website traffic trends. You can adjust the settings in your browser to refuse Cookies at any time, but this may affect some of the convenient functions of our website such as automatic login or persistent shopping cart storage.
- Optional location information: With your explicit permission, we may collect your approximate geographical location (city or regional level) to recommend suitable local outdoor products, adapt to local logistics delivery arrangements, and share information about nearby Luxembourg trail events that may interest you. You can revoke this permission at any time through your device system settings, and this will not affect your normal use of all basic shopping functions on our website.
3. How We Use Your Personal Information
We only use your collected personal information for the legitimate, clearly stated purposes that we inform you of, and will never process your data in a manner that is incompatible with these purposes:
- Core e-commerce service delivery: We use your account information, order data and shipping information to complete the entire order processing workflow, from confirming your purchase, arranging logistics distribution, sending order status updates, to handling after-sales services such as returns, exchanges and quality warranty claims. This is the core purpose for which we collect your personal data, to ensure you can receive your ordered outdoor gear smoothly and enjoy a seamless shopping experience.
- Platform security and risk control: We use your device information, login IP address and account behaviour data to identify abnormal login attempts, prevent fraudulent orders, combat malicious account theft, and protect the security of your account, your transaction funds and the overall security environment of our entire e-commerce platform.
- Service optimisation and personalised experience: Based on the analysis of de-identified user behaviour data, we optimise our website interface design, adjust product display logic, and improve system response speed, to make your browsing experience more smooth. We may also provide you with personalised product recommendations for outdoor gear that matches your stated hobbies and previous browsing habits, helping you quickly discover practical new essentials that fit your next walk, camp or ride. You can turn off the personalised recommendation function at any time through the “Privacy Management” section in your account settings, and this operation will not affect your normal shopping experience.
- Marketing communication (with your separate consent): After you give us explicit permission, we will send you regular newsletters to inform you of our new arrival updates, exclusive customer discounts, new product launch activities, and local outdoor event information curated for Luxembourg explorers. You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link at the bottom of each marketing email, or by sending an unsubscription request to our contact email, and we will stop sending you marketing messages within 3 working days.
- Legal compliance and legitimate business needs: We may process your personal information when it is required by applicable laws and regulations, when we need to comply with the legally valid request from a judicial authority, regulatory body or authorised government department, or when it is necessary to protect the legitimate rights, interests and property safety of our company, our users or the general public. We also process de-identified and anonymised user data for internal statistical analysis and user behaviour research, to evaluate the operational effect of our product categories, improve our product selection quality, and provide more suitable outdoor gear for our community of outdoor lovers.
4. Information Sharing and Disclosure
We firmly promise that we will never sell, rent or trade your personal information to any third parties for their commercial marketing purposes without your explicit separate consent. We only share your necessary personal information in the following limited scenarios:
- Trusted third-party service providers: We share necessary data with our carefully selected cooperative service providers, who only process your personal information according to our instructions and to deliver the services they are responsible for. These partners include:
- Logistics service providers: We only share your shipping name, contact phone number, delivery address and corresponding order information with them, to ensure the smooth delivery of your outdoor gear products.
- Licensed payment institutions: We share necessary order amount and transaction status information with them, to complete the payment settlement process, while your sensitive payment card details are never accessed or stored by us.
- Professional technical service providers: Such as cloud hosting service providers, website security maintenance teams and data analysis partners, who provide us with infrastructure support, platform security protection and de-identified data analysis services.
All our third-party service providers are required to sign strict data processing confidentiality agreements with us, which clearly stipulate their data protection obligations, and they are not allowed to use your personal information for any purposes outside the scope agreed with us. We conduct regular compliance checks on these partners to ensure their data protection standards meet legal requirements.
- Legal required disclosure: We may disclose your personal information if we determine in good faith that such disclosure is necessary to comply with applicable laws, regulations, legal procedures, or the mandatory requirements of administrative or judicial authorities. We may also disclose your personal information when it is necessary to protect the safety, legitimate rights and property of our company, our users, the public, or to respond to emergency situations such as dealing with network attacks, preventing fraud activities.
- Business transfer scenario: In the event of a merger, acquisition, asset transfer or other similar business transaction of Outdoor Diffusion LUX S.à r.l., the personal information we hold may be transferred as part of the business assets. We will require the new entity that takes over the business to continue to comply with the provisions of this privacy policy to protect your personal information, and we will notify you of any relevant changes to the data processing methods in advance through obvious notices on our website or email.
5. Data Security Protection Measures
We attach great importance to the security of your personal information, and have adopted industry-leading technical measures, standardised management processes and strict internal control systems to protect your data from unauthorised access, use, disclosure, alteration, damage or loss:
- Technical protection measures: We use industry standard SSL/TLS encryption protocol to protect the data transmission process between your browser and our website, to prevent your personal information from being intercepted during transmission. All your sensitive personal data including account passwords and contact information are stored in encrypted form on our security-hardened servers hosted in compliant data centres. We conduct regular security vulnerability scanning, penetration testing and system security updates, to continuously eliminate potential security risks in our technical architecture.
- Internal access control management: We implement strict least-privilege access permissions for all our internal employees, only allowing designated authorised personnel to access the personal information that is necessary for them to complete their job duties. All our staff have received professional privacy protection training, and they are bound by strict internal confidentiality obligations. Any unauthorised access or use of user personal information will be regarded as a serious violation of company discipline, and will lead to corresponding disciplinary actions or even legal liability.
- Incident emergency response mechanism: We have established a complete personal data security emergency response plan. In the unlikely event that a personal information security incident such as data leakage, tampering or loss occurs, we will immediately activate the emergency response procedure, take effective remedial measures to control the expansion of the impact, notify the affected users through appropriate channels as soon as possible, and report the relevant situation to the competent data protection regulatory authority in accordance with the requirements of applicable laws and regulations.
6. Your Rights Over Your Personal Information
According to applicable data protection laws, you enjoy a series of clear rights over your personal information processed by us:
- Right of access: You can log into your user account at any time, to access and view all your personal information stored on our platform, including your account basic information, order history, contact information and subscription status.
- Right of rectification: If you find that your personal information we hold is inaccurate or incomplete, you can modify, update and correct your relevant personal information through the personal information management page in your account. If you cannot complete the modification operation by yourself, you can also contact our customer service team, and we will assist you to complete the correction within a reasonable time frame.
- Right to erasure (“right to be forgotten”): You have the right to request us to delete your personal information under certain circumstances, including when the personal information is no longer necessary for the original collection purpose, when you withdraw your consent to the data processing, or when our processing of your information violates relevant legal provisions. We will verify and respond to your deletion request, except for the personal information that we are legally required to retain for compliance, tax or dispute resolution purposes.
- Right to withdraw consent and restriction of processing: You can withdraw the consent you previously gave to certain data processing activities at any time, such as turning off personalised recommendations, or unsubscribing from marketing emails. You also have the right to request us to restrict the processing of your personal information under specific situations stipulated by law.
- Right to data portability: You have the right to obtain the personal information you provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another data controller, where technically feasible.
- Right to account cancellation: You have the right to submit an account cancellation request through the relevant function in your account settings. After we complete your identity verification, we will process your cancellation request within the time period required by law, and delete all your associated personal information, except for the data that we are required to retain in accordance with laws and regulations.
If you need to exercise any of the above rights, you can send your request to us via our contact email thyrza@outdoordiffusionlux.com, or contact us by phone at +352 621 171 491. We will respond to your request as soon as possible, no later than one month after we receive your identity-verified request. If you are not satisfied with our response or our processing of your personal information, you also have the right to submit a complaint to the competent data protection supervisory authority in Luxembourg.
7. Information Storage Duration
We will only retain your personal information for the shortest period that is necessary to achieve the purposes stated in this privacy policy. In general, we will retain your core account and order data for the duration of your account existence and for the statutory limitation period after the completion of your last order, to fulfil after-sales warranty obligations, resolve transaction disputes and comply with legal compliance requirements. Once the storage period expires, or your account is successfully cancelled, we will delete or anonymise your personal information in a secure and irreversible manner in accordance with our internal data management rules.
8. Updates to This Privacy Policy
We may update this privacy policy from time to time, to adapt to the adjustment of our business operation processes, to meet the requirements of new applicable laws and regulations, or to respond to the reasonable feedback and suggestions from our users. When we make material changes to this privacy policy, we will publish the updated version on the corresponding page of our website, mark the latest effective date clearly, and notify you through obvious pop-up prompts on the website or email, before the changes take effect. We recommend that you review this privacy policy periodically to stay informed of the latest terms about how we protect your personal information. Your continued use of our website services after the effective date of the updated privacy policy will be regarded as your acknowledgement and agreement to the revised policy terms.
9. Contact Information
If you have any questions, concerns, comments or requests regarding this privacy policy, or any matters related to our personal information processing practices, please feel free to contact us at any time:
- Company name: Outdoor Diffusion LUX S.à r.l.
- Postal address: 25, Boulevard F.W. Raiffeisen, L-2411 Luxembourg
- Contact phone number: +352 621 171 491
- Contact email address: thyrza@outdoordiffusionlux.com
Our data protection team will respond to your inquiries and requests as soon as possible, and we are committed to providing you with satisfactory solutions for all privacy related issues.