Privacy Policy
At Scrub&Peel, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what personal information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.
By using our website, www.scrubandpeel.nl, or placing an order, you agree to this Privacy Policy.​
-
Data Controller
The data controller responsible for your personal data is:
​
Name: Scrub&Peel
Registered in: The Netherlands
Chamber of Commerce (KvK): 98916939
Registered address: Jozef Israelskade 41C, 1072RX, Amsterdam, Netherlands
VAT Number: 637422326B01
Email: info@scrubandpeel.nl
Website: www.scrubandpeel.nl
-
Personal Data We Collect
We collect the following categories of personal data:
Information you provide directly
-
Full name
-
Email address
-
Phone number (optional)
-
Billing address
-
Shipping address
-
Payment method details (processed securely by third parties)
-
Order information
-
Messages sent to us (e.g., via email or contact form)
Information collected automatically (When you visit our Website, we may collect)
-
IP address
-
Browser type and version
-
Device information
-
Pages visited
-
Time spent on pages
-
Referring URLs
This data is collected through cookies and similar technologies. (See "Cookies and Tracking Technologies" section).
Payment information
We do not store or process full payment card information.
All payments are processed by secure, GDPR-compliant third-party payment providers (e.g. PayPal, Shopify Payments, etc.).
-
How We Use Your Personal Data
We use your information for the following purposes:
Order processing and fulfillment
-
To process your payment
-
To ship your order
-
To provide tracking information
-
To send order confirmations and updates
Customer support
-
To respond to questions, issues, or complaints
-
To assist with returns, defective items, or delivery problems
Legal obligations
-
To comply with tax, accounting, and anti-fraud regulations
-
To maintain transaction records as required by Dutch and EU law
Website functionality and improvements
-
To analyse site performance
-
To improve customer experience
-
To prevent fraud and misuse
We do not sell your data.
We do not profile or make automated decisions that produce legal effects.
-
Legal Bases for Processing (GDPR Article 6)
We process your data based on the following legal grounds:
-
Contract performance (processing your order)
-
Legal obligation (tax, fraud prevention, record-keeping)
-
Legitimate interest (improving Website functionality and security)
-
Consent (for cookies, marketing emails, optional newsletter)
-
How Long We Keep Your Data
We retain your data only as long as necessary:
-
Order data: 7 years (Dutch tax law requirement)
-
Customer service emails: up to 2 years
-
Cookie data: please visit our Cookie Policy
-
Marketing consent data: until you withdraw consent
After these periods, data is securely deleted or anonymized.
-
Sharing Your Data
We may share your data with trusted third parties only when necessary:
-
Payment processors (e.g., PayPal, iDeal, Shopify Payments)
Purpose: processing secure payments.
-
Shipping carriers (e.g., PostNL, DHL, UPS, DPD)
Purpose: delivering your order.
-
Website hosting and analytics (e.g., Shopify, Google Analytics)
Purpose: running and analyzing the Website.
-
Professional services (e.g., accountants, legal advisors)
Purpose: mandatory legal compliance.
​
All partners act under data-processing agreements and comply with GDPR.
We do not sell your data to third parties.
-
International Transfers
Most of your data is stored in the EU.
If data is transferred outside the EU (e.g., to the US via Shopify or Google), this is done under:
-
Standard Contractual Clauses (SCCs)
-
EU adequacy decisions
-
Equivalent GDPR safeguards
-
Your Rights Under GDPR
You have the following rights:
-
Right of access: Obtain a copy of your data
-
Right to rectification: Correct inaccurate information
-
Right to erasure (right to be forgotten)
-
Right to restrict processing
-
Right to data portability
-
Right to object (e.g., to marketing or legitimate interest)
-
Right to withdraw consent (at any time)
To exercise any right, please contact us.
We respond within 30 days as required by law.
-
Security Measures
We implement appropriate technical and organizational measures, including:
-
Encrypted website (HTTPS/SSL)
-
Secure payment gateways
-
Access control and authentication
-
Regular security monitoring
-
Data minimization
However, no online service is completely risk-free.
-
Cookies and Tracking Technologies
We use cookies to:
-
Enable core website functions
-
Analyse website performance
-
Remember user preferences
-
Improve your experience
For full details, please read our Cookie Policy.
You can manage or disable cookies in your browser settings.
-
Children’s Privacy
We do not knowingly collect data from children under 16 years old.
If we become aware that such data has been collected, it will be deleted immediately.
-
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
-
Legal requirements
-
Business operations
-
Website functionality
The updated version will always be published on this page.​
-
Contact
If you have questions reguarding these Terms & Conditions, please contact us at:
Email: info@scrubandpeel.nl
