Privacy Statement

Home

About our privacy policy

Vitality bv cares deeply about your privacy. Therefore, we only process data that we need for (improving) our services and handle the information we have collected about you and your use of our services with care. We never share your data with third parties for commercial purposes.

This privacy policy applies to the use of the website and the services provided by Vitality bv. The effective date for these terms and conditions is April 29, 2025; the publication of a new version cancels all previous versions. This privacy policy describes what information we collect about you, what this information is used for, and with whom and under what conditions this information may be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and what rights you have with regard to the personal data you provide to us. If you have any questions about our privacy policy, please contact our privacy officer. You can find their contact details at the end of our privacy policy.

About data processing
Below, you can read how we process your data, where we store it (or have it stored), what security techniques we use, and who has access to the data.

Webshop software

WooCommerce
Our webshop is developed using WooCommerce software. Personal data you provide to us for the purposes of our services will be shared with this party. WooCommerce has access to your data to provide us with (technical) support; they will never use your data for any other purpose. WooCommerce is obligated to implement appropriate security measures under the agreement we have with them. These security measures include SSL encryption and a strong password policy. WooCommerce uses cookies to collect technical information regarding your use of the software; no personal data is collected and/or stored. WooCommerce reserves the right to share collected data within its own group to further improve its services.

WooCommerce hosting
Our online store is developed with WooCommerce software, and we have chosen AndersStrato for our web hosting. Personal data you provide to us for the purposes of our services will be shared with this party. AndersStrato has access to your data to provide us with (technical) support; they will never use your data for any other purpose. AndersStrato is obligated to implement appropriate security measures based on the agreement we have with them. These security measures include SSL encryption and a strong password policy. Regular backups are made to prevent data loss.

Web hosting

Strato
We purchase web hosting and email services from Strato. Strato processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services. This is not personal data. Strato has taken appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. Strato is obligated to maintain confidentiality under the confidentiality agreement.

Email and mailing lists

MailChimp
We send our email newsletters with MailChimp. MailChimp will never use your name and email address for its own purposes. At the bottom of every email sent automatically through our website, you will see an “unsubscribe” link. You will then no longer receive our newsletter. Your personal data is stored securely by MailChimp. MailChimp uses cookies and other internet technologies that provide insight into whether emails are opened and read. MailChimp reserves the right to use your data to further improve its services and to share information with third parties for this purpose.

Office365
We use Office365 services for our regular business email traffic. This party has implemented appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. Office365 does not have access to our mailbox, and we treat all our email correspondence confidentially.

Payment Processors

Mollie
We use the Mollie platform to process (some of) the payments in our online store. Mollie processes your name, address, and city of residence, as well as your payment information.

Such as your bank account or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and, in that context, to share (anonymized) data with third parties. All the above-mentioned safeguards regarding the protection of your personal data also apply to the parts of Mollie’s services for which it engages third parties. Mollie does not retain your data longer than permitted by law.

Reviews

Kiyoh
We collect reviews via the Kiyoh platform. If you leave a review via Kiyoh, you are required to provide your name, city, and email address. Kiyoh shares this information with us so we can link the review to your order. Kiyoh also publishes your name and city on its website. In some cases, Kiyoh may contact you to provide an explanation of your review. If we invite you to leave a review, we will share your name and email address with Kiyoh. They use this information solely for the purpose of inviting you to leave a review. Kiyoh has taken appropriate technical and organizational measures to protect your personal data. Kiyoh reserves the right to engage third parties to provide its services, for which we have given Kiyoh permission. All the aforementioned safeguards regarding the protection of your personal data also apply to the parts of Kiyoh’s services for which they engage third parties. Kiyoh retains your personal data for as long as you keep the review published on the platform. Kiyoh has appointed a Data Protection Officer; you can find this officer’s contact details on the Kiyoh website.

Shipping and logistics

PostNL
If you place an order with us, it is our responsibility to have your package delivered to you. We use the services of PostNL to carry out deliveries. For this purpose, we must share your name, address, and city details with PostNL. PostNL uses this information solely for the purpose of fulfilling the agreement. If PostNL engages subcontractors, PostNL will also make your data available to these parties.

Invoicing and Accounting

Twinfield

We use the services of Twinfield to maintain our administration and accounting. We share your name, address, and city details, as well as details regarding your order. This data is used to manage sales invoices. Your personal data is sent and stored securely. Twinfield is obligated to maintain confidentiality and will treat your data confidentially. Twinfield will not use your personal data for purposes other than those described above.

External Sales Channels

Purpose of Data Processing

We use your data solely for the purposes of providing our services. This means that the purpose of the processing is always directly related to the order you place. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later date—other than at your request—we will ask for your explicit consent. Your data will not be shared with third parties, except to comply with accounting and other administrative obligations. These third parties are all bound by confidentiality based on the agreement between them and us, an oath, or a legal obligation.

Automatically collected data
Data automatically collected by our website is processed for the purpose of further improving our services. This data (for example, your IP address, web browser, and operating system) is not personal data.

Cooperation with tax and criminal investigations
In certain cases, Vitality BV may be required by law to share your data in connection with tax or criminal investigations by government authorities. In such a case, we are forced to share your data, but we will object to this within the limits of the law.

Retention Periods

We retain your data for as long as you are our client. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also consider this as a request to be forgotten. This also means that we will not retain your data for longer than two years from the last contact or transaction, unless there is a legal justification for doing so.