About our privacy policy
Beauty2People B.V. cares a great deal about your privacy. We therefore only process data that we need for (improving) our services, and we handle carefully the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the associated services of Beauty2People B.V.. The effective date of these terms is 06/05/2026; the publication of a new version invalidates all previous versions. This privacy policy describes what data we collect about you, what this data is used for, and with whom and under what conditions this data may possibly be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and what rights you have regarding the personal data you have provided to us.

If you have questions about our privacy policy, you can contact our privacy contact person; you will find the contact details at the end of our privacy policy.

About data processing
Below you can read how we process your data, where we (have it) stored, which security techniques we use, and who has access to the data.

Webshop software

Shopify
Our webshop is built using Shopify software. Personal data you provide to us for our services is shared with this party. Shopify has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Under the agreement we have concluded with them, Shopify is required to take appropriate security measures. These security measures consist of applying SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information about your use of the software; no personal data is collected and/or stored. Shopify reserves the right to share collected data within its own group of companies to further improve the service. Shopify observes the applicable statutory retention periods for (personal) data. The EU/US Privacy Shield applies; your data may be processed in the United States.

Email and mailing lists

Klaviyo
Our website uses Klaviyo, a third party that handles email traffic originating from our website and the sending of any newsletters. All confirmation emails you receive from our website and web forms are sent via Klaviyo's servers. Klaviyo will never use your name and email address for its own purposes. At the bottom of every email automatically sent via our website you will find the 'unsubscribe' link. If you click this, you will no longer receive emails from our website. This may seriously reduce the functionality of our website! Your personal data is stored securely by Klaviyo. Klaviyo uses cookies and other internet technologies that reveal whether emails are opened and read. Klaviyo reserves the right to use your data to further improve its services and, in that context, to share information with third parties.

Office365
We use Office365 for our regular business email traffic. This party has taken appropriate technical and organisational measures to prevent, as much as possible, misuse, loss and corruption of your and our data. Office365 does not have access to our mailbox, and we treat all our email traffic confidentially.

Payment processors

Mollie
To process (part of) the payments in our webshop, we use the Mollie platform. Mollie processes your name, address and residence details and your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and, in that context, to share (anonymised) data with third parties. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of Mollie's services for which they engage third parties. Mollie does not retain your data longer than permitted under the statutory periods.

Shopify Payments
To process (part of) the payments in our webshop, we use the Shopify Payments platform. Shopify Payments processes your name, address and residence details and your payment details such as your bank account or credit card number. Shopify Payments has taken appropriate technical and organisational measures to protect your personal data. Shopify Payments reserves the right to use your data to further improve its services and, in that context, to share (anonymised) data with third parties. In the event of a request for deferred payment (a credit facility), Shopify Payments shares personal data and information regarding your financial position with credit assessment agencies. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of Shopify Payments' services for which they engage third parties. Shopify Payments does not retain your data longer than permitted under the statutory periods.

Reviews

WebwinkelKeur
We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide a name and email address. WebwinkelKeur shares this data with us so that we can link the review to your order. In some cases, WebwinkelKeur may contact you to ask for clarification on your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organisational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties in order to provide its services; we have given WebwinkelKeur permission to do so. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.

Shipping and logistics

PostNL
When you place an order with us, it is our job to have your package delivered to you. We use PostNL's services to carry out deliveries. For this it is necessary that we share your name, address and residence details with PostNL. PostNL uses this data only to carry out the agreement. If PostNL engages subcontractors, PostNL also makes your data available to these parties.

Invoicing and bookkeeping

Exact Online
We use Exact Online's services to keep our administration and bookkeeping. We share your name, address and residence details and details regarding your order. This data is used to administer sales invoices. Your personal data is transmitted and stored securely. Exact Online is bound by confidentiality and will treat your data confidentially. Exact Online does not use your personal data for purposes other than those described above.

Purpose of data processing

General purpose of processing
We use your data solely for our services. This means that the purpose of the processing is always directly related to the task you give us. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later time — other than at your request — we will explicitly ask for your consent beforehand. Your data is not shared with third parties, other than to meet bookkeeping and other administrative obligations. All these third parties are bound by confidentiality under the agreement between them and us, or by an oath or statutory obligation.

Automatically collected data
Data automatically collected by our website is processed with the aim of further improving our services. This data (for example your IP address, web browser and operating system) is not personal data. Cooperation with tax and criminal investigations
In applicable cases, Beauty2People B.V. may be required, under a statutory obligation, to share your data in connection with a tax or criminal investigation by the authorities. In such a case, we are forced to share your data, but we will oppose this to the extent the law allows us.

Retention periods
We retain your data for as long as you are a client of ours. This means we keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also treat this as a request to be forgotten. This also means that we do not retain your data for longer than two years from the last point of contact or transaction, unless there is a statutory basis requiring otherwise. Under applicable administrative obligations we are required to keep invoices containing your (personal) data, so we will retain this data for as long as the applicable period runs. However, employees no longer have access to your client profile and the documents we have produced in connection with your assignment.

Your rights
Under applicable Dutch and European law, you as a data subject have certain rights with regard to the personal data processed by or on our behalf. Below we explain what these rights are and how you can invoke them. In principle, to prevent misuse, we only send transcripts and copies of your data to the email address already known to us. If you wish to receive the data at a different email address, or by post for example, we will ask you to identify yourself. We keep records of handled requests; in the case of a request to be forgotten, we keep anonymised records. You will receive all transcripts and copies of data in the machine-readable data format used within our systems. You always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you suspect that we are using your personal data incorrectly.

Right of access
You always have the right to view the data we (have) process(ed) that relates to your person or is traceable to you. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you, at the email address known to us, a copy of all data together with an overview of the processors who hold this data, stating the category under which we have stored this data.

Right to rectification
You always have the right to have the data we (have) process(ed) that relates to your person or is traceable to you, corrected. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you, at the email address known to us, a confirmation that the data has been adjusted.

Right to restriction of processing

You always have the right to have the data we (have) process(ed) that relates to your person or is traceable to you, restricted. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you, at the email address known to us, a confirmation that the data will no longer be processed until you lift the restriction.

Right to data portability
You always have the right to have the data we (have) process(ed) that relates to your person or is traceable to you, carried out by another party. You can submit a request to that effect to our privacy contact person. You will then receive a response to your request within 30 days. If your request is granted, we will send you, at the email address known to us, transcripts or copies of all data about you that we have processed, or that has been processed on our behalf by other processors or third parties. In such a case, we will most likely no longer be able to continue our services, because the secure linking of databases can no longer be guaranteed.

Right to object and other rights
In applicable cases, you have the right to object to the processing of your personal data by or on behalf of Beauty2People B.V.. If you object, we will immediately halt the data processing pending the handling of your objection. If your objection is well-founded, we will make transcripts and/or copies of the data we (have) process(ed) available to you and then permanently halt the processing. You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in a manner to which this right applies. If you believe this is nevertheless the case, please contact our privacy contact person.

Cookies

Google Analytics
Cookies from the American company Google are placed via our website, as part of the "Analytics" service. We use this service to track and obtain reports on how visitors use the website. This processor may be required, under applicable laws and regulations, to grant access to this data. We collect information about your browsing behaviour and share this data with Google. Google may interpret this information together with other datasets and in this way track your movements on the internet. Google uses this information to offer, among other things, targeted advertisements (Adwords) and other Google services and products. Third-party cookies — if third-party software solutions make use of cookies, this is stated in this privacy statement.

Changes to the privacy policy
We reserve the right at all times to amend our privacy policy. However, you will always find the most recent version on this page. If the new privacy policy has consequences for the way we process data already collected about you, we will inform you of this by email.

Contact details

Beauty2People B.V.
Westbaan 220 2841 MC Moordrecht, the Netherlands T (010) 266-7878 E info@hydopeptide.nl

Privacy contact person
Edith de Jong