Privacy policy

1. Data controller

Prepz B.V. is responsible for processing your personal data. Our contact details are:

2. Which personal data do we process?

We process the following categories of personal data:

• Identity details: first name, surname
• Contact details: email address, phone number, delivery address
• Payment details: payment method and transaction status (not full card details)
• Order history: products purchased, order numbers, delivery status
• Account details: sign-in details (email and hashed password)
• Behavioural data: page visits and clicks (via cookies; see our cookie policy)
• Technical data: IP address, browser type, device information

3. Purposes and legal bases

We process your personal data for the following purposes:

4. Retention periods

We do not keep your personal data longer than necessary for the purposes for which it was collected.

• Order data: 7 years (statutory retention period for tax records)
• Account details: while your account is active, plus 2 years after your last sign-in
• Newsletter subscription: until you unsubscribe, plus 1 year afterwards
• Cookies and behavioural data: see our cookie policy

5. Sharing with third parties

We share your data with third parties only when necessary to provide our services or when we are legally required to do so.

• Delivery services (PostNL, DPD, Bpost): name and delivery address for delivery
• Payment service providers (Mollie, Klarna): payment processing
• Email provider: for sending order confirmations and newsletters
• Analytics providers (Google Analytics): anonymised website statistics
• Tax authority: upon a legally valid request

6. Transfers outside the EEA

Some of our service providers are based outside the European Economic Area (EEA). Where this applies, we ensure that transfers are based on appropriate safeguards, such as the European Commission's standard contractual clauses.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: you can request information about the data we hold about you
• Right to rectification: have inaccurate data corrected
• Right to erasure ('right to be forgotten'): erasure of your data
• Right to restriction: restriction of the processing of your data
• Right to data portability: transfer of your data to another party
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent at any time

To exercise your rights, email info@prepz.nl. We will respond within 30 days.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include:

• SSL/TLS encryption for all data transfers
• Encrypted password storage
• Restricted access to personal data within our organisation
• Regular security audits

9. Cookies

We use cookies and similar technologies. You can find more information in our cookie policy.

10. Complaints

If you have a complaint about how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (AP):

11. Changes

We reserve the right to change this privacy policy. The latest version is always available on this page. We will inform you by email of significant changes.

Questions about privacy?

Do you have questions about this privacy policy or want to exercise your rights? Contact our privacy coordinator.

Related pages