Herbaldrogist.com takes the protection of your privacy very seriously. Therefore, we only process data that we need for (improving) our services, and we handle the information collected about you and your use of our services carefully. We never share your data with third parties for commercial purposes.
This privacy policy applies to the use of the website and the services offered on it by Herbaldrogist.com. The policy became effective on December 27, 2021. With the publication of a new version, all previous versions become invalid. This privacy policy explains what data we collect about you, the purpose of its use, and with whom and under what circumstances we may share this data with third parties. We also explain how we store your data, how we protect it from misuse, and what rights you have regarding the personal data you provide to us.
If you have any questions about our privacy policy, you can contact our Data Protection Officer. Contact details can be found at the end of this privacy policy.
About Data Processing
Below you can read how we process your data, where we store it, what security measures we take, and who has access to it.
Webshop Software
LightSpeed
Our webshop is developed with the software of LightSpeed. The personal data you provide to us to use our services is shared with this provider. LightSpeed has access to your data to provide us with technical support but will never use your data for any other purpose. LightSpeed is obligated to take appropriate security measures as per the agreement we have with them. These security measures include the use of SSL encryption and a strict password policy. LightSpeed uses cookies to collect technical information about the use of the software, but no personal data is collected and/or stored. LightSpeed reserves the right to share collected data within its own company to improve the service.
Web Hosting
MeinDomein
We use MeinDomein for web hosting and email services. MeinDomein processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about the use of the services, which is not personal data. MeinDomein has implemented appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. MeinDomein is bound by a confidentiality agreement.
Payment Processor
Mollie
For processing (some of) the payments in our webshop, we use the platform of Mollie. Mollie processes your name, address, location details, and payment information, such as your bank account number or credit card number. Mollie has implemented appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to improve the service and share anonymized data with third parties. All the above-mentioned security measures to protect your personal data also apply to the parts of the service provided by Mollie through third parties. Mollie does not store your data longer than legally permitted.
Afterpay
AfterPay handles the full payment process for herbaldrogist.com. When you complete your order via AfterPay, you will receive a digital payment overview from them and pay the order amount to AfterPay. To approve your request for deferred payment, AfterPay conducts a data check. AfterPay has a strict privacy policy that is described in their privacy notice. If your request to pay with AfterPay is not approved, you can, of course, complete your order using another payment method. More information about paying with AfterPay is available on AfterPay's website.
Reviews
WebwinkelKeur
We collect reviews via the platform of WebwinkelKeur. When you leave a review via WebwinkelKeur, you are required to provide your name and email address. WebwinkelKeur shares this data with us so we can match the review with your order. WebwinkelKeur also publishes your name on their website. In some cases, WebwinkelKeur may contact you to request clarification about your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has implemented appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to use third parties to provide the service, for which we have granted them permission. All the security measures mentioned above to protect your personal data also apply to the parts of the service provided by WebwinkelKeur through third parties.
Shipping and Logistics
PostNL
When you place an order with us, it is our task to deliver your package to you. We use the services of PostNL for delivery. It is necessary for us to share your name, address, and location details with PostNL. PostNL uses this data solely for the performance of the contract. If PostNL uses subcontractors, PostNL will also share your data with these parties.
DHL
When you place an order with us, it is our task to deliver your package to you. We use the services of DHL for delivery. It is necessary for us to share your name, address, and location details with DHL. DHL uses this data solely for the performance of the contract. If DHL uses subcontractors, DHL will also share your data with these parties.
Invoicing and Accounting
Rompslomp
For managing our accounting and finances, we use the services of Rompslomp. We share your name, address, location details, and order details with Rompslomp. This data is used to manage sales invoices. Your personal data is securely transferred and stored. Rompslomp is bound to confidentiality and will handle your data confidentially. Rompslomp does not use your personal data for any purposes other than described above.
External Sales Platforms
Bol.com
We sell (some of) our items through the platform of Bol.com. When you place an order through this platform, Bol.comshares your order and personal details with us. We use this data to process your order. We handle your data confidentially and have taken appropriate technical and organizational measures to protect your data from loss and unauthorized use.
Purpose of Data Processing
General Purpose of Processing
We use your data solely for providing our services. This means that the purpose of processing is always directly related to the assignment you give us. We do not use your data for targeted advertising. If you provide us with data and we use it to contact you later – other than at your request – we explicitly ask for your consent. Your data will not be shared with third parties, except to fulfill tax and other administrative obligations. These third parties are all bound by confidentiality agreements based on their contract with us or a legal obligation.
Automatically Collected Data
Data that is automatically collected through our website is processed to further improve our services. This data (e.g., your IP address, web browser, and operating system) is not personal data.
Cooperation in Tax and Criminal Investigations
In some cases, Herbaldrogist.com may be required to share your data with authorities as part of a tax or criminal investigation due to a legal obligation. In such cases, we are obliged to share your data but will oppose this as far as legally possible.
Retention Periods
We retain your data as long as you remain our customer. This means that we store your customer profile until you inform us that you no longer wish to use our services. If you inform us, we will treat this as a request for deletion. Due to applicable administrative obligations, we must retain invoices with your (personal) data. We will retain this data as long as the applicable periods require. However, employees will no longer have access to your customer profile and the documents we have created based on your order.
Your Rights
Under Dutch and European law, you have certain rights regarding the personal data processed by or on behalf of us. Below we explain what rights these are and how you can exercise them. In principle, we will only send copies and records of your data to the email address we already have on file for you to avoid misuse. If you wish to receive the data at another email address or via post, we will ask for identification. We keep a record of processed requests; in the case of a deletion request, we store anonymized data. All copies and records of data will be provided in a machine-readable format that we use in our systems.
Right of Access
You have the right to access the data we (or our processors) process about you or that can be traced back to you. You can request this by contacting our Data Protection Officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data, as well as an overview of processors who have this data, indicating the categories under which we have stored it.
Right of Rectification
You have the right to have any inaccurate data we process (or have processed on our behalf) regarding you corrected. You can make this request by contacting our Data Protection Officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been corrected.
Right to Restrict Processing
You have the right to have the processing of data that we (or our processors) process and that relates to you or can be traced back to you restricted. You can make this request by contacting our Data Protection Officer. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data will not be processed further until the restriction is lifted.
Right to Data Portability
You have the right to have the data we (or our processors) process and that relates to you or can be traced back to you transferred to another party. You can make this request by contacting our Data Protection Officer. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or records of all data we have processed or that has been processed on our behalf by third parties or processors.
Right to Object and Other Rights
In certain cases, you have the right to object to the processing of your personal data by or on behalf of Herbaldrogist.com. If you object, we will immediately stop processing the data until the objection is processed. If your objection is justified, we will provide copies of the data and/or stop processing it permanently. You also have the right not to be subject to automated individual decisions or profiling. We do not process your data in such a way that this right is applicable.
Cookies
Google Analytics
Cookies from the US company Google are placed on our website as part of the "Analytics" service. We use this service to track and report on how visitors use the website. These processors may be required by law to grant access to this data. However, we have not allowed Google to use the collected analytics data for other Google services.
Third-Party Cookies
If third-party software solutions use cookies, this will be mentioned in this privacy policy.
Changes to the Privacy Policy
We reserve the right to modify our privacy policy at any time.