Clean Peptides BV respects your privacy. This privacy policy explains which personal data we process when you visit our online shop cleanpeptides.eu, place an order or contact us, why we do so, how long we keep it and what rights you have. We comply with the General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The controller is Clean Peptides BV, Stationsstraat 16A, 9581 AX Musselkanaal, the Netherlands, Dutch Chamber of Commerce (KvK) 42043083. For questions about privacy, or to exercise your rights, please email shop@cleanpeptides.eu.
2. What data we process, why and for how long
| Purpose | Data | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Processing and delivering your order | name, address, email address, phone number, products ordered, order and payment status, messages about the order | performance of the contract (Art. 6(1)(b)) | 7 years after the order (tax retention obligation) |
| Payments | payment method, amount, transaction reference; for bank transfers the payer’s name and account number | performance of the contract and legal obligation (Art. 6(1)(b) and (c)) | 7 years (tax retention obligation) |
| Customer account | name, email address, encrypted password, addresses, order history | performance of the contract (Art. 6(1)(b)) | until you have your account deleted; after that, order data is kept for as long as the tax retention obligation applies |
| Age confirmation at checkout | your confirmation that you are 18 or older | legitimate interest: not selling to minors (Art. 6(1)(f)) | for as long as the order data is kept |
| Customer service by email and WhatsApp | name, email address or phone number, content of your messages, order number | performance of the contract and legitimate interest in answering questions (Art. 6(1)(b) and (f)) | up to 2 years after the last contact, or longer if needed for an ongoing complaint or dispute |
| Newsletter and service emails (such as a cart reminder) | email address, name, purchase history, opens and clicks | consent (Art. 6(1)(a)); emails to existing customers about similar products under Article 11.7 of the Dutch Telecommunications Act | until you unsubscribe; after that we only keep your email address on a suppression list |
| Reviews | name, email address and order number for the invitation; content and rating of your review | legitimate interest (Art. 6(1)(f)) | for as long as the review is online |
| Website statistics and marketing (cookies and pixels) | cookie IDs, IP address, device and browser data, pages visited, purchases | consent via the cookie banner (Art. 6(1)(a)) | according to the periods in our cookie policy |
| Security and operation of the website | IP address, log files, functional cookies (cart, language, session) | legitimate interest (Art. 6(1)(f)) | as short as possible; log files are kept no longer than necessary for security |
| Accounting and business analysis | order data | legal obligation and legitimate interest (Art. 6(1)(c) and (f)) | 7 years |
| Affiliate programme | name, email address, payout details, referrals and commissions | performance of the contract with the affiliate (Art. 6(1)(b)) | for as long as you participate, then 7 years for accounting purposes |
3. Who we share data with
We never sell your data. We only share data with parties we need in order to provide our services, or where the law requires it. Parties that process data on our behalf do so under a data processing agreement or their standard data processing terms.
| Party | Purpose |
|---|---|
| Hostinger | website hosting |
| Cloudflare | security and fast delivery of the website |
| Sendcloud | shipping software, shipping labels and track & trace |
| DHL, DPD and PostNL | delivery of your parcel |
| Our payment service provider | processing iDEAL, Bancontact and credit card payments |
| Revolut Business | business bank account for payments by bank transfer |
| Omnisend | sending newsletters and service emails |
| Google (Analytics and Tag Manager) | website statistics; only with your consent |
| TikTok | measuring marketing results via a pixel; only with your consent |
| Metorik | order reporting |
| Trustpilot | reviews and review invitations |
| WhatsApp (Meta) | customer service via WhatsApp |
| Provider of the AI language model behind our WhatsApp assistant (Anthropic) | automatically answering WhatsApp messages |
| Accountant and Dutch Tax Administration | accounting and legal obligations |
Some of these parties are established outside the European Economic Area (EEA) or process data there, for example in the United States or Australia. In that case, we ensure that appropriate safeguards are in place, such as an adequacy decision by the European Commission (for example the EU-US Data Privacy Framework) or the European Commission’s standard contractual clauses.
4. WhatsApp customer service with an AI assistant
When you send us a WhatsApp message, our AI assistant Eva replies first. Eva uses your message, your phone number and, if you provide them, your order number and email address to answer your question or look up your order status. Eva only shares order information once your order number and email address match. Eva does not make decisions that have legal effects for you: returns, complaints and exceptions are handled by a member of our team. If you prefer not to communicate with an AI assistant, please email shop@cleanpeptides.eu.
5. Cookies
We use functional cookies that are necessary for the shop to work, for example for the cart, language selection and logging in. For analytics and marketing cookies (such as Google Analytics and the TikTok pixel), we ask for your consent via the cookie banner. You can change your choice at any time via the cookie settings. More information is available in our cookie policy.
6. Security
We take appropriate technical and organisational measures to protect your data, such as an encrypted connection (https), restricted access to customer data and secured administrator accounts. Card payments are processed by our payment service provider; we do not receive your full card details.
7. Minors
We do not sell to anyone under 18 and do not knowingly process the data of minors. If this does happen, we delete the data.
8. Your rights
You have the right to access, rectify or erase your data, to restrict processing, to object to processing based on legitimate interest (including direct marketing) and to receive your data in a common format (data portability). If you have given consent, you can withdraw it at any time; this does not affect processing that took place before.
Send your request to shop@cleanpeptides.eu. We will respond within one month. To prevent misuse, we may ask you to confirm your identity, for example via the email address you used to order. Data we are legally required to keep, such as invoices, cannot be deleted earlier.
Not happy with how we handle your data? Please let us know so we can find a solution. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your country.
9. Changes
We update this privacy policy when our services or the law change. The version date below shows which version applies.
Version 30-09-2026
