Privacy Policy
This privacy policy explains which personal data Good Nature Vibe collects via goodnaturevibe.com, under what legal basis, how long we keep it, and the rights you have as a data subject under the General Data Protection Regulation (GDPR).
Data controller
Good Nature Vibe
[Registered address — to be filled in]
Chamber of Commerce: [KvK number] · VAT: [VAT number]
Email: info@goodnaturevibe.com
Website: goodnaturevibe.com
What data we collect
- Account data: name, email address, hashed password (or — if you use Google Sign-In — your Google ID plus name and email from your Google profile).
- Order data: delivery address, billing address, phone number, products ordered, payment method (not full card details — those are handled by our payment provider).
- Communication: messages you send us via contact or customer service forms.
- Technical data: IP address, browser, device, pages visited. After cookie consent, also usage patterns via Google Analytics 4.
- Marketing: newsletter subscription, product reviews you post, wishlist contents.
Purposes and legal basis
| Purpose | GDPR basis |
|---|---|
| Performance of the purchase contract (order, delivery, invoicing) | Art. 6(1)(b) — contract |
| Customer service and complaint handling | Art. 6(1)(b) and (f) |
| Fraud prevention and site security | Art. 6(1)(f) — legitimate interest |
| Legal recordkeeping (tax) | Art. 6(1)(c) — legal obligation |
| Newsletter, retargeting, analytics | Art. 6(1)(a) — consent |
Retention
- Account data: for as long as your account is active. Deleted within 90 days of account closure (except where required for tax).
- Order and invoice data: 7 years (statutory tax retention).
- Cookie consent (hashed IP/UA): 13 months.
- Contact messages: up to 24 months after last contact.
- Newsletter: until you unsubscribe (one-click unsubscribe in every email).
Who we share data with
We only share personal data with parties that help us run the shop under a data processing agreement:
- Payment providers (Mollie, PayPal Braintree) for processing payments.
- Carriers (PostNL, DHL) for delivery.
- Google for Google Analytics 4 (anonymised stats) and Google Sign-In (only if you choose to use it).
- Meta for retargeting ads (only with marketing consent).
- Cloudflare for DDoS protection and caching.
- Hosting provider for storing the shop data.
We never sell personal data. Some of the parties above are based outside the EU (notably the US). In those cases we rely on the European Commission's Standard Contractual Clauses as the transfer mechanism.
Your rights
Under the GDPR you have the right to:
- Access — know what data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — “right to be forgotten” (subject to statutory retention).
- Restriction of processing.
- Data portability — receive your data in a machine-readable format.
- Object to processing based on legitimate interest.
- Withdraw consent for processing that relies on it.
Send a request to info@goodnaturevibe.com. We respond within 30 days. For identity verification we may ask for additional information.
Complaint to supervisory authority
If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.
Cookies
See our separate cookie policy for which cookies we use and how you manage them. Change your cookie preferences.
Changes to this policy
We may update this policy. The current version is always on this page, with the date at the top. We announce material changes via the email address associated with your account.
Contact
Questions or a request to exercise your rights? Email info@goodnaturevibe.com.
