Privacy policy

At Untamed Kombucha, we value your privacy and process only the data necessary to improve our services. We treat the information we collect about you and your use of our services with care and never share it with third parties for commercial purposes.

This privacy policy applies to the use of our website and the services accessed on it. The effective date for the validity of these terms is January 26, 2023. Upon publication of a new version, all previous versions will expire. In this policy, we describe what data about you is collected by us, how it is used, with whom it may be shared under what conditions, and how we store and protect your data from misuse. We also explain your rights regarding the personal data you provide to us.

Data Processing

We process your data in the following ways, store it in the locations listed, use the security techniques listed, and share the data with the parties listed.

Webshop Software

Shopify

Our website is developed using Shopify software. Personal data that you provide to us for the purpose of our services is shared with Shopify. They have access to your data to provide us with technical support and will never use it for other purposes. Based on our agreement with them, Shopify is required to implement appropriate security measures, such as the use of SSL encryption and a strong password policy. Shopify uses cookies to collect technical information related to your use of the software, but no personal data is collected or stored. Shopify also reserves the right to share collected data within its own group to further improve its services.

Web hosting

Shopify

We purchase web hosting and email services from Shopify. They process personal data on our behalf and do not use it for their own purposes. However, they may collect metadata about the use of the services, which are not considered personal data. Shopify has taken appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. They are also bound to confidentiality under the agreement.

We also use Shopify for our regular business email traffic. They have taken appropriate technical and organizational measures to prevent abuse, loss and corruption of your and our data as much as possible. Shopify does not have access to our inbox and we treat all our email traffic confidentially.

Payment Processors

Mollie

For handling (part of) the payments in our store we use the platform of Mollie. Mollie processes your name, address, place of residence and payment information such as your bank account or credit card number. They have taken appropriate technical and organizational measures to protect your personal data. They also reserve the right to use your data to further improve the service and to share (anonymous) data with third parties. All the above guarantees regarding the protection of your personal data also apply to those parts of Mollie's services for which it engages third parties. They will not retain your data longer than permitted under the legal terms.

Shipping and logistics

DHL

When you place an order with us, we use the services of DHL to deliver your package. This requires us to share your name, address and place of residence data with DHL. They use this data only for the execution of the agreement. In the event that DHL engages subcontractors, they will also make your data available to these parties.

Invoicing and accounting

Moneybird

For our administration and accounting we use the services of MoneyBird. As part of this process, we may share your personal data, such as your name, address and place of residence, as well as data related to your order. This data is used to generate and administer sales invoices. You can be confident that your personal data is transmitted and stored in a secure and protected manner. MoneyBird is bound by strict confidentiality agreements and will not use your personal data for other purposes than described above.

Purpose of data processing

General purpose of processing

The purpose of data processing at our company is to provide our services to you. We use your data only in direct relation to the order you have given us and we do not use your data for targeted marketing. In the event that we need to contact you, we will always ask for your express permission to do so. We also assure you that your data will not be shared with third parties except to fulfill accounting and other administrative obligations. These third parties are also bound by strict confidentiality agreements.

Data collected automatically

Our website may also automatically collect certain data, such as your IP address, web browser and operating system, to improve our services. This data is not considered personal information.

Cooperation with tax and criminal investigations

In some cases, we may be legally required to share your information in connection with government tax or criminal investigations. While we will comply with these requests, we will always strive to protect your privacy within the limits of the law.

Retention periods

Finally, we will retain your information for as long as you are our customer. As soon as you indicate that you no longer wish to use our services, we will also take this as a request to delete your data. However, due to administrative obligations we may be obliged to keep invoices containing your personal data for a certain period of time. In such cases, only authorized employees have access to your customer profile and any documents we have prepared in response to your instructions.

Your Rights

As a data subject, you have certain rights under Dutch and European law with respect to personal data processed by us or on our behalf. We will explain these rights and how you can invoke them.

To prevent misuse, we will only send copies and transcripts of your data to an e-mail address already known to us. If you wish to receive the data at another e-mail address or by post, we will ask you to verify your identity. We keep a record of the requests completed, and in the case of a forgotten request we will manage anonymized data. you will receive all copies and transcripts of data in the machine-readable format used in our systems.

You have the right to file a complaint with the Personal Data Authority at any time if you suspect that we are using your personal data inappropriately.

Right to portability

You have the right to receive the data we collect and process that relates to you or can be linked to you and have it transferred to another party. you can make this request to our designated privacy contact. We will respond to your request within 30 days. If your request is approved, we will send you copies or copies of all information about you that we have collected or processed on our behalf by other processors or third parties, to the e-mail address on file. In such cases, we may no longer be able to continue providing our services because the secure connection of data files can no longer be guaranteed.

Right of objection and other rights

You have the right to object, where appropriate, to the processing of your personal data by or on behalf of Untamed Kombucha. If you object, we will cease processing immediately until your objection is resolved. If your objection is well-founded, we will make copies and/or transcripts of data we collect and process available to you and permanently cease processing.

You also have the right not to be subject to automated individual decision-making or profiling. We do not collect and process your data in this way. If you believe that this applies to you, please contact our designated privacy contact.

Right of rectification

You have the right to have any data processed or handled by us that relates to you or can be traced back to you rectified. you can submit a request to our privacy contact and you will receive a response within 30 days. If your request is granted, we will send you a confirmation that the data has been modified at the known e-mail address.

Right to restriction of processing

You have the right to restrict the data we collect and process that relates to you or that can be linked to you. you may direct this request to our designated privacy contact. We will respond to your request within 30 days. If your request is approved, we will confirm via the email address on file that the data will no longer be processed until you lift the restriction.

Right of acces

You have the right to access all information that we process or have processed and that relates to or can be traced back to you. You can submit a request to our privacy contact and you will receive a response within 30 days. If your request is granted, we will send you a copy of all data together with a list of the processors who hold this data, indicating the category under which we have stored this data, at the known e-mail address.

Cookies

Google Analitycs

Our website uses cookies from the American company Google, as part of the "Analytics" service. We use this service to track and receive reports on how visitors use the website. This processor may be required by applicable laws and regulations to provide access to this data. We collect information about your surfing behavior and share this data with Google. Google may use this information in combination with other data sets to track your internet activities. Google uses this information, among other things, to offer targeted advertisements (Adwords) and other Google services and products.

Third party cookies

If third-party software solutions use cookies, it is mentioned in this privacy policy.

Privacy policy changes

We reserve the right to make changes to our privacy policy at any time. The most recent version will always be available on this page. If changes to our privacy policy affect the way we process data already collected about you, we will notify you by email.