Privacy Policy

Last modified: 03/08/2021

At buyibogaine.nl, protecting your personal details is central to how we run our service. This document outlines exactly how we gather, handle, share, and protect your details whenever you browse our shop or buy from us. We fully respect the rules set by the General Data Protection Regulation (GDPR) — referred to locally in the Netherlands as the Algemene Verordening Gegevensbescherming (AVG) — along with the Dutch Uitvoeringswet AVG (UAVG) .

1. Who We Are

Under the GDPR, we operate as the official data controller . In simple terms, this means we make the decisions on how and why your personal details are handled.

2. Personal Information We Gather

Depending on your actions, we gather several types of personal information, which we have sorted below:

Information Type	What This Includes
Identity Information	Name, online handle, title, birth date
Contact Details	Email, telephone number, billing and delivery addresses
Purchase Records	Items bought, order timeline, payment logs
System Logs	IP addresses, browser specifications, operating system, device setups
Site Activity	Viewed pages, duration of visits, browsing behavior
Communication Preferences	Your choices regarding newsletters and updates

We absolutely do not gather highly sensitive details (like medical or health records) unless you choose to share them with us directly in your messages.

3. How Your Information Reaches Us

We obtain your details through a few distinct pathways:

Information you share directly: This happens when you register a profile, check out, sign up for updates, or send us a message.
Automatic recording: Our site uses cookies and background tracking scripts to log how you navigate our pages.
External partners: We receive updates from payment gateways, delivery couriers, and traffic tracking tools.

4. Why and on What Legal Ground We Process Your Information

European law dictates that we need a clear legal justification to handle your private records . Here is exactly why we process your details, along with the legal grounds:

Reason for Processing	Legal Justification
Fulfilling and shipping your orders	Contractual obligation — we must handle this to get your packages delivered
Managing your user profile	Contractual obligation — required to keep your account functional
Sending order updates	Contractual obligation — vital for resolving queries and providing support
Meeting tax and accounting rules	Statutory duty — mandatory under Dutch tax legislation
Sending promotional emails	Your active consent — which you are free to revoke whenever you want
Optimizing our online store	Legitimate business interests — to make browsing smoother and more efficient
Keeping the platform safe from fraud	Legitimate business interests — protecting our store and our customers from security threats

5. Who We Share Your Information With

We only pass your details to reliable external partners who help us run our store day-to-day:

Partner	Role	Shared Details
Payment Gateways	Processing transaction fees	Your name and billing info
Delivery Services	Shipping your orders to your door	Name, shipping destination, and phone number
Email Delivery Platforms	Distributing order receipts and newsletters	Name and email address
Traffic Monitors	Studying how users browse our site	Anonymized tech logs and page-view habits
Web Hosting and IT Support	Keeping our servers and website secure	Server logs and technical details

Every external partner we work with is bound by strict legal contracts. They are only permitted to handle your files for these exact tasks, fully adhering to European privacy laws.

6. Sending Data Beyond Europe

Sometimes, your details might be sent to and handled in countries outside the European Economic Area (EEA) . If we do this, we always make sure your records are protected by strong security checks, including:

Standard Contractual Clauses (SCCs) recognized directly by the European Commission
Adequacy rulings issued by the European Commission confirming that the destination country provides a strong level of data protection

7. Our Data Retention Policy

We keep your records only for the exact duration required to complete the tasks we gathered them for. This includes:

Information Type	Storage Duration
Purchase Records	7 years (mandated by Dutch tax and bookkeeping laws)
Profile Details	Until you delete your account, plus an extra 2 years
Newsletter Preferences	Until you decide to opt out or unsubscribe
System Logs	26 months (specifically for website analytics)

Once these timelines expire, we permanently wipe your files or completely strip them of any identifying details.

8. Your Legal Rights Under European Law

The GDPR grants you a series of legal protections and powers over your own information :

Your Right	What It Means
Access	You can ask us for a complete copy of the information we have saved about you
Correction	You can have us update any incorrect or incomplete records
Erasure	You can ask us to wipe your files entirely (often called the ‘right to be forgotten’)
Restriction	You can tell us to pause or limit how we use your information
Data Portability	You can request your files in a structured, commonly used digital format
Objection	You can object to our handling of your data when we rely on business interests
Withdrawal of Consent	You can cancel your permission for marketing updates whenever you choose

If you want to use any of these options, just drop us a line at:

Email: [email protected]

We will look into your request and get back to you within 30 days , as legally required.

9. Cookies

We use cookies to help our store run smoothly. These are tiny text documents saved directly on your computer or phone.

The kinds of cookies we employ:

Cookie Category	Why We Use It
Necessary Cookies	Crucial for fundamental features like your shopping basket and checkout
Performance Cookies	Helps us study how people browse and use our store
Preference Cookies	Saves your chosen settings so you don’t have to re-enter them
Targeting Cookies	Shows you relevant offers (only active if you agree to them)

You can easily adjust these preferences by altering your browser options or using the cookie banner on our site.

10. Keeping Your Data Safe

We put strong technical defenses and structural checks in place to guard your personal details from leaks, hacks, unauthorized changes, or accidental loss. These include:

SSL/TLS encryption to protect all data moving to and from our site
Highly secure servers protected by robust firewalls and strict access credentials
Frequent security audits and regular system patches
In-house training to make sure our team handles privacy safely

11. Protecting Minors

Our web shop is strictly built for adults aged 18 and older. We never intentionally gather information from anyone younger than this. If you think a minor has shared their details with us, please let us know right away so we can wipe it.

12. Filing a Complaint

If you feel we have fallen short of our legal obligations, you can file an official complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) :

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
The Netherlands
Phone: +31 (0)88 – 180 5250
Website: www.autoriteitpersoonsgegevens.nl

13. Updates to This Policy

Every now and then, we might adjust this policy. If we make major changes, we will let you know by uploading the revised version here and updating the date at the top of the page.

14. Get in Touch

If you have any questions about how we treat your private details, please reach out to us: