Privacy policy

Last updated: 26 October 2026

This policy explains what personal data PuraSangre collects, why, who we share it with and what your rights are under the General Data Protection Regulation (GDPR, in Dutch AVG).

1. Controller

V.O.F. PuraSangre, Lelystad, the Netherlands (full address in our Legal Notice) · KvK 99714817 · info@purasangre.nl · +31 6 13957169. For any privacy question, write to info@purasangre.nl.

2. What we collect

Contact and order details: name, email, phone number, billing and delivery address, order history and, for business customers, company name and VAT number.
Payment details: the payment method used. Card details are handled by our payment provider; we never see or store them.
Messages: what you send us by email, contact form or live chat.
Reviews: the name and content of any product review you choose to publish.
Website use: IP address, device and browser, pages visited and how you arrived, through cookies and similar technologies (see section 8).

3. Why we use it and on what legal basis

Purpose	Legal basis (GDPR)
Processing and delivering your order, sending tracking information	Performance of the contract, Art. 6(1)(b)
Invoicing and accounting	Legal obligation, Art. 6(1)(c)
Customer service, claims and preventing fraud	Legitimate interest, Art. 6(1)(f)
Service emails about your order and, if you are a customer, emails about similar products (you can unsubscribe at any time)	Legitimate interest, Art. 6(1)(f)
Newsletter, if you subscribe	Consent, Art. 6(1)(a)
Statistics and advertising cookies	Consent, Art. 6(1)(a)

4. Who we share it with

We only share data with service providers who need it to do their job for us, under data processing agreements:

Shopify — our online store platform, including checkout, customer accounts, live chat and order emails.
Shopify Payments / Stripe — payment processing.
DHL — delivery of your order.
Judge.me — product reviews.
Google (Analytics, Ads, Merchant Center), Meta (Facebook and Instagram) and TikTok — statistics, advertising and selling on those channels, only with your consent where cookies are involved.
Shopify Messaging, Shopify Forms and Translate & Adapt — our email, form and translation tools.

We never sell your personal data.

5. Transfers outside the EU

Some providers (such as Shopify, Google, Meta and TikTok) may process data outside the European Economic Area. In that case we rely on an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework, where the provider is certified) or on the European Commission's standard contractual clauses.

6. How long we keep it

Orders and invoices: 7 years, as required by Dutch tax law.
Customer accounts: while the account is active, and deleted within 2 years of the last activity or when you ask.
Claims and customer service messages: up to 2 years after the matter is closed.
Cookie data: as set out in the cookie table in our Legal Notice.

7. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. You can withdraw your consent at any time; this does not affect what we did before. Email info@purasangre.nl; we reply within one month. We may ask you to confirm your identity, but never for a copy of your passport or ID card. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in your own EU country.

8. Cookies

We use necessary cookies to run the store, and statistics and advertising cookies only if you accept them in our cookie banner. You can change your choice at any time through the cookie settings link at the bottom of every page. The full list is in our Legal Notice.

9. Security and children

We protect your data with the security measures of our platform and providers, and only the PuraSangre team can access it. Our store is not aimed at children, and we do not knowingly collect data from anyone under 16.