Privacy policy

Privacy Policy

Version: 6 August 2026

This Privacy Policy explains which personal data Zooo Nutrition V.O.F. processes, why we do so, with whom we share data, how long we retain it, and which rights you have. This policy applies to our online stores, orders, customer service, marketing, and other interactions with Zooo Nutrition.

1. Who is responsible?

Zooo Nutrition V.O.F. is the controller of the personal data described in this policy.

Registered office address: Lelielaan 21, 1616 ER Hoogkarspel, The Netherlands
Chamber of Commerce number: 86752405
VAT number: NL864076630B01
Email for privacy questions and requests: info@zooonutrition.com
Phone Damian: +31 6 83200217
Phone Richard: +31 6 50803110

2. Which personal data do we process?

Depending on how you use our online store, we may process the following categories:

  • Identification and contact details: name, address, country, email address, and telephone number.
  • Order and contract data: products, quantities, price, discounts, order number, delivery preferences, returns, complaints, and warranty communications.
  • Payment and billing data: payment method, payment status, billing information, partially masked payment references, and data required for refunds. We do not normally receive or store full payment card details.
  • Account data: login and account information, preferences, saved addresses, and order history.
  • Communications: emails, chat or contact-form messages, telephone notes, and information you provide yourself, such as photographs relating to a complaint.
  • Marketing and preference data: newsletter subscription, consent, opt-outs, interests, and campaign data.
  • Technical and usage data: IP address, device and browser information, language, approximate location at country or regional level, cookie IDs, pages visited, clicks, referring URL, and interactions with our online store or emails.
  • Fraud and security data: signals necessary to prevent or investigate misuse, payment fraud, account misuse, and security incidents.
  • Review and social-media data: a review, username, any photograph or video, and public interactions where you publish or provide them yourself.

We do not ask for health data. Only enter medical or other sensitive information in a free-text field where this is genuinely necessary. If you voluntarily share such information in relation to a complaint or safety report, we use it only to handle your request, assess safety, and comply with legal obligations.

3. Where does the data come from?

We usually receive data directly from you, for example when you place an order, create an account, subscribe to a newsletter, make a return, leave a review, or contact customer service. We may also receive data from payment providers, fulfilment and delivery partners, our online-store provider, advertising and analytics partners, review platforms, and social media where you communicate with us through them or have provided consent.

4. Why do we process data and on what legal basis?

We process personal data only where there is a valid legal basis.

  • Ordering, payment, delivery, and returns: to perform your contract, process payment, deliver your parcel, and handle returns or refunds. Legal basis: performance of the contract and steps taken before entering into the contract.
  • Account and customer service: to manage an account, answer questions, resolve complaints, and provide warranty service. Legal basis: performance of the contract and our legitimate interest in providing good customer service and maintaining records.
  • Statutory administration and product safety: for tax and accounting obligations, regulatory enquiries, traceability, safety reports, and any product recalls. Legal basis: legal obligation and, where necessary, legitimate interest in safe products and legal claims.
  • Fraud, security, and misuse: to protect payments and accounts, prevent fraud, and investigate incidents. Legal basis: our legitimate interest in a secure and reliable online store. Where processing is necessary to comply with a legal obligation, we rely on that obligation.
  • Newsletter and offers: on the basis of your consent or, where permitted by law, for our own similar products to existing customers, with an easy opt-out. You can always unsubscribe free of charge.
  • Personalisation, analytics, and advertising: with your consent, to measure use of the online store, create audiences, personalise advertisements, and evaluate campaign performance. Consent may not be required for strictly necessary or privacy-friendly measurements; this is explained further in the Cookie Policy.
  • Reviews: to send a review invitation, collect reviews, and display published reviews. Legal basis: consent or our legitimate interest in reliable customer feedback, depending on the specific method and applicable rules. You may object to review invitations.
  • Improving our services: to analyse aggregated sales, service, and usage information. Legal basis: our legitimate interest in improving products and processes. Where possible, we use anonymised or pseudonymised data.
  • Legal claims: to exercise rights, handle disputes, and preserve evidence. Legal basis: legitimate interest and, where applicable, a legal obligation.

Where we rely on a legitimate interest, we balance our interest against your rights and reasonable expectations and apply appropriate safeguards. You may object to this processing; see section 10.

5. Email, abandoned baskets, and direct marketing

If you subscribe to the newsletter, we use your email address and preferences to send relevant communications. Every commercial email contains an unsubscribe link. Opting out of marketing does not affect necessary service communications about an order, payment, return, safety notice, or account.

If you enter data while ordering but do not complete the order, we may temporarily retain that information to restore your basket, investigate technical issues, or—only where legally permitted—send a reminder. You can stop such marketing communications at any time.

6. Cookies and similar technologies

We use cookies, pixels, local storage, and similar technologies. Strictly necessary technologies provide functions such as the basket, checkout, security, language, and privacy preferences. We use analytics, personalisation, and marketing technologies only where there is a valid legal basis and, where required, after you have provided consent.

You can make a choice, refuse, or later withdraw your consent through the cookie banner. More information, including categories and providers involved, can be found in our Cookie Policy.

7. With whom do we share personal data?

We do not sell your personal data. We share only the data necessary for the relevant purpose, subject to appropriate agreements and security measures. Important recipients and service providers include:

  • Online store and hosting: Shopify, for the online store, checkout, hosting, and account and order management.
  • Payment: Mollie, Klarna, and PayPal, and any other payment methods you select at checkout. Payment service providers may also be independent controllers for their own statutory duties, fraud checks, or credit assessments.
  • Fulfilment and delivery: Rimco Fulfilment and the carriers PostNL, DHL, and bpost, for storage, order processing, address labels, delivery, tracking, and returns.
  • Email and customer communications: Klaviyo, for newsletters, automated emails, and preferences.
  • Consent management: Usercentrics, for recording and managing cookie choices.
  • Analytics and advertising: Google (including Analytics and Ads), Meta, and TikTok, insofar as activated and permitted by your cookie choice. In certain situations, these parties may be independent or joint controllers.
  • Reviews: Trustpilot and any other review tools shown in the online store, for review invitations, publication, and verification.
  • Technical Shopify apps: suppliers that provide functions such as parcel tracking, invoices, subscriptions, bundles, translations, customer service, or online-store optimisation, insofar as you or we use that function.
  • Professional advisers and authorities: accountant, legal adviser, insurer, law-enforcement, or regulatory authorities where necessary or legally required.

Some recipients independently determine how they process personal data. Their own privacy policies then also apply. We never disclose more data than is reasonably necessary.

8. Transfers outside the EEA

Some service providers or group companies are located outside the European Economic Area (EEA), potentially including the United States or Canada. Where personal data is processed outside the EEA, we use a valid transfer mechanism, such as a European Commission adequacy decision, the EU–US Data Privacy Framework for certified organisations, or standard contractual clauses adopted by the European Commission. Where necessary, we assess additional technical and organisational measures.

You can request information about the applicable safeguards by contacting info@zooonutrition.com.

9. How long do we retain data?

We do not retain personal data longer than necessary for its purpose, unless a statutory retention obligation or ongoing dispute requires a longer period. In general, we apply the following periods:

  • Order, payment, and billing data: at least 7 years for tax records; data covered by an applicable EU One Stop Shop scheme may be retained for 10 years.
  • Account data: for as long as the account is active and normally for no more than 2 years after closure or prolonged inactivity, except for data forming part of statutory records.
  • Customer service, returns, warranty, and complaints: normally 2 years after completion; longer where necessary for a statutory warranty, safety issue, or legal claim.
  • Incomplete checkout or abandoned basket: normally no more than 90 days, unless the information becomes part of an order or is deleted earlier.
  • Newsletter data: until you unsubscribe. We may then retain a minimal opt-out record and proof of consent for as long as necessary to respect your choice and demonstrate compliance, normally no more than 5 years.
  • Cookie and consent records: for the period shown in the preference centre and, as proof of consent, normally no more than 5 years after registration or withdrawal.
  • Security and fraud logs: normally no more than 12 months, or longer where a specific incident, investigation, or legal obligation requires this.
  • Reviews: for as long as the review is published or until you request deletion, taking account of statutory exceptions and the review platform’s policy.
  • Data relating to a dispute or legal claim: for as long as the applicable limitation or retention period continues.

At the end of the applicable period, we delete or anonymise the data unless further retention is required or permitted.

10. Your privacy rights

Where the statutory conditions are met, you have the right to:

  • information about and access to your personal data;
  • rectification of inaccurate or incomplete data;
  • erasure of data;
  • restriction of processing;
  • data portability for data you have provided to us;
  • object to processing based on legitimate interest and always to direct marketing;
  • withdraw consent without affecting the lawfulness of earlier processing;
  • lodge a complaint with a supervisory authority.

Send a request to info@zooonutrition.com. State which right and which data or order your request concerns. We will generally respond within one month. For a complex request, we may extend the period as permitted by law; you will be informed of this within the first month.

We may request additional information to verify your identity, but will not ask for more than is necessary. Do not send a full copy of your identity document on your own initiative. If a copy is genuinely necessary, you may obscure unnecessary details and the photograph and write “copy for Zooo Nutrition privacy request” together with the date across the copy.

11. Automated decision-making

Zooo Nutrition itself does not make decisions based solely on automated processing that produce legal effects for you or similarly significantly affect you. Payment providers such as Klarna, PayPal, or Mollie may perform automated fraud, identity, or credit assessments for their own services. They independently determine the means and purposes; consult their privacy policies and contact the relevant provider to exercise rights relating to such processing.

12. Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, and misuse. These include access restrictions, secure connections, management of user rights, agreements with service providers, and incident procedures. No system is entirely free of risk; contact us immediately if you suspect misuse or a personal data breach.

13. Children

Our online store is not intended to collect personal data from children under 16 without consent. Do you believe a child has provided us with data without valid consent? Contact us so that we can investigate and, where necessary, delete it. The age and safety warnings on the product label always apply to the use of food supplements.

14. Complaint to the supervisory authority

We would be happy to resolve privacy questions directly with you first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If you live in another EU or EEA country, you may also contact the data protection authority in your country of residence.

15. Amendments

We may amend this Privacy Policy when our services, suppliers, or legal obligations change. The current version is available on the website. We will inform you appropriately of material changes. The version date appears at the top.

Last updated: 6 August 2026