Privacy Policy

1. Who we are — and how to contact us

2. What personal data we collect, and why we collect it

2.1 Personal data

Your personal data is saved when you place an order. This personal order data (see paragraph  consists of: your full name, your billing address and post code, — optionally — a separate billing address and post code, your phone number, email-address, a list of products you ordered, optional order notes, your IP-address, and finally your payment method choice. For more information on how long we retain this data, please see paragraph 3: ‘How long we do we retain your data?’.

2.2 Mailing list

We run our Bottle Release Mailing List through Mailchimp, a mailing provider. Mailchimp collects the following information, which we in turn use to monitor interaction statistics:

Device information: We collect information about the device and applications you use to access emails sent through our Service, such as your IP address, your operating system, your browser ID, and other information about your system and connection.

Usage data: It is important for us to ensure the security and reliability of the Service we provide. Therefore, we also collect usage data about your interactions with campaigns (and/or emails) sent through the Service, which may include dates and times you access campaigns (and/or emails) and your browsing activities (such as what pages are viewed and which emails are opened). This information also allows us to ensure compliance with our Standard Terms of Use and Acceptable Use Policy, to monitor and prevent service abuse, and to ensure we attain certain usage standards and metrics in relation to our Service. We also collect information regarding the performance of the Service, including metrics related to the deliverability of emails and other electronic communications that our Members send through the Service. This information allows us to improve the content and operation of the Service and facilitate research and perform analysis into the use and performance of the Service.

Mailchimp.com | Privacy for Contacts

2.3 Cookies

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Edit your cookie preferences.

2.4 Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

2.5 Analytics

We use Google Analytics to enable insights on general user activity. Google analytics collects the following data about our users:

  • IP address
  • Time of visit, pages visited, and time spent on each page of the webpages
  • Referring site details (such as the URI a user came through to arrive at this site)
  • Type of web browser
  • Type of operating system (OS)
  • Flash version, JavaScript support, screen resolution, and screen color processing ability
  • Network location and IP address.

Google Analytics collects first-party cookies, data related to the device/browser, IP address and on-site/app activities to measure and report statistics about user interactions on the websites and/or apps that use Google Analytics.

3. Who we share your data with

3.1 payment providers

When you pay for a product in our store, your payment data is shared with our payment providers. Depending on which payment provider you choose, please consult the one of the privacy policies below for more information on how you data is processed. Please note: all payment options, except Paypal, are handled by Mollie.

3.2 Analytics

The data collected by Google Analytics is shared with Google. For more information, please see this article on Google Analytics’ data practices.

4. How long do we retain your data?

4.1 Retaining personal personal data

Every first of January, we purge our website database of completed orders older than 1 year, as we do not expect to have any reason to contact you about your order anymore, and for you to have any questions regarding your order information. This means that if you place and complete an order on the second of January of the year 2021, at the latest, your data will be purged on the first of January 2023, and thus has been on our server for no more than 2 years. However, in accordance with Dutch tax regulations, we do keep an offline copy of our outgoing invoices for 7 years, including your data (except for your IP-address). In short:

Copies of your data saved on our server (for up to 2 years after date of order):

  • Name
  • Billing Address, and Post Code
  • Optional Separate Shipping Address, and Post Code
  • Phone Number
  • Email-Address
  • Products ordered
  • Optional Order Notes
  • IP-address
  • Payment Method Choice

Copies of your data saved offline (up to 7 years after date of order):

  • Name
  • Billing Address, and Post Code
  • Optional Separate Shipping Address, and Post Code
  • Phone Number
  • Email-Address
  • Products ordered
  • Optional Order Notes
  • Payment Method Choice

For users that register on our website, we also store the personal information they provide in their user profile. Nobody has access to the user’s password, as this is stored in an encrypted password hash format. This means we do not have access to your password. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Without user action, the personal information in user profiles is stored indefinitely.

4.3 Cookie storage

To find out for how long our web store system store cookies in your browser, please visit Woocommerce’s page on cookies.

You can also edit your cookie preferences here.

5. What rights you have over your data

If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Request can be made by contacting us through [email protected].

7. How we protect your data

7.1 Connection and data transmission security

Your connection with our site, and with your payment provider during checkout, is through SSL and the HTTPS-protocol. This insures no man-in-the-middle attacks can be executed. We never transport personal data over unencrypted connections between in-company computers. In principle, we try to store and move around personal data as little as possible.

7.2 Server security

Our staff is instructed to only use high quality passwords, generated and stored using password management systems. Also, access to our servers is controlled with an extra second layer of two-factor authentication. Our system and web store infrastructure are updated as frequently as possible, ensuring the lowest risk of being targeted through security bugs or exploits.

7.3 Archive security

Our offline data, archived only for tax-related purposes, is stored on an external storage system with no access to the internet, and in a physically separated, highly secured storage location.

8. What data breach procedures we have in place

In the unlikely event of a data breach, we will follow the guidelines put out by the Dutch Data Protection Authority (DDPA), found here.

9. What third parties we receive data from

We receive (aggregated) data from the following providers:

Google Analytics

Google Analytics shows us statistical information on visitor counts, geographical origin, and other anonymized, grouped data. We do not use Google Analytics to track individual users, and do not have plans to do so in the near future.

Mailchimp

Mailchimp shows us insights on user engagement regarding our Bottle Release Mailing List. This data is not used in any other way than to see how effective email campaigns were in engaging our customers as a group. At the time of writing, we do not use this data to profile our customers individually, nor do we have any plans to do so in the future.

10. What automated decision making and/or profiling we do with user data

Currently, we do not use any automated processes that require user data in order to make decisions.

If you have any questions or requests regarding privacy matters, please do not hesitate to contact us through [email protected]. If you wish to edit your cookie preferences, you can do so over here.