Legal
Privacy Policy
We process personal data carefully and in line with the EU General Data Protection Regulation (GDPR).
1. Who is the data controller?
Nutrio Group B.V.
Coolsingel 104, 3011 GA Rotterdam, Netherlands
KvK 839 762 13 · VAT NL863056593B01
Email: info@nutriogroup.com
2. What data we collect
- Name
- Email address
- Shipping and billing address
- Phone number (if you provide one)
- Order and payment information — payments are processed by Shopify and its payment providers. We never receive your full card details.
- Technical data needed to serve this website securely, such as your IP address in server logs.
We do not process health records. Any health-related information you choose to share with us by email is used only to answer your question.
3. How we use your data
- Processing, shipping and invoicing your order (performance of a contract)
- Answering customer service questions (performance of a contract)
- Meeting legal obligations, in particular tax and accounting rules (legal obligation)
- Preventing fraud and keeping the website secure (legitimate interest)
We do not sell your data. We share it only with the parties needed to complete your order: Shopify (shop and checkout platform), the payment providers shown at checkout, and our carrier. We send marketing email only if you have given your consent, and every such email includes an unsubscribe link.
4. Cookies and tracking
This landing page sets no advertising or tracking cookies. Checkout takes place on Shopify's own domain, which sets the functional cookies needed to keep your basket and payment session working. Full details are on our Cookie Policy page.
5. Your GDPR rights
You have the right to access your data, to have it corrected, to have it deleted, to restrict or object to processing, to withdraw consent, and to receive your data in a portable form. To exercise any of these rights, email info@nutriogroup.com and we will respond within one month.
You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your own EU country.
6. How long we keep your data
Order and invoice records are kept for 7 years, as required by Dutch tax law. Customer service correspondence is kept for up to 2 years. Marketing consent records are kept until you withdraw your consent, and for 1 year afterwards as proof that the request was honoured.
7. Security
This website and the Shopify checkout use encrypted connections (TLS). Access to order data is limited to the people who need it to fulfil your order.
These pages are standard templates. Have them reviewed by a lawyer before serious cross-border EU sales.