Privacy and Cookies Policy

Last updated: 22 April 2026.

1. General Information and Administrator

This Privacy Policy sets out the rules for processing and protecting the personal data of individuals using the online shop. esteeshop.nl. This document has been prepared to fulfil the information obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

The data controller is the company Estée Lashes registered at: Zalkerbos 145, 2716KG Zoetermeer, The Netherlands, registered with the Chamber of Commerce under number KVK: 89458028.

2. Basis and purposes of data processing

Personal data at Estee Lashes is processed solely for specific, legitimate purposes:

• Order fulfilment (Art. 6(1)(b) GDPR): Processing is necessary for the performance of the sales agreement, including shipping goods via PostNL and processing payments.
• Tax and accounting obligations (Art. 6(1)(c) GDPR): Storing invoices and purchase documentation in accordance with Dutch tax law.
• Newsletter and marketing (Art. 6(1)(a) GDPR): Sending information about new products and promotions based on the user's voluntary consent.
• Contact (Art. 6(1)(f) GDPR): Handling inquiries submitted via the contact form, chat, or directly to the email address, which constitutes a legitimate interest of the Controller.

3. Type of data collected

We only collect data to the extent necessary to provide you with the highest level of service. Depending on your activity in the store, this may include:

Activity	Data scope
Placing an order	Full name, delivery address, phone number, email address, company details (optional), VAT number (optional).
Account registration	Login, email address, password (encrypted), order history.
Newsletter Sign-up	Email address, first name.
Contact (Chat/Email)	Email address, message content, username.

4. Data recipients

To ensure the smooth operation of the store, your data may be transferred to trusted third parties with whom the Administrator has appropriate data processing agreements:

• Courier companies PostNL and other logistics operators for parcel delivery.
• Payment operators: Mollie, iDEAL, Stripe or PayPal for secure transaction authorisation.
• Technical support: Hosting company and IT service providers managing a WooCommerce system.
• Marketing Mailchimp (newsletter management), Google Analytics (analytics), Meta/Facebook (Facebook Pixel).

5. Data retention period

We store personal data for the period necessary to fulfil the purposes described in this policy:

• Order data: for a period of 7 years (requirement of the Dutch tax authorities - Belastingdienst).
• User account data: until the account is deleted by the Customer.
• Marketing data (Newsletter): until the user withdraws their consent.
• Communication (Chat/Email): for the period necessary to resolve the reported issue.

6. User Rights (GDPR)

In connection with the processing of personal data, each user has the following rights:

• Data access law You can ask what data we hold about you.
• Right of reply You have the right to correct outdated or incorrect data.
• The right to erasure ("right to be forgotten"): You can request the deletion of data, unless tax obligations prevent it.
• The right to restrict processing You can request that we stop actively processing your data, but not delete it.
• Right to data portability You can request the data in a machine-readable format.
• Right to object Regarding processing for marketing purposes.

To exercise your rights, please write to us at: hello@esteeshop.nl.

7. Newsletter e Mailchimp

Our newsletter is powered by Mailchimp (The Rocket Science Group LLC). By subscribing to the newsletter, your data (name and email) will be transferred to Mailchimp's servers. This provider guarantees a high level of data protection in accordance with international standards. You can unsubscribe at any time by clicking the "Unsubscribe" link located in the footer of each message.

8. Analytical and marketing tools

The shop esteeshop.nl uses tracking tools that help us optimise our offerings and display personalised advertisements:

• Google Analytics Collects anonymous information about website visits (time spent, products viewed).
• Facebook Pixel: It allows us to show you ads on Facebook and Instagram based on the products you've viewed in our shop.

Cookies

Cookies are small text files saved on your device. We divide them into:

• Essential They enable the shopping basket and login functionality. Without them, the shop cannot operate.
• Analytical They help us understand how you navigate the shop.
• Marketing They are used to tailor adverts to your interests.

You can change your browser's cookie settings at any time; however, this may affect the proper functioning of some store features.

10. Safety and SSL

The security of your data is our priority. All communication between your browser and our server is encrypted using a certificate SSL (Secure Socket Layer). This ensures your passwords and contact details are safe during transmission.