This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from yvonneactives.com or yvonneactives.nl (the “Site”). YVONNÊ actives is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG / UAVG).

Controller

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.

We collect Device Information using the following technologies:

• Cookies are data files placed on your device that often include an anonymous unique identifier. We only place non-essential cookies with your consent through our cookie banner. For more information, see our cookie policy, or visit allaboutcookies.org.
• Log files track actions occurring on the Site and collect data including your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
• Web beacons, tags, and pixels are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as “Order Information”. We do not store full payment card details — these are processed directly by our payment provider.

When we talk about “Personal Information” in this Privacy Policy, we are talking about both Device Information and Order Information.

How do we use your personal information?

We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

• Communicate with you about your order;
• Screen our orders for potential risk or fraud;
• Comply with our legal obligations, including Dutch tax law (7-year retention of invoices); and
• When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

Legal bases for processing (GDPR Art. 6)

• Performance of a contract (Art. 6(1)(b)) — for order processing, shipping, customer service, and account management.
• Compliance with a legal obligation (Art. 6(1)(c)) — for tax and accounting records, and to comply with consumer protection law.
• Legitimate interests (Art. 6(1)(f)) — for fraud prevention, Site security, defending legal claims, and limited marketing to existing customers about similar products. You have the right to object to processing on this basis.
• Consent (Art. 6(1)(a)) — for marketing communications to new subscribers, non-essential cookies, and personalised advertising. You may withdraw consent at any time.

Sharing your personal information

We share your Personal Information with third parties only to the extent necessary for the purposes set out above, and only with processors who provide appropriate guarantees under Article 28 GDPR. We have data processing agreements (verwerkersovereenkomsten) in place with all our processors. Categories of recipients include:

• Hosting and infrastructure — Contabo (Germany, EU) for server hosting; TransIP (Netherlands, EU) for domain services.
• Email services — our own self-hosted mail server on EU-based infrastructure.
• Payment processing — Mollie (Netherlands, EU). You can read more about how Mollie processes your data at mollie.com/privacy.
• Shipping carriers — PostNL, DHL, and other carriers, who receive your name and shipping address to deliver your order.
• Analytics providers — [e.g. Google Analytics, Plausible, Simple Analytics — to be confirmed]. Where we use Google Analytics, you can opt out at tools.google.com/dlpage/gaoptout.
• Marketing platforms — [e.g. Meta, Google Ads, email marketing tool — to be confirmed], subject to your consent through our cookie banner.
• Accounting and tax — our accountant and accounting software provider for invoice and tax administration.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We do not sell your personal data.

International transfers

Where personal data is transferred outside the European Economic Area (EEA) — for example, to certain marketing or analytics providers based in the United States — we ensure an appropriate level of protection through one of the following safeguards: an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses (SCCs), or, where required, supplementary technical measures such as encryption.

Behavioural advertising

As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you, where you have given consent. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's educational page at networkadvertising.org. You can manage your cookie and tracking preferences at any time via our cookie banner. You can also opt out of targeted advertising directly with the relevant platforms:

• Meta (Facebook/Instagram): facebook.com/settings
• Google: google.com/settings/ads
• TikTok: tiktok.com/legal
• Pinterest: pinterest.com/settings/privacy
• Snapchat: accounts.snapchat.com

You can also opt out of some of these services via the Digital Advertising Alliance's opt-out portal at youronlinechoices.eu.

Do Not Track

Because there is no industry-wide standard for how Do Not Track signals should be interpreted, our Site does not respond to Do Not Track signals. However, you can manage tracking preferences through our cookie banner.

Your rights

As a resident of the European Economic Area, you have the following rights under the GDPR with regard to your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your personal data in certain circumstances.
• Right to restriction of processing — ask us to limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — withdraw any consent you have given, at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@yvonneactives.com. We will respond within one month, as required by Article 12 GDPR. We may need to verify your identity before acting on your request. Where we transfer your information outside the EEA, we apply the safeguards described above.

Right to lodge a complaint. If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (AP), PO Box 93374, 2509 AJ The Hague — autoriteitpersoonsgegevens.nl. You may also lodge a complaint with the supervisory authority in the EU Member State where you reside.

Data retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including legal, accounting and reporting requirements:

• Order data and invoices: 7 years after the order, as required by Dutch tax law (Article 52 Algemene wet inzake rijksbelastingen).
• Account data: for as long as your account is active; deleted within 12 months of inactivity or on your request.
• Customer service correspondence: 2 years after last contact.
• Marketing data: until you unsubscribe, or after 3 years of no engagement.
• Website analytics data: maximum 26 months.

After these periods, your data is deleted or anonymised.

Security

We apply appropriate technical and organisational measures to protect your personal data, including TLS/SSL encryption of data in transit, secure password hashing, access controls, and regular software updates. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours and, where required, notify affected individuals, in accordance with Articles 33 and 34 GDPR.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. We will post the updated version on this page and update the “Last updated” date below. For material changes, we will provide reasonable notice.

Minors

The Site is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable consent from a parent or legal guardian, in accordance with Article 8 GDPR and the UAVG. If you believe we have inadvertently collected data from a child under 16, please contact us at info@yvonneactives.com and we will delete that information.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at info@yvonneactives.com, or by mail using the address listed above.

Last updated: 19 May 2026.