PRIVACY POLICY – CURL-E-SOAP

Last updated: [25-08-2025]

At Curl E Soap, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have under applicable data protection laws, including the General Data Protection Regulation (GDPR).

Who We Are

Curl E Soap
Brink 19, 1097TT AMSTERDAM
THE NETHERLANDS
Chamber of Commerce (KvK) number: 96587652
Email: support@curlesoap.com

Data We Collect

When you use our website or purchase from us, we may collect:

  • Contact and order details: name, billing and shipping address, phone number, email.
  • Payment information: processed securely by third-party providers (e.g., iDEAL, PayPal, credit card). We do not store full payment card details.
  • Communication data: when you contact us via email, forms, or social media.
  • Website data: IP address, browser type, pages visited, usage statistics (through cookies and analytics).
  • Marketing preferences: if you subscribe to our newsletter.

How We Use Your Data & Legal Basis

We only process personal data for legitimate purposes and on a lawful basis under GDPR:

  • Contractual necessity: to process and deliver your orders, provide customer service

  • Legal obligation: to comply with tax and accounting requirements.

  • Consent: when you sign up for newsletters or other marketing communications.

  • Legitimate interest: to improve our services, analyze website use, and prevent fraud.

Sharing Your Data

We do not sell your personal data. We only share it with trusted third parties necessary for our services, including:

  • Payment processors (e.g., iDEAL, PayPal, Stripe).

  • Delivery services (e.g., PostNL, DHL).

  • IT and hosting providers (for running our website).

  • Analytics providers (e.g., Google Analytics, if used).

All parties only process your data in line with GDPR (Algemene Verordening Gegevens (AVG) requirements.

Data Retention

We will not keep your personal data longer than necessary:

  • Order and invoice data: 7 years (required by tax law).

  • Account and communication data: as long as needed to provide services or until you request deletion.

  • Newsletter data: until you unsubscribe.


  • Cookies: see our Cookie Policy for specific durations.


Cookies

We use cookies and similar technologies to ensure the website works properly, improve user experience, and analyze website traffic. When you first visit our website, you will be asked for consent to place non-essential cookies. More details can be found in our Cookie Policy.

Your Rights

Under GDPR, you have the following rights:

  • Right to access your personal data.

  • Right to correct or update inaccurate data.

  • Right to request deletion (“right to be forgotten”).

  • Right to restrict or object to processing.

  • Right to data portability.

  • Right to withdraw consent at any time (e.g., unsubscribe from newsletters).

You can exercise these rights by contacting us at support@curlesoap.com. We will respond within 30 days.

International Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses.

9. Data Security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, or disclosure.

Complaints

If you are not satisfied with how we handle your personal data, please contact us at support@curlesoap.com.
 You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via https://autoriteitpersoonsgegevens.nl.

Children’s Data

Our website and services are not directed at children under 16. We do not knowingly collect data from minors without parental consent.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.