Privacy policy

Privacy Statement

At bi yù, we value your privacy. We handle your personal data with care and are committed to offering you the best experience when using our website and services. This privacy statement explains how we collect, use, and protect your data.

1. GENERAL

BI YÙ, part of Gigi Gummies B.V., is the data controller as defined by the General Data Protection Regulation (GDPR). This means we are responsible for the processing of your personal data collected through our website: www.bi-yu.nl.

We collect data from:

  • Visitors of our website

  • Customers placing an order via our webshop

  • Individuals who subscribe to newsletters or promotions

The personal data we collect may include:

  • Name, address, phone number, and email (for orders or communication)

  • Payment details via secure payment systems

  • Cookies and technical data (for statistics, analysis, and functionality)

  • Communication preferences and feedback (e.g., from customer satisfaction surveys)

2. PURPOSES OF DATA PROCESSING

We process personal data for various purposes, depending on how you interact with our website.

When using our website:

  • To personalize your shopping experience and improve website functionality

  • To remember products in your cart

  • For customer service and support

  • For analytical purposes to optimize our site’s performance

When placing an order:

  • To process and deliver your order

  • To handle returns and refunds

  • To give you access to your order history via your account

  • For marketing (e.g., special offers and newsletters, with your consent)

  • To prevent fraud and ensure website security

When signing up for newsletters or promotions:

  • To keep you informed about offers, news, and updates from bi yù

  • To provide personalized marketing based on your preferences

3. LEGAL BASIS FOR PROCESSING

We process your data based on the following legal grounds under the GDPR:

  • Performance of a contract: e.g., processing your order

  • Consent: e.g., for marketing and analytics (via cookies or newsletter signup)

  • Legitimate interest: e.g., for security, fraud prevention, and website optimization

  • Legal obligation: e.g., storing invoice data for tax purposes

You can withdraw your consent at any time via the unsubscribe link or by contacting us at info@bi-yu.nl.

4. RETENTION PERIOD

We do not keep your personal data longer than necessary. Our retention periods are:

  • Order data: Up to 7 years (required for tax and administrative purposes)

  • Marketing data: Up to 24 months after your last interaction, unless you unsubscribe earlier

  • Cookies: According to your cookie preferences, which can be adjusted at any time

  • Customer service data: Up to 12 months after resolving your inquiry

5. YOUR RIGHTS UNDER THE GDPR

You have the following rights:

  • Right of access: Request a copy of the personal data we hold about you

  • Right to rectification: Correct incomplete or inaccurate data

  • Right to erasure: Request deletion of your data (unless we are legally required to retain it)

  • Right to restrict processing: Temporarily limit how we use your data

  • Right to data portability: Receive your data in a structured, commonly used format

  • Right to object: To processing based on legitimate interest

  • Right to withdraw consent: For data processed with your consent

You can make a request by emailing info@bi-yu.nl. We aim to respond within 30 days.

6. COOKIES & ANALYTICS

We use cookies and similar technologies to improve our website and offer a personalized experience.

We use tools such as:

  • Google Analytics: To anonymously analyze website traffic and behavior

  • Facebook Pixel & TikTok Pixel: For targeted advertising

  • Hotjar: To enhance user experience and usability

  • First-party cookies: For essential features like logging in and managing your cart

You can manage cookie preferences in your browser or via our website’s cookie settings. Learn more in our Cookie Statement.

7. DATA SECURITY

We implement technical and organizational measures to protect your data from loss, unauthorized access, and misuse. For example:

  • SSL encryption for secure communication between you and our website

  • Secure data storage through trusted providers like Shopify

  • Regular monitoring and updating of our security protocols

  • Limited data access for authorized personnel only

8. DATA PROCESSORS & TRANSFERS

We work with trusted third-party processors, including:

  • Shopify: For webshop hosting and management

  • Mollie: For secure payment processing

  • Mailchimp: For email marketing

If data is transferred outside the European Union, we ensure compliance with the European Commission’s standard contractual clauses or other appropriate safeguards.

9. CHANGES TO THIS POLICY

We may update this privacy policy from time to time. We recommend checking this page regularly. Changes will take effect once published on our website.

10. COMPLAINTS

If you have a complaint about how we process your data, please contact us at info@bi-yu.nl. If we can’t resolve it together, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.

Last updated: November 27, 2024