Privacy policy
Last updated: 5 October 2026
Le Naturel Europe B.V. is the controller of the personal data processed through this website, under the EU General Data Protection Regulation (GDPR). We collect only what we need to deliver your order, look after you as a customer and, if you agree, keep in touch.
1. Contact
Le Naturel Europe B.V., Voltastraat 6, 3817 KN Amersfoort, the Netherlands · KvK 42037175 · support@le-naturel.eu. Send any privacy question or request to this address.
2. What we process, why, and on what basis
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Processing and delivering your order, including pre-orders | Name, address, email, phone, order details, payment status | Performance of the contract | 7 years (Dutch tax retention duty) |
| Payment | Payment method and transaction data (handled by Mollie; we never see full card or bank details) | Performance of the contract; legal obligation | 7 years |
| Customer account (optional) | Login details, order history, addresses | Performance of the contract | Until you delete your account |
| Customer service and complaints | Your messages and the information you share | Legitimate interest in helping you | 2 years after the last contact |
| Founding Family membership | Name, member number, order value, email | Performance of the contract (membership benefits) | As long as the membership runs |
| Newsletter and marketing emails | Email, name, shopping and email interaction | Consent (existing customers: legitimate interest, with an opt-out in every email) | Until you unsubscribe |
| Website analytics and advertising | Device, browser, IP address, browsing behaviour via cookies | Consent through our cookie banner (strictly necessary cookies need no consent) | As set out in the cookie banner |
| Fraud prevention and security | IP address, order and payment data | Legitimate interest | As long as needed, at most 7 years |
Your order is passed from our shop to our own order-management system, which we use to pack and ship it. That system also records which product batch you received, so we can contact you if a batch is ever recalled. For this traceability we keep your name, email, country, order number and batch number for 3 years after delivery, based on our product-safety obligations under EU cosmetics law.
We do not sell your data and do not use automated decision-making with legal effects on you.
3. Who we share data with
We work with service providers who process data on our behalf under a data processing agreement:
| Provider | Role | Location |
|---|---|---|
| Shopify International Ltd | Web shop platform and hosting | Ireland (with transfers to Canada and the US) |
| Mollie B.V. | Payment processing | Netherlands |
| Klaviyo, Inc. | Email marketing | United States |
| PostNL and our shipping label platform | Shipping and track & trace | Netherlands |
| Meta Platforms Ireland Ltd | Advertising measurement, only with your cookie consent | Ireland (with transfers to the US) |
| Moneybird B.V. | Bookkeeping and invoicing | Netherlands |
We also share data where the law requires it, for example with the tax authorities.
4. Transfers outside the EU
Some providers transfer data to the United States or Canada. We rely on the EU–US Data Privacy Framework where the provider is certified, on EU adequacy decisions, or on the European Commission's Standard Contractual Clauses.
5. Cookies
We use strictly necessary cookies to run the shop and your basket. Analytics and marketing cookies are placed only after you accept them in our cookie banner. You can change your choice at any time through the cookie settings link in the footer.
6. Your rights
You have the right to access, correct or delete your data, to restrict or object to processing, and to data portability. Where we rely on consent, you can withdraw it at any time; this does not affect earlier processing. Email support@le-naturel.eu. We respond within one month and may ask you to verify your identity.
You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own EU country.
7. Security
We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS) and limited access to customer data.
8. Children
Our shop is not intended for children under 16. We do not knowingly collect their data.
9. Changes
We may update this policy. The latest version is always on this page, with the date at the top. We will tell you about material changes by email if you are a customer.