Privacy Policy

1. Controller

Organic & Co (Portland 66, 1046 BD Amsterdam, The Netherlands, info@organicnco.com) is responsible for the processing of personal data as described in this privacy policy.

2. What data we process

We process the data you provide to us: name, email address, delivery address, telephone number (if provided), orders and payment details. Payments are processed by our payment partner Mollie; we do not store complete card details.

We also process technical data, such as your IP address and the pages you visit, to secure and improve the website.

3. Purposes and legal bases

We process personal data for: (a) the performance of the contract — processing and delivering your order; (b) compliance with legal obligations — retaining invoices for tax legislation; (c) our legitimate interests — security, fraud prevention and improving our website; and (d) your consent — sending the newsletter.

4. Retention periods

We do not retain personal data longer than necessary. We retain financial administration (invoices) for 7 years due to the statutory retention obligation. Account data is retained for as long as your account is active. Newsletter data is retained until you unsubscribe.

5. Sharing with third parties

We share personal data only with parties necessary for the provision of our services: Mollie (payments), our hosting provider, the delivery service and, where applicable, our email service for order confirmations. These parties process data solely on our instructions. We never sell personal data.

6. Cookies

Our website uses functional cookies that are necessary for its operation, such as the shopping basket, your language choice and your login session. We do not place tracking or marketing cookies without your consent.

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing. You can also withdraw your consent for the newsletter at any time.

To exercise your rights, you can contact us via info@organicnco.com. We respond within four weeks. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security

We take appropriate technical and organisational measures to protect your data: secure connections (SSL), encrypted and hashed passwords, access management and annual review of our security.

9. Contact

Questions about this privacy policy or about the processing of your data? Send an email to info@organicnco.com. This privacy policy may be amended; the current version is always available on this page.