Privacy Policy

Privacy Policy Zoolac.nl

1. About This Privacy Policy

Biosecurity BV values your privacy. We process only the data necessary to handle your orders and improve our services. This Privacy Policy describes what data we collect about you, how we use it, and how we protect it.

2. Data Processing & Data Processors

2.1 Web Hosting and Email Services

Vimexx – Web Hosting

We use web hosting services from Vimexx. Vimexx may collect metadata about service usage, but this is not personal data. Vimexx has implemented appropriate technical and organizational measures to prevent data loss and unauthorized access.

Microsoft Outlook – Email Communication

For business email and customer support, we use Microsoft Outlook. Microsoft has implemented appropriate technical and organizational measures to prevent misuse and data loss. Your email communication is treated confidentially.

2.2 Analytics & Tracking

Google Analytics

We use Google Analytics to track website visitors and receive reports on site usage. This data is anonymized and helps us improve the customer experience.

Google Tag Manager (GTM)

We manage tracking tags on our website through Google Tag Manager, including Google Analytics and Microsoft Clarity. This helps us understand how customers use our website.

Microsoft Clarity

We use Microsoft Clarity (implemented via GTM) for session recordings and heatmaps. This helps us understand how visitors navigate our website.

Bing Webmaster Tools

We use Bing Webmaster Tools for SEO monitoring and indexing to improve our search engine visibility.

2.3 Payment Processing

Mollie

We use Mollie for payment processing. Mollie processes your name, address, location, and payment information (bank account or credit card number). Mollie has implemented appropriate technical and organizational measures to protect your data. Your payment information is never stored on our servers.

2.4 Shipping & Logistics

PostNL

For delivery of your order, we share your name, address, and location with PostNL. PostNL uses this data only for delivery purposes.

Sendcloud

We use Sendcloud for shipping labels, tracking, and logistics integration. Sendcloud processes your order and shipping data to generate labels and provide tracking information.

2.5 Accounting & Administration

SnelStart

We use SnelStart for accounting and administration. We share your name, address, location, and order details for the administration of sales invoices. SnelStart is bound by confidentiality.

2.6 Sales Channel & Reviews

Bol.com

We also sell through Bol.com. When you order through Bol.com, they share your order and personal data with us. We use this data to process and deliver your order.

WebwinkelKeur

We collect reviews through WebwinkelKeur. When you leave a review, you provide your name and email address. WebwinkelKeur shares this data with us.

2.7 Backend & Sales Administration

Lightspeed

We use Lightspeed as our POS and backend system for managing our product and customer database. Lightspeed processes order and customer data.

3. Purpose of Data Processing

We process your data exclusively for the following purposes:

Processing your order (processing, shipping, invoicing)
Communication about your order
Improvement of our website and services (via anonymized analysis data)
Compliance with legal and administrative obligations
Customer support and complaint handling

We do not send marketing emails or targeted communication without your explicit consent.

4. Retention Periods

We retain your data as long as necessary:

Order and shipping data: until delivery and resolution of disputes (maximum 1 year after delivery)
Billing data: minimum 7 years (legally required)
Customer profile: while you remain our customer
Analysis data: anonymized and not traceable to you

If you inform us that you are no longer our customer, we will treat this as a deletion request and remove your customer profile (while retaining billing data for the legal retention period).

5. Your Rights Under GDPR

You have the following rights as a data subject:

5.1 Right of Access

You can request access to all data we process about you. We will respond within 30 days.

5.2 Right to Rectification

You can request correction of inaccurate data. We will do this within 30 days.

5.3 Right to Erasure

You can request deletion of your data. This is only possible for data that is not required to be retained by law.

5.4 Right to Restrict Processing

You can request that we stop processing your data until your objection is resolved.

5.5 Right to Data Portability

You can request your data in machine-readable format.

5.6 Right to Object

You can object to the processing of your data. We will immediately stop processing until your objection is resolved.

5.7 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection authority if you believe we are processing your data incorrectly.

All requests can be submitted to: [email protected]

6. Cookies

Our website uses essential cookies for functionality (shopping cart, login, security). Analytical cookies are only placed with your consent.

7. Security of Your Data

We implement appropriate technical and organizational measures to protect your data from loss, misuse, and unauthorized access:

Encrypted data storage
SSL/TLS encryption for data transmission
Access controls and employee training
Regular security audits

8. Changes to This Privacy Policy

We reserve the right to change this Privacy Policy. The most current version is always available on this page. If changes affect your data processing, we will notify you by email.