Privacy Policy

1. Data Controller

The controller for the processing of your personal data is:

Grow Your Brand, sole proprietorship. Trading under the name: oneQ (webshops one-q.com and one-q.nl) Address: Badhuisstraat 18, 4703BH Roosendaal
Phone: +31 6 23 74 92 92
Email: one-q@growyourbrand.nl
Chamber of Commerce number: 90091620

2. What personal data do we process?

Depending on how you use the webshop, we process:

  • Contact and account details: name, email address, phone number, and (if you create an account) login details.
  • Order and delivery details: billing and delivery address, products ordered, order number, order history.
  • Payment details: data required to process your payment. The complete payment details are processed by our payment service provider; we only receive confirmation and the necessary transaction details.
  • Communication data: the content of your messages to our customer service and any reviews.
  • Technical and usage data: IP address, device and browser data, and data about your use of the webshop, collected via cookies and similar technologies (see article 7).
  • [Marketing data: your preferences and whether you have subscribed to our newsletter — only fill in if applicable.]

3. Purposes and legal bases

We process your data only for the purposes mentioned below, each time based on a legal ground from the GDPR.

  1. Execution of your order (processing, delivery, payment, returns, and warranty). Legal basis: performance of the contract.
  2. Customer service and communication about your order or questions. Legal basis: performance of the contract or legitimate interest.
  3. Compliance with legal obligations, such as the tax retention obligation. Legal basis: legal obligation.
  4. Improvement and security of the webshop and prevention of fraud. Legal basis: legitimate interest.
  5. [Marketing, such as sending a newsletter or offers. Legal basis: consent, or legitimate interest for mailings to existing customers about similar products. You can always unsubscribe.]

4. How long do we retain your data?

We do not retain your data longer than necessary for the purposes mentioned above.

  • Order and invoice data: due to tax retention obligations, 7 years.
  • Account data: as long as you have an account; thereafter, we delete or anonymize them within 1 year.
  • Customer service communication: Up to 1 year after resolution.
  • Marketing data: until you unsubscribe or withdraw your consent.

After the retention period expires, we delete or anonymize the data.

5. Sharing with third parties

We never sell your data. We only share it with parties that help us operate the webshop or if we are legally obliged to do so. With parties that process data on our behalf, we conclude a processor agreement. This includes:

  • the webshop platform (Shopify);
  • the payment service provider Mollie
  • the delivery party(ies) Postnl, DHL, DPD

6. Transfer outside the EEA

Some of our service providers process data (partially) outside the European Economic Area. In that case, we ensure appropriate safeguards, such as the standard contractual clauses of the European Commission, so that your data is also protected there. [Check this per service provider; Shopify and many analytics/marketing tools process data (partially) in the US.]

7. Cookies

The webshop uses cookies and similar technologies. Functional cookies are necessary for the webshop to work; for analytical and marketing cookies, we ask for your consent. More information and your settings can be found in [our cookie statement — insert link] / via the cookie banner.

8. Security

We take appropriate technical and organizational measures to protect your data against loss and unauthorized use, such as secure connections (SSL/TLS) and access restrictions. Do you suspect misuse of your data? Please contact us via [email address].

9. Your rights

Under the GDPR, you have the right to:

  • access your data and receive a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • have the processing restricted;
  • object to processing based on legitimate interest or for direct marketing;
  • transfer your data (data portability);
  • withdraw given consent, without affecting the legality of prior processing.

Do you want to exercise one of these rights? Please send a request to [email address]. We will respond within one month. We may ask you to identify yourself so that we can be sure that we are providing the data to the correct person.

10. Complaint to the supervisory authority

If you disagree with how we handle your data, you have the right to file a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl. We appreciate it if you try to resolve it with us first.

11. Changes

We may amend this privacy statement, for example, in the event of new services or changed regulations. The current version will always be available on the webshop. In the event of significant changes, we will actively inform you where necessary.

12. Contact

Do you have any questions about this privacy statement or about how we handle your data? Please contact us via:

Grow Your Brand Email: one-q@growyourbrand.nl
Phone: +31 6 23 74 92 92