Who is responsible?
- Data controller:
- Baby Moise
- Company name (legal):
- Baby Moise B.V.
- Address:
- Textielweg 19, 3812RV Amersfoort
- KVK-nummer:
- 97693936
- BTW-nummer:
- NL868187252B01
- E-mail:
- support@moisecare.nl
Which personal data do we process?
Depending on what you do with us (ordering, subscription, customer service, etc.) we process (part of) the following data:
We do process:
A) Data you provide to us yourself
- Name
- Billing and/or delivery address
- Email address
- Phone number (optional)
- Account details (if you create an account)
- Order and subscription details (products, frequency, delivery moments, status)
- Communication (e.g. emails/chat/messages to customer service)
- Review data when you leave a review or are invited to do so via WebwinkelKeur (including name and email address; see also section 14)
B) Payment data
We do not always receive your full payment details (such as card number). Payments usually go through a payment provider.We do process:
- Payment status (successful/failed)
- Transaction ID / reference
- Invoice details
- For subscriptions: data needed for periodic payment (e.g. mandate reference if you pay by direct debit) – insofar as processed by us or visible via the payment provider.
C) Data collected automatically (website use)
- IP address (often anonymised where possible)
- Device and browser information
- Pages visited and click behaviour
- Cookies/similar techniques (see Cookie Policy or cookie banner)
Why do we process personal data? (Purposes)
We use personal data for:
- Processing and delivering orders order confirmation, shipping, updates, returns
- Managing subscriptions periodic deliveries, changes, pauses, cancellations, reminders
- Payments and administration payments, invoices, bookkeeping, fraud/non-payment (where relevant)
- Customer service answering questions, handling complaints, improving service
- Marketing and communication (optional)
newsletter (only if you sign up)
offers or tips by email (only with consent or within the legal frameworks, and always with an unsubscribe link) - Website improvement and security analytics, debugging, abuse prevention
- Reviews collecting and linking reviews to your order (via WebwinkelKeur)
On which legal grounds (GDPR) do we base this?
We only process personal data if this is permitted under the GDPR, for example on the basis of:
- Performance of a contract (e.g. purchase or subscription)
- Legal obligation (e.g. tax retention obligation)
- Legitimate interest (e.g. security, limited direct marketing, service improvement)
- Consent (e.g. newsletter, marketing cookies – depending on your cookie choices)
With whom do we share personal data?
We only share personal data when this is necessary for our services or when we are legally obliged to do so. For example:
With parties that process personal data on our behalf, we conclude data processing agreements.
- Payment providers (to process payments)
- Delivery and logistics parties (for delivery of orders/subscriptions)
- IT and hosting parties (webshop platform, email software, customer system)
- Accountant/administration (invoicing and financial administration)
- Analytics and marketing tools (only according to cookie settings/consent)
- WebwinkelKeur (platform for reviews and invitations to leave a review)
- Government authorities (when we are legally required to)
With parties that process personal data on our behalf, we conclude data processing agreements.
Transfer outside the EEA
Some service providers may process data outside the European Economic Area (EEA). In that case we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs) and other measures required by law.
How long do we keep personal data?
We do not keep personal data longer than necessary for the purpose for which it was collected, unless we are legally required to keep it longer.
Indicative periods:
Indicative periods:
- Order and invoice data: usually 7 years (tax retention obligation)
- Account data: as long as your account is active (or until deletion/request), with minimum retention periods for administration
- Customer service contact: as long as necessary for handling and quality purposes (usually 12–24 months)
- Newsletter data: until you unsubscribe
- Cookies/analytics: according to cookie settings and retention periods of the tools used
Cookies and similar techniques
We use cookies and similar techniques to make the website work properly, to remember preferences and (optionally) to do statistics/marketing.
See our Cookie Policy (if applicable) or manage your preferences via the cookie settings on the site.
- Functional cookies: necessary for the webshop (e.g. shopping cart)
- Analytical cookies: to improve the website (privacy-friendly where possible)
- Marketing cookies: only with consent (via cookie banner)
See our Cookie Policy (if applicable) or manage your preferences via the cookie settings on the site.
Your rights
You have (under conditions) the following rights:
You can send a request to support@moisecare.nl. We usually respond within 1 month.
You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
- Access to your personal data
- Rectification (correction) of incorrect data
- Erasure ("right to be forgotten")
- Restriction of processing
- Objection to processing (in particular marketing)
- Data portability
- Withdraw consent (if processing is based on it)
You can send a request to support@moisecare.nl. We usually respond within 1 month.
You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
We take appropriate technical and organisational measures to secure personal data, such as:
- secure connections (SSL/TLS)
- access restrictions
- secure storage and updates
- minimal access on a "need-to-know" basis
Minors
Our webshop is intended for the purchase of baby products by parents/guardians. We do not knowingly collect personal data from children without the consent of a parent/guardian.
Do you think we have unintentionally obtained data of a child? Contact us at support@moisecare.nl and we will delete it.
Do you think we have unintentionally obtained data of a child? Contact us at support@moisecare.nl and we will delete it.
Automated decision-making
We do not make decisions that have significant consequences for you solely on the basis of automated processing, unless this is necessary for the performance of the contract or permitted by law (e.g. basic fraud prevention via the payment provider).
Changes to this privacy policy
We may amend this privacy policy, for example if our services change or legislation changes. The most recent version is always available on our website with the date of the last update.
Reviews - WebwinkelKeur
We collect reviews via the WebwinkelKeur platform. If you leave a review via WebwinkelKeur you are required to provide your name and email address. WebwinkelKeur shares this data with us, so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases WebwinkelKeur may contact you to provide an explanation of your review. In the event that we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this data solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organisational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the purpose of providing the services, for which we have given WebwinkelKeur permission. All safeguards mentioned above regarding the protection of your personal data also apply to those parts of the services for which WebwinkelKeur engages third parties.