Privacy Policy

Data Controller

septicksup B.V. is the Data Controller responsible for your personal data. We are registered in the Netherlands under company number C77664425, with our registered office at Molenweg 36, 5090 TL Tilburg, North Brabant, Netherlands. For any privacy-related questions, please contact us at privacy@septicksup.live.

Data Collection and Types

The data we collect includes personal information that you provide directly to us and information that is automatically collected when you use our website. We collect the following types of personal data:

• Contact Information: Name, email address, phone number, and postal address when you contact us or subscribe to our services
• Beauty Profile Data: Skin type, beauty concerns, preferences, and goals when you request personalised advice
• Communication Data: Messages, feedback, and correspondence when you contact our support team
• Technical Data: IP address, browser type, device information, and website usage patterns
• Cookie Data: Information collected through cookies and similar tracking technologies as detailed in our Cookie Policy
• Marketing Preferences: Your preferences regarding marketing communications and newsletter subscriptions

How We Use Your Information

We explain how we use your information for various legitimate business purposes. The use of your data is based on the following legal grounds under GDPR:

• Contractual Necessity: To provide beauty advice, respond to enquiries, and deliver our services
• Legitimate Interests: To improve our services, conduct analytics, and enhance user experience
• Consent: For marketing communications and non-essential cookies (where applicable)
• Legal Obligation: To comply with applicable laws and regulations

Specifically, we use your personal data to provide personalised beauty recommendations, respond to customer service requests, send newsletters and marketing communications (with your consent), improve our website functionality, conduct research and analytics, and comply with legal requirements.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases: (1) Performance of a contract when providing our beauty advice services, (2) Legitimate interests for improving our services and website functionality, (3) Your explicit consent for marketing communications and certain analytics, and (4) Legal obligations for compliance with applicable laws and regulations.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following limited circumstances: with trusted service providers who assist us in operating our website and conducting business (under strict confidentiality agreements), when required by law or to protect our legal rights, in connection with a business transfer or merger (with appropriate safeguards), and with your explicit consent for specific purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Generally, we retain contact information and beauty profile data for up to 3 years after your last interaction with us, communication records for up to 2 years, marketing consent records until you withdraw consent, and technical and analytics data for up to 1 year. We may retain certain data for longer periods where required by law or for legitimate business purposes such as fraud prevention.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing of your personal data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at privacy@septicksup.live. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, regular security assessments and updates, access controls and authentication procedures, secure data storage and backup systems, and staff training on data protection and privacy practices.

International Data Transfers

As we are based in the Netherlands (EU), your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide personalised content. For detailed information about our use of cookies, including types of cookies, purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

Third-Party Links and Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your EU member state.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

For privacy-related matters, please contact us at privacy@septicksup.live and we will respond to your enquiry within 30 days.