Privacy Policy
2.1 Who is responsible for your data
[Aimtohealth legal entity name] ("Aimtohealth," "we," "us"), registered at [registered address], KVK number [KVK number], is the data controller responsible for your personal data when you use [aimtohealth.com] or purchase from us.
Contact for privacy questions: [privacy email, e.g. privacy@aimtohealth.com].
2.2 What data we collect
- Account & order data: name, email address, shipping/billing address, phone number, order history.
- Payment data: processed directly by our payment provider(s) — we do not store your full card details.
- Browsing data: IP address, device/browser information, pages visited, collected via cookies and similar technologies (see Section 2.6).
- Communications: messages you send us via email, contact forms, or customer support.
- Marketing preferences: if you opt in to our newsletter or marketing emails.
We do not collect or store any health data you measure using the device itself — readings stay on the device and are not transmitted to us.
2.3 Why we use your data (legal basis)
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and fulfilling your order | Performance of a contract |
| Customer support | Performance of a contract / legitimate interest |
| Marketing emails (if opted in) | Consent |
| Fraud prevention, legal compliance | Legal obligation / legitimate interest |
| Improving the Site (analytics) | Legitimate interest / consent (where cookies require it) |
2.4 Who we share data with
- Shopify (our e-commerce platform provider), which processes data on our behalf to run the Site and store.
- Payment processors (e.g. [Shopify Payments / Mollie / PayPal — confirm which]) to process transactions.
- Shipping carriers (e.g. [carrier name(s)]) to deliver your order.
- Email/marketing tools (e.g. [Klaviyo / Mailchimp — confirm]) if you've opted into marketing.
- We do not sell your personal data to third parties.
Some of these providers may process data outside the EU/EEA; where they do, they rely on appropriate safeguards (such as EU Standard Contractual Clauses).
2.5 How long we keep your data
We retain order and customer data for as long as necessary to fulfill legal, accounting, and tax obligations (typically [7 years] under Dutch law for financial records), and marketing data until you unsubscribe or withdraw consent.
2.6 Cookies
We use cookies and similar technologies to operate the Site, remember your cart, and (with your consent) understand how visitors use the Site for analytics and marketing. You can manage cookie preferences via the cookie banner shown on your first visit, or through your browser settings.
2.7 Your rights (GDPR)
As an EU resident, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to certain processing
- Data portability
- Withdraw consent at any time (for marketing, etc.)
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority
To exercise any of these rights, contact us at [privacy email].
2.8 Children's privacy
Our products and Site are intended for adults. We do not knowingly collect personal data from children.
2.9 Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.