Privacy policy

Last updated: August 30, 2026

1. Introduction

Hoeft Niet B.V., trading as Nutriworld (“Nutriworld”, “we”, “us” or “our”), operates the website nutriworld.eu and the associated online store, content, features, products and services (together, the “Services”).

This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, create an account, place an order, contact us or otherwise use our Services.

Nutriworld is the data controller responsible for the processing described in this Privacy Policy, except where another party acts as an independent data controller.

Our online store is powered by Shopify.

2. Data Controller

The data controller is:

Hoeft Niet B.V., trading as Nutriworld

Registered address:
Middenweg 113a
1782 BC Den Helder
The Netherlands

Chamber of Commerce: 85710199
VAT number: NL863714705B01
Email: info@nutriworld.eu
Telephone: +31 6 15518795

3. Personal Data We Collect

Depending on how you use our Services, we may collect the following categories of personal data.

3.1 Contact and account information

This may include:

your name;
billing and delivery address;
email address;
telephone number;
account login information;
language and communication preferences; and
other information you provide when creating or managing an account.

3.2 Order and transaction information

This may include:

products ordered, viewed or added to your shopping cart;
order number and order history;
billing and delivery details;
payment status;
discounts and promotional codes used;
returns, refunds, complaints and warranty requests; and
communications concerning an order.

We do not normally receive or store complete payment card details. Payments are processed by Shopify Payments or another payment provider available during checkout.

3.3 Communications

When you contact us, we may process:

your contact details;
the content of your message;
attachments or photographs you provide;
order and product information connected to your request; and
our correspondence with you.

3.4 Website and device information

When you use our website, we and our service providers may automatically collect information such as:

IP address;
browser and device type;
operating system;
language and regional settings;
pages viewed and links selected;
date, time and duration of visits;
referring website or source;
cart and checkout activity;
cookie identifiers and similar technical information; and
information used to protect the website against fraud, abuse and security threats.

3.5 Marketing information

Where applicable, we may process:

your subscription to newsletters or promotional messages;
your marketing preferences;
whether messages were delivered, opened or selected; and
information about promotions in which you participate.

3.6 Reviews and other submitted content

If you submit a product review, rating, photograph or other content, we may process and publish the information you provide in accordance with the way the relevant feature is presented.

Do not include sensitive personal information or unnecessary third-party information in publicly submitted content.

4. How We Collect Personal Data

We may collect personal data:

directly from you when you place an order, create an account or contact us;
automatically when you browse or use our website;
from Shopify and other providers used to operate our store;
from payment, delivery and fulfilment providers;
from marketing, analytics, review and fraud-prevention services; and
from publicly available sources where permitted by law.

5. Why We Process Personal Data

We may process personal data for the following purposes.

5.1 Providing and performing our Services

We use personal data to:

process and deliver orders;
accept and verify payments;
provide order confirmations and tracking information;
manage accounts;
process returns, refunds and exchanges;
respond to customer-service requests; and
perform our obligations under a purchase agreement.

The usual legal basis is that the processing is necessary to enter into or perform a contract with you.

5.2 Legal and administrative obligations

We may process and retain information to:

comply with accounting, taxation and consumer-protection requirements;
maintain legally required business records;
respond to lawful requests from authorities;
manage product-safety or recall obligations; and
establish, exercise or defend legal claims.

The legal basis is compliance with a legal obligation or, where appropriate, our legitimate interest in protecting our legal position.

5.3 Security and fraud prevention

We may use personal data to:

protect customers, our website and our business;
detect and prevent fraud, misuse and unauthorised transactions;
secure accounts and payment processes;
investigate suspicious activity; and
enforce our terms and policies.

The legal basis is generally our legitimate interest in maintaining secure and reliable Services and preventing fraud.

5.4 Improving our website and Services

We may analyse how customers use our website to:

maintain and improve website performance;
identify technical problems;
understand general shopping behaviour;
improve navigation, content and product presentation; and
measure the effectiveness of our Services.

Where required, we rely on your consent. For strictly necessary processing or limited operational analysis, we may rely on our legitimate interests where permitted by law.

5.5 Marketing

With your consent where required, we may send newsletters, offers, product information or other promotional communications.

You may withdraw your consent or unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us.

Withdrawing consent does not affect processing that lawfully occurred before the withdrawal.

6. Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to operate the website, remember preferences, maintain shopping carts, support checkout, protect against fraud and, where permitted, measure performance or provide marketing.

Strictly necessary cookies may be used without consent where permitted by law because they are required for the website, account or checkout to function.

Optional analytics or marketing cookies are used only in accordance with applicable consent requirements. You can manage available choices through the cookie banner or privacy settings displayed on our website.

You can also adjust your browser settings to block or delete cookies. Blocking necessary cookies may prevent parts of the website or checkout from functioning correctly.

7. How We Share Personal Data

We may share personal data only where necessary and permitted by law, including with the following categories of recipients:

Shopify and providers that host or operate our online store;
payment processors and financial institutions;
delivery companies, carriers and fulfilment providers;
inventory and order-management providers;
IT, hosting, security and fraud-prevention providers;
customer-service and communication providers;
analytics, marketing and advertising providers where permitted;
product-review and feedback providers;
professional advisers, insurers, accountants and legal advisers;
public authorities where disclosure is legally required; and
parties involved in a merger, acquisition, restructuring or transfer of business assets, subject to appropriate safeguards.

Service providers may process personal data only for the services they provide to us or as otherwise permitted under their own applicable legal responsibilities.

We do not sell personal data in the ordinary meaning of exchanging it for money.

8. Shopify

Our online store is hosted and powered by Shopify. Shopify processes personal data to provide its commerce platform, checkout, infrastructure, security and related services.

Depending on your location and the Shopify services used, personal data may be processed by Shopify International Ltd. or another Shopify entity.

More information about Shopify’s processing practices is available in the Shopify Privacy Policy and the Shopify Consumer Privacy Policy.

9. International Data Transfers

Some of our service providers, including Shopify and providers supporting payments, hosting, analytics or communications, may process personal data outside the European Economic Area.

Where personal data is transferred to a country that does not provide an equivalent level of data protection, we or the relevant provider will use a lawful transfer mechanism where required. This may include an adequacy decision, approved standard contractual clauses or another legally recognised safeguard.

You may contact us if you would like further information about safeguards relevant to your personal data.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

the duration of our relationship with you;
the time required to process an order, return, refund or complaint;
legal accounting and taxation requirements;
warranty and product-liability periods;
fraud-prevention and security requirements;
applicable limitation periods; and
the need to establish, exercise or defend legal claims.

When personal data is no longer required, we will delete or anonymise it where reasonably possible, unless continued retention is required or permitted by law.

11. Security

We use reasonable organisational and technical measures intended to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping account credentials confidential and for notifying us if you suspect unauthorised access to your account.

12. Your Privacy Rights

Subject to applicable law and the circumstances of the processing, you may have the right to:

receive information about how we process your personal data;
request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a structured, commonly used and machine-readable format;
request transfer of eligible data to another organisation where technically feasible;
withdraw consent at any time where processing is based on consent; and
not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where permitted by law and appropriate safeguards apply.

These rights are not absolute. A request may be limited or refused where permitted or required by law.

To exercise a privacy right, contact us at info@nutriworld.eu. Please describe your request clearly. We may request information necessary to verify your identity and protect your personal data.

We will respond within the period required by applicable law.

13. Automated Processing

Our payment, ecommerce, security and fraud-prevention providers may use automated tools to assess transactions or identify suspicious activity.

We do not intend to make decisions that produce legal or similarly significant effects based solely on automated processing unless this is permitted by law and appropriate safeguards are provided.

14. Children’s Privacy

Our Services are not directed specifically at children. We do not knowingly collect personal data from children in circumstances where parental or guardian consent is required by law.

If you believe that a child has provided personal data unlawfully, contact us so that we can investigate and take appropriate action.

15. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites. Review the privacy information provided by the relevant third party before submitting personal data.

16. Complaints

If you have a concern about how we process personal data, please contact us first so that we can try to resolve it.

You also have the right to submit a complaint to the Dutch supervisory authority:

Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl

You may also have the right to contact the data-protection authority in the EU or EEA country where you live or work.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our Services, providers, legal obligations or processing activities change.

The latest version will be published on this page. The “Last updated” date at the top indicates when the policy was most recently revised.

Material changes may be communicated through the website or another appropriate method where required.

18. Contact Information

For questions, complaints or requests concerning this Privacy Policy or your personal data, contact: