Privacy Statement // yessential.nl
Last updated: June 2026
1. Controller for Data Processing
Yessential BV
ABC Westland 249
2685 DC Poeldijk, Netherlands
Email: hello@yessential.nl
Phone: +31 85 080 6343
Chamber of Commerce number: 85778648
VAT number: NL863738758B01
2. What data we collect and why
2.1 Order data
When you place an order, we collect the following data:
- First and last name
- Delivery and billing address
- Email address
- Phone number
- Payment details (processed by Klarna or Mollie)
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
2.2 Customer account
If you create a customer account, we store your login details and order history. You can also check out as a guest without creating an account.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
2.3 Newsletter and email marketing
If you sign up for our newsletter via the signup form on the website or check the relevant option during checkout, we will use your email address for marketing purposes via Klaviyo. Klaviyo is also used to send review requests after a purchase. The received reviews are displayed via Judge.me. You can unsubscribe at any time via the unsubscribe link in each email.
Legal basis: Art. 6(1)(a) GDPR (consent)
2.4 Contact form and email
When you contact us, we store your message and contact details to process your request.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
3. Disclosure to third parties
We only share your data with third parties to the extent necessary for the provision of our services or if you have given your consent. The following service providers have access to your data:
Shopify International Limited
Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland
Purpose: management of our webshop and order processing
Privacy policy: https://www.shopify.com/legal/privacy
Klaviyo Inc.
125 Summer Street, Boston, MA 02110, United States
Purpose: email marketing, newsletter, and sending review requests after purchase
Privacy policy: https://www.klaviyo.com/legal/privacy-notice
Note: data transfer to the US based on EU Standard Contractual Clauses (SCC)
Google LLC
1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Purpose: Google Analytics (website analysis), Google Ads (advertisements), Google Tag Manager
Privacy policy: https://policies.google.com/privacy
Note: data transfer to the US based on EU Standard Contractual Clauses (SCC). IP addresses are anonymized.
Meta Platforms Ireland Limited
4 Grand Canal Square, Dublin 2, Ireland
Purpose: Meta Pixel (Facebook/Instagram ads and remarketing)
Privacy policy: https://www.facebook.com/privacy/policy
Klarna Bank AB
Sveavägen 46, 111 34 Stockholm, Sweden
Purpose: payment processing
Privacy policy: https://www.klarna.com/nl/privacybeleid/
Mollie B.V.
Keizersgracht 126, 1015 CW Amsterdam, Netherlands
Purpose: payment processing
Privacy policy: https://www.mollie.com/nl/privacy
Trackbee
Purpose: tracking and attribution of marketing campaigns, so we can measure which advertisements lead to purchases
Privacy policy: https://www.trackbee.io/privacy-policy
Judge.me
Purpose: displaying product reviews collected via Klaviyo
Privacy policy: https://judge.me/privacy
Webwinkelkeur
Purpose: collecting and displaying shop reviews
Privacy policy: https://www.webwinkelkeur.nl/privacy
External fulfillment center, Netherlands
Purpose: storage and shipment of your orders
Picqer B.V.
Amsterdamseweg 71, 6814 CN Arnhem, Netherlands
Purpose: warehouse management software used by our fulfillment center for processing and managing your orders
Privacy policy: https://picqer.com/nl/privacy
DHL / PostNL
Purpose: delivery of your orders
4. Cookies and tracking
Our website uses cookies and similar technologies. Upon your first visit, we request your consent via our cookie banner.
We use the following types of cookies:
Necessary cookies
These cookies are essential for the website to function and cannot be disabled. They store, for example, your shopping cart and language preference.
Analytical cookies (Google Analytics)
These cookies help us understand how visitors use our website. The collected data is processed anonymously.
Legal basis: Art. 6(1)(a) GDPR (consent)
Marketing cookies (Meta Pixel, Google Ads, Trackbee)
These cookies are used to show you relevant advertisements and measure the effectiveness of our advertising campaigns.
Legal basis: Art. 6(1)(a) GDPR (consent)
Functional cookies (Klaviyo, Klarna, Mollie)
These cookies are necessary for the newsletter and payment processing to function.
You can adjust your cookie preferences at any time via our cookie banner.
5. Retention periods
We do not retain your data longer than necessary for the respective purpose:
- Order data: 7 years (statutory retention period)
- Customer account: until you delete the account
- Newsletter data: until you unsubscribe
- Contact requests: 2 years
6. Transfer to countries outside the EU
Some of our service providers (Google, Klaviyo) are located in the United States. The transfer of your data to the US takes place based on the EU Standard Contractual Clauses (SCC) in accordance with Art. 46 GDPR, which ensure an adequate level of protection.
7. Your rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR): you can request which data we hold about you.
- Right to rectification (Art. 16 GDPR): you can request the correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): you can request the erasure of your data.
- Right to restriction of processing (Art. 18 GDPR): you can request the restriction of processing.
- Right to object (Art. 21 GDPR): you can object to the processing of your data.
- Right to data portability (Art. 20 GDPR): you can receive your data in a machine-readable format.
- Withdrawal of consent (Art. 7 GDPR): you can withdraw given consent at any time.
To exercise your rights, please contact us via: hello@yessential.nl
8. Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
https://www.autoriteitpersoonsgegevens.nl
9. Security
We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Our website uses SSL encryption (recognizable by https:// in the address bar).
10. Changes to this privacy policy
We reserve the right to update this privacy policy as needed. The most current version will always be available on this page. In case of significant changes, we will inform you by email.
