Privacy policy

1. Data Controller

This Privacy Policy applies to the processing of personal data by MyRoyalBaby B.V., located at Trekpad 1, 1231 PA Loosdrecht, the Netherlands, registered with the Dutch Chamber of Commerce under number 97687081.

MyRoyalBaby B.V. is responsible for the processing of personal data as described in this Privacy Policy. The company operates under the brand name MyRoyalBaby and may also use additional trade names, websites, webshops, sales platforms and digital sales channels to which this Privacy Policy also applies, unless expressly stated otherwise.

If you have any questions about this Privacy Policy or the processing of your personal data, you can contact us via:

Whenever this Privacy Policy refers to "we", "us" or "our", this means MyRoyalBaby B.V.

2. Scope of this Privacy Policy

This Privacy Policy applies to all personal data processed by MyRoyalBaby B.V. through its websites, webshops, digital services, customer service, marketing activities and other services.

We consider the protection of your personal data important and process it exclusively in accordance with applicable privacy legislation, including the General Data Protection Regulation (GDPR) and other applicable Dutch and European laws and regulations.

We only process personal data that is necessary to provide our products and services, improve our services, maintain contact with our customers and comply with legal obligations.

We never sell your personal data to third parties. When we use external service providers that process personal data on our behalf, we do so only when necessary for our services or to comply with a legal obligation. Where required, we enter into data processing agreements or make other appropriate arrangements with these parties to ensure that your personal data is adequately protected.

This Privacy Policy may be amended from time to time, for example when legislation changes or when our services are modified. The most recent version will always be published on our website. The effective date of the current version is stated at the top of this Privacy Policy.

3. Personal Data We Process

Depending on how you use our website, webshop or services, we may process the following personal data:

Data you provide to us

When you place an order, contact us, create an account or subscribe to our newsletter, we may process the following information:

  • First and last name;
  • Company name (if applicable);
  • Billing and delivery address;
  • City and country;
  • Telephone number;
  • Email address;
  • Payment information (processed through our payment provider);
  • Order and invoice information;
  • Correspondence with our customer service;
  • Any information you voluntarily provide to us.

Data collected automatically

When you visit our website, certain technical information may be processed automatically, including:

  • IP address;
  • Browser type and device;
  • Operating system;
  • Language settings;
  • Date and time of your visit;
  • Pages visited;
  • Click behaviour on the website;
  • Referring website (referrer);
  • Cookie and tracking data, where you have provided consent.

Marketing and analytics data

Where you have provided consent, or where processing is permitted on the basis of a legitimate interest, we may process data to improve our services and marketing, including:

  • Interaction with our newsletters;
  • Abandoned cart information;
  • Products you have viewed;
  • Purchase history;
  • Preferences and interests inferred from your use of our website;
  • Data obtained through advertising and analytics tools, such as Google, Meta and TikTok.

We do not process special categories of personal data unless this is legally necessary or you voluntarily provide such information to us.

4. Purposes and Legal Bases for Processing

We only process personal data where there is a valid legal basis for doing so. Depending on the circumstances, we process your personal data for one or more of the following purposes.

Performance of a contract

When you place an order or use our services, we process your personal data in order to:

  • Process your order;
  • Process payments;
  • Ship products;
  • Contact you regarding your order;
  • Handle returns and warranty claims;
  • Provide customer service.

Legal obligations

We process certain personal data in order to comply with legal obligations, including tax and administrative requirements.

Legitimate interests

In certain cases, we process personal data because we have a legitimate interest in doing so. For example, to:

  • Improve our website and services;
  • Prevent fraud and misuse;
  • Secure our systems;
  • Compile statistics and analyses;
  • Measure customer satisfaction;
  • Collect reviews;
  • Further develop our products and services.

In doing so, we always carefully balance our interests against your privacy rights.

Consent

For certain processing activities, we ask for your consent in advance. This applies, for example, to:

  • Sending newsletters and marketing emails;
  • Placing non-essential cookies;
  • Personalised advertising and remarketing, where legally required.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

5. Shopify (Our Webshop)

Our webshop is developed and hosted by Shopify International Ltd. and its affiliated companies (hereinafter: "Shopify"). Shopify enables us to offer our products online, process orders and operate our webshop securely and reliably.

When you visit our website or place an order, Shopify processes personal data on our behalf that is necessary for the operation of the webshop. Depending on your use of our website, this may include:

  • First and last name;
  • Company name (if applicable);
  • Billing and delivery address;
  • Email address;
  • Telephone number;
  • Order and invoice information;
  • IP address;
  • Browser and device information;
  • Cookie and session data;
  • Technical information necessary for the security and operation of the webshop.

This information is processed for the following purposes:

  • Managing our webshop;
  • Processing orders;
  • Providing customer service;
  • Securing our website;
  • Preventing fraud and misuse;
  • Analysing and improving the performance of our webshop.

Shopify implements appropriate technical and organisational security measures to protect your personal data against loss, unauthorised access and misuse.

As Shopify operates internationally, personal data may be processed outside the European Economic Area (EEA). Where personal data is processed outside the EEA, Shopify ensures that appropriate safeguards are in place in accordance with applicable privacy legislation, including, where required, the use of Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognised safeguards.

More information about Shopify's processing of personal data can be found in Shopify's Privacy Policy.

6. Payments

To process payments securely and efficiently, we use various recognised payment service providers. Depending on the payment method you choose during checkout, your personal data may be processed by one or more of the following parties:

  • Shopify Payments (including Shop Pay);
  • Mollie B.V.;
  • PayPal;
  • Klarna Bank AB;
  • Card companies and wallet services associated with your chosen payment method, such as Visa, Mastercard, American Express, Maestro, UnionPay, Apple Pay and Google Pay.

Depending on your chosen payment method, the following personal data may be processed:

  • First and last name;
  • Billing address;
  • Delivery address;
  • Email address;
  • Payment information;
  • Order amount;
  • Transaction reference;
  • IP address;
  • Technical information necessary for fraud prevention and payment transaction security.

This personal data is processed exclusively for the following purposes:

  • Processing your payment;
  • Performing the contract;
  • Preventing, detecting and combating fraud;
  • Securing payment transactions;
  • Complying with legal and financial obligations.

We never receive your full payment details ourselves, such as full credit card details or bank account numbers. These are processed directly through the secure systems of your chosen payment service provider.

Our payment service providers process personal data in accordance with applicable privacy legislation and implement appropriate technical and organisational measures to protect your information. For further information about how they process personal data, please refer to the Privacy Policy of the relevant payment service provider.

7. Fulfilment, Logistics and Delivery

To process, store and ship your order carefully, we use PackNed as our fulfilment partner.

When you place an order, we only share the personal data necessary to process and ship your order. This may include:

  • First and last name;
  • Company name (if applicable);
  • Billing and delivery address;
  • Email address;
  • Telephone number;
  • Order number;
  • Products ordered;
  • Any delivery instructions you provided when placing your order.

PackNed processes this information exclusively on behalf of MyRoyalBaby B.V. for the storage, picking, packing and shipping of orders. PackNed may not use your personal data for its own purposes.

For the actual delivery of your order, PackNed may use external carriers, such as GLS or other logistics partners. In such cases, only the personal data necessary to deliver your order will be shared, such as your name, delivery address and, where necessary, your email address or telephone number for delivery updates.

Our fulfilment partner and carriers implement appropriate technical and organisational measures to protect your personal data and process it only for the performance of the contract.

8. Accounting and Administration

For our financial administration and to comply with statutory tax obligations, we use e-Boekhouden.nl.

When you place an order or receive an invoice, the personal data necessary for our administration is shared with this service provider. Depending on the circumstances, this may include:

  • First and last name;
  • Company name (if applicable);
  • Billing address;
  • Email address;
  • VAT number (for business customers);
  • Order and invoice information;
  • Payment status;
  • Other information that is legally required to appear on an invoice.

This personal data is processed exclusively for:

  • Preparing and processing invoices;
  • Maintaining our financial records;
  • Complying with tax and statutory retention obligations;
  • Supporting accounting and administrative activities.

e-Boekhouden.nl processes personal data exclusively for the purposes described above and implements appropriate technical and organisational measures to secure this information. Personal data is not retained for longer than necessary to comply with statutory retention periods and administrative obligations.

9. Newsletters and Email Marketing

For sending newsletters, service messages and automated email communications, we use Klaviyo.

When you subscribe to our newsletter or place an order, we may – depending on your preferences, the applicable legal basis and the consent you have provided – use your personal data to send relevant emails.

The following personal data may be processed:

  • First and last name;
  • Email address;
  • Purchase history;
  • Order information;
  • Interaction with emails sent to you (such as opens and clicks);
  • Products viewed;
  • Abandoned carts;
  • Preferences and interests inferred from your use of our webshop.

We may use this information for purposes including:

  • Sending newsletters;
  • Product and company updates;
  • Information about new products;
  • Abandoned cart reminders;
  • Service messages relating to your order;
  • Requests for product reviews;
  • Customer satisfaction surveys;
  • Personalised product recommendations;
  • Win-back campaigns for previous customers.

Marketing communications are only sent where there is a valid legal basis, such as your consent or – where legally permitted – a legitimate interest in relation to existing customer relationships.

You may unsubscribe from marketing communications at any time by using the unsubscribe link at the bottom of each email or by contacting us. Unsubscribing does not affect essential service messages relating to your order or account.

Klaviyo processes personal data exclusively on our behalf and implements appropriate technical and organisational measures to protect this information.

10. Reviews and Customer Satisfaction

We value our customers' experiences and may use Trustpilot or similar review platforms to collect reviews of our products and services.

Following an order, we may share your name, email address, order number and order date with our review partner so that you can be invited to leave a review.

This processing takes place exclusively to:

  • Measure customer satisfaction;
  • Improve our services;
  • Provide other customers with honest and independent product and company reviews.

Leaving a review is entirely voluntary. You are never required to submit a review.

If you choose to post a review, your personal data will be processed in accordance with the Privacy Policy of the relevant review platform. MyRoyalBaby has no control over how personal data is processed by the review platform after a review has been published.

We do not publish or modify reviews in a way that creates a misleading impression of our customers' experiences. Reviews may only be removed where there is a valid reason to do so, for example where they violate applicable laws or the terms of use of the relevant review platform.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure the website functions properly, improve the user experience, collect statistics and – where you have provided consent – display personalised advertisements.

Cookies are small text files that are stored on your device when you visit our website. Some cookies are necessary for the website to function, while others are used for analytics, marketing and personalisation purposes.

We use, among others, the following categories of cookies:

Necessary cookies

These cookies are essential for the proper functioning of our webshop and cannot be disabled. They ensure, for example, that:

  • Products remain in your shopping cart;
  • You can log in securely;
  • Payments can be processed correctly;
  • The website functions properly from a technical perspective;
  • Security measures against misuse and fraud operate correctly.

Analytics cookies

Analytics cookies allow us to collect statistical information about the use of our website. This provides us with insight into how our webshop performs and enables us to improve the user experience.

This information is anonymised as far as possible and is not used to directly identify visitors.

Marketing cookies

Marketing cookies help us and our advertising partners make advertisements more relevant. With your consent, we may collect information about your visit to our website so that we can display personalised advertisements through platforms including Google, Facebook, Instagram and TikTok.

These cookies may also be used to measure the effectiveness of advertising campaigns.

Functional cookies

Functional cookies remember choices you have made, such as language settings or other preferences, so that our website can better meet your needs.

Cookie preferences

When you first visit our website, we ask for your consent to place non-essential cookies where legally required. You can change your cookie preferences or withdraw previously given consent at any time through our cookie settings or your internet browser settings.

Disabling certain cookies may result in parts of our website not functioning optimally.

12. Google Services

To analyse and improve our website and optimise our marketing campaigns, we use various Google services.

Depending on your cookie preferences, we may use:

  • Google Analytics 4;
  • Google Ads;
  • Google Tag Manager.

Google Analytics 4

We use Google Analytics 4 to collect statistical information about the use of our website. The following information may be processed:

  • IP address (anonymised where possible);
  • Browser and device information;
  • Pages visited;
  • Duration of visits;
  • Click behaviour;
  • Traffic sources;
  • General usage statistics.

This information helps us continuously improve our website, products and services.

Google Ads

Google Ads enables us to display advertisements to interested visitors and measure the performance of our advertising campaigns.

Where you have provided consent, information about your website visit may be used for remarketing and to display personalised advertisements within Google's advertising network.

Google Tag Manager

We use Google Tag Manager solely to manage various scripts and measurement services on our website securely and efficiently. Google Tag Manager itself does not collect personal data for marketing purposes but facilitates the loading of other services to which separate privacy terms apply.

International data transfers

Google may process personal data on servers outside the European Economic Area (EEA). Where personal data is processed outside the EEA, appropriate safeguards are applied in accordance with applicable privacy legislation, including, where required, Standard Contractual Clauses (SCCs) approved by the European Commission or another appropriate protection mechanism.

More information about Google's processing of personal data can be found in Google's Privacy Policy.

13. Meta (Facebook and Instagram)

For our marketing activities, we use services provided by Meta Platforms Ireland Limited, including the Meta Pixel and other advertising and analytics tools for Facebook and Instagram.

Where you have provided consent through our cookie settings, we may collect information about your visit to our website in order to:

  • Measure the performance of our advertisements;
  • Gain insight into the use of our website;
  • Create audiences for advertising campaigns;
  • Display personalised advertisements on Facebook and Instagram;
  • Improve the effectiveness of our marketing activities.

Depending on your cookie preferences, the following information may be processed:

  • IP address;
  • Browser and device information;
  • Pages visited;
  • Products viewed;
  • Purchases;
  • Interactions with our website;
  • Advertising interactions;
  • Technical identifiers such as cookie IDs.

This information may be combined with information Meta already holds about you if you use Facebook, Instagram or other Meta services.

For certain processing activities, MyRoyalBaby B.V. and Meta may act as joint controllers within the meaning of the General Data Protection Regulation (GDPR). Meta remains responsible for the further processing of personal data within its own services in accordance with its own Privacy Policy.

More information about Meta's processing of personal data can be found in Meta's Privacy Policy.

14. TikTok

For our marketing activities, we use services provided by TikTok, including the TikTok Pixel, TikTok Events API, Advanced Matching and other advertising and analytics tools.

Where you have provided consent through our cookie settings, we may process and share information about your use of our website with TikTok in order to:

  • Measure the performance and conversions of our advertisements;
  • Gain insight into the use of our website;
  • Optimise advertising campaigns;
  • Create audiences for advertising campaigns and remarketing;
  • Display personalised advertisements;
  • Better attribute website visits, shopping cart actions and purchases to advertisements on TikTok.

Depending on your use of our website and the consent you have provided, the following personal data and information about your website use may be processed:

  • IP address;
  • Browser and device information;
  • Pages visited;
  • Products viewed;
  • Search queries;
  • Products added to the shopping cart;
  • Starting and completing the checkout process;
  • Purchase and order information;
  • Advertising interactions;
  • Technical identifiers, such as cookie IDs;
  • Email address;
  • Telephone number;
  • First and last name;
  • City;
  • Region or province;
  • Postal code;
  • Country.

For certain measurement and matching purposes, identifying information such as your email address and telephone number may be hashed before being transmitted. TikTok may use this information to better match events on our website with TikTok users and to measure and improve advertising performance.

For these purposes, we may use TikTok Advanced Matching, the TikTok Events API and integrations between TikTok and our webshop software.

TikTok may further process the personal data it receives in accordance with its own privacy terms. Depending on the relevant processing activity, TikTok may act as an independent data controller for the further processing of personal data within its own services.

TikTok may process personal data outside the European Economic Area (EEA). Where personal data is processed outside the EEA, appropriate safeguards are applied in accordance with applicable privacy legislation.

More information about TikTok's processing of personal data can be found in TikTok's Privacy Policy.

15. International Transfers of Personal Data

Some of our service providers process personal data outside the European Economic Area (EEA). This may include international technology and software providers that we use for our webshop, marketing, analytics and customer service.

Where personal data is processed outside the EEA, we ensure that this only takes place where appropriate safeguards are in place in accordance with the General Data Protection Regulation (GDPR).

Depending on the relevant service provider, these safeguards may include:

  • An adequacy decision by the European Commission;
  • Participation in the EU-U.S. Data Privacy Framework, where applicable;
  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • Other legally recognised safeguards.

We carefully select our service providers and require them to implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse and other forms of unlawful processing.

Despite these measures, transfers of personal data to countries outside the EEA may, in certain circumstances, involve different privacy risks than processing within the European Union. Where legally required, we will inform you of such transfers and obtain your prior consent where necessary.

16. Retention Periods

We do not retain your personal data for longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

In general, we apply the following principles:

  • Data relating to orders and customer accounts is retained for as long as necessary to provide our services and customer support.
  • Financial and administrative data, including invoices, is retained for the duration of the applicable statutory tax retention period.
  • Data processed for marketing purposes is retained until you withdraw your consent or object to the processing.
  • Data processed through cookies is retained in accordance with the retention periods applicable to the relevant cookies or until you withdraw your consent.

When personal data is no longer necessary for the purposes for which it was collected and no statutory retention obligation applies, it will be deleted or anonymised.

17. Security of Personal Data

We take the protection of your personal data seriously and implement appropriate technical and organisational measures to prevent loss, misuse, unauthorised access, unwanted disclosure and unlawful processing.

These measures include:

  • Secure connections (SSL/TLS);
  • Secure storage of personal data;
  • Access controls for systems and administrative records;
  • Periodic security updates to our systems;
  • Carefully selected service providers that implement appropriate security measures.

Although we make every reasonable effort to protect your personal data, no method of transmission over the internet or electronic storage can guarantee complete security. We therefore cannot guarantee absolute security.

If a data breach occurs that affects your personal data, we will act in accordance with applicable legal obligations.

18. Your Privacy Rights

Under the General Data Protection Regulation (GDPR), you have various rights regarding your personal data.

These include the right to:

  • Request access to the personal data we process about you;
  • Have inaccurate or incomplete personal data corrected;
  • Have your personal data deleted, where permitted by law;
  • Restrict the processing of your personal data;
  • Object to certain types of data processing;
  • Receive your personal data in a structured, commonly used and machine-readable format or have it transferred to another party (data portability);
  • Withdraw previously given consent at any time where processing is based on that consent.

If you wish to exercise any of these rights, please contact us using the contact details at the end of this Privacy Policy.

To prevent misuse, we may ask you to verify your identity before processing your request.

We will generally respond within one month of receiving your request. Where permitted or required by law, this period may be extended.

19. Complaints

If you believe that we do not process your personal data carefully or that we are acting in violation of applicable privacy legislation, we ask that you first contact us so that we can work together to find an appropriate solution.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the Dutch supervisory authority for data protection.

Further information is available via www.autoriteitpersoonsgegevens.nl.

20. Changes to this Privacy Policy

We reserve the right to amend or supplement this Privacy Policy from time to time, for example when legislation changes, our services are expanded or we use new technologies.

The most recent version of this Privacy Policy will always be available on our website. The effective date of the current version will be stated at the top of the page.

Where a change has a significant impact on the way we process your personal data, we will inform you where we are legally required to do so.

21. Contact Details

If you have any questions about this Privacy Policy or the processing of your personal data, please feel free to contact us.

MyRoyalBaby B.V.
Trekpad 1
1231 PA Loosdrecht
The Netherlands

General email: info@myroyalbaby.nl
Customer service: customerservice@myroyalbaby.nl
Business enquiries: sales@myroyalbaby.nl

We aim to respond to questions regarding privacy and personal data as soon as possible and, in any event, within the applicable statutory time limits.