Privacy & Policy

Last updated: [date]

Returnista B.V. ("Returnista", "we", "us", or "our") attaches great importance to the protection of your personal data. In this privacy policy, we explain what data we collect, why we do so, how we handle it, and what rights you have. This policy applies to the use of our website (www.returnista.nl) and our returns management platform (collectively: "the Services").

1. Data controller

The controller for your personal data is:

Returnista B.V.
Koivistokade 76, 1013 BC Amsterdam, The Netherlands
Chamber of Commerce number: 69019460
Email: quinten@returnista.nl

2. What personal data we collect

Depending on how you use our Services, we process the following categories of personal data:

• Account data — name, email address, phone number, company name, and password (stored encrypted).
• Return and order data — information about returns, orders, products, return reasons, and shipping details processed through the platform.
• Data of our customers' consumers — when an online store uses Returnista, we process data of their customers (such as name, address, order number, and return information) on behalf of that online store. In that case, Returnista acts as a processor and the online store as the controller.
• Usage data — information about your interaction with the Services, such as features used, frequency of use, and error messages.
• Technical data — IP address, device type, operating system, browser type, and device identifiers.
• Communication data — the content of messages you exchange with us via email, forms, or support.

3. How we use your data

We process personal data for the following purposes:

• Providing and managing the Services and the core functionality of the platform.
• Processing and handling returns, exchanges, and refunds.
• Providing customer support and answering questions.
• Analyzing and improving the performance and user experience of our Services.
• Sending service-related messages and (with consent) our newsletter.
• Compliance with legal obligations.

4. Legal grounds for processing

We process your data exclusively on the basis of one of the following legal grounds under the GDPR:

• Performance of a contract — to be able to provide our Services to you.
• Consent — for example, for the newsletter or certain cookies. You can withdraw your consent at any time.
• Legitimate interest — for example, for the security and improvement of our Services.
• Legal obligation — when we are required to process or retain data.

5. Sharing data with third parties

We do not sell your personal data. We only share data when necessary:

• Service providers (processors) — we engage third parties for services such as hosting, analytics, email, payment processing, and logistics. We enter into data processing agreements with these parties.
• Legal obligations — when we are legally required to do so or in response to a valid request from a competent authority.

6. Transfers outside the EEA

When we transfer personal data to parties outside the European Economic Area (EEA), we ensure appropriate safeguards, such as EU Standard Contractual Clauses (SCCs), so that your data remains protected there as well.

7. Retention periods

We do not store personal data longer than necessary for the purposes for which it was collected, or as long as we are legally required to do so.

8. Security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access, including encryption, access management, and secure servers.

9. Cookies

Our website uses cookies and similar technologies. For more information about which cookies we use and how to manage your preferences, please refer to the cookie settings on our website.

10. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access.
• Right to rectification (correction).
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent.

You can submit a request via quinten@returnista.nl. We will respond within the statutory timeframe. If you disagree with how we handle your data, you have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

11. Changes to this privacy policy

We may update this privacy policy from time to time. The most recent version is always available on this page, with the date of the last update at the top. We will actively notify you of any significant changes where necessary.

12. Contact

Do you have any questions about this privacy policy or the processing of your personal data? Please contact us:

Returnista B.V.
Koivistokade 76, 1013 BC Amsterdam, The Netherlands
Email: quinten@returnista.nl