PRIVACY POLICY

Last updated: 22 July 2026

This Privacy Policy explains how Blue Bottle Love Europe collects, uses, stores, shares and otherwise processes personal data when you:

• visit or use our website;

• create or use a customer account;

• place or attempt to place an order;

• purchase a personalised product;

• subscribe to marketing communications;

• contact customer service;

• submit a cancellation, withdrawal, return or complaint;

• submit a review or other content;

• participate in an affiliate or referral programme;

• interact with our advertisements or social-media channels.

“Personal data” means any information relating to an identified or identifiable individual.

Nothing in this Privacy Policy limits any rights available under the General Data Protection Regulation, the UK GDPR, applicable Dutch privacy legislation or other mandatory data-protection laws.

1. DATA CONTROLLER

The Blue Bottle Love Europe online store is operated by:

Peace Of I Ecommerce
Trading as Blue Bottle Love Europe

De Zalmen 52
6865 AK Doorwerth
The Netherlands

Please note: this is not a visitation, showroom, dispatch or return address.

Company registration number: 77198433
VAT registration number: NL003161519B91

Email:

info@bluebottlelove.eu

Peace Of I Ecommerce is the data controller responsible for the processing described in this Privacy Policy.

2. PERSONAL DATA WE COLLECT

The personal data we collect depends on how you interact with our website and services.

Information you provide directly

We may collect:

• your full name;

• billing and delivery address;

• email address;

• telephone or WhatsApp number;

• country, region and preferred language;

• customer-account information;

• products ordered or returned;

• order numbers and transaction details;

• delivery and tracking information;

• discount, gift-card, affiliate or referral information;

• newsletter and marketing preferences;

• correspondence with customer service;

• cancellation, withdrawal and return information;

• complaints and warranty requests;

• reviews, photographs, testimonials or other submitted content;

• information submitted through website forms.

Personalised and custom-made products

When you order a personalised or custom-made product, we may process information needed to create the product, including:

• names;

• dates;

• personal messages or wording;

• photographs;

• logos;

• artwork;

• symbols;

• layout or design instructions;

• other customer-supplied content.

Please provide only information that is necessary for the product.

When customer-supplied material contains information about another individual, you are responsible for ensuring that you have permission to provide and use that information.

Payment information

Payments are processed through Shopify and the payment provider selected during checkout.

Payment providers may process:

• payment-card or bank details;

• billing information;

• transaction identifiers;

• payment status;

• verification information;

• security and fraud-prevention information.

We generally do not receive or store complete payment-card details. We normally receive only the information required to confirm, administer or refund a payment.

Information collected automatically

When you visit or use our website, we and our service providers may automatically collect:

• IP address;

• browser type and version;

• device type;

• operating system;

• approximate location derived from your IP address;

• language and time-zone settings;

• pages and products viewed;

• search terms;

• cart and checkout activity;

• order and purchase activity;

• referring websites, advertisements or referral links;

• dates and times of visits;

• cookie and pixel identifiers;

• consent and cookie preferences;

• interactions with marketing emails;

• security, diagnostic and error information.

This information may be collected through cookies, server logs, pixels, tags, local storage and similar technologies.

3. SOURCES OF PERSONAL DATA

We may receive personal data:

• directly from you;

• from Shopify;

• from payment providers;

• from delivery carriers;

• from customer-service and email providers;

• from fraud-prevention and security providers;

• from analytics and advertising providers;

• from affiliate or referral partners;

• from social-media platforms;

• from publicly available sources, where legally permitted.

For example, a delivery carrier may provide shipment and delivery-status information, while an advertising provider may provide information about how visitors interacted with an advertisement.

4. PURPOSES AND LEGAL BASES

We process personal data only where we have a valid legal basis.

Performance of a contract

We process personal data where necessary to:

• operate our online store;

• receive and process orders;

• accept and administer payments;

• manufacture, personalise or prepare products;

• provide order confirmations and invoices;

• pack and dispatch products;

• arrange delivery;

• provide tracking information;

• operate customer accounts;

• process cancellations and withdrawals;

• handle returns, replacements and refunds;

• provide customer service;

• administer gift cards, discounts and affiliate arrangements.

The legal basis is the performance of a contract or taking steps at your request before entering into a contract.

Compliance with legal obligations

We may process and retain personal data to:

• maintain legally required accounting and tax records;

• issue legally compliant invoices;

• comply with consumer-protection obligations;

• administer statutory withdrawals and guarantees;

• comply with product-safety and traceability obligations;

• respond to lawful requests from authorities;

• comply with VAT, customs and import requirements;

• comply with court orders and other legal obligations.

The legal basis is compliance with a legal obligation.

Legitimate interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• securing our website and checkout;

• preventing fraud, misuse and unauthorised payments;

• protecting customers, our business and our systems;

• responding to questions and complaints;

• improving our products and customer service;

• managing stock, production, orders and delivery;

• keeping appropriate business records;

• measuring the general performance of our store;

• preventing misuse of promotions, discounts and return procedures;

• establishing, exercising or defending legal claims.

You may object to processing based on legitimate interests as explained in Section 19.

Consent

Where legally required, we rely on consent to:

• send marketing newsletters;

• place non-essential analytics or advertising cookies;

• measure advertising performance;

• personalise advertising;

• share data with advertising platforms;

• publish identifiable customer photographs or testimonials for promotional purposes.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. ORDERS, PRODUCTION AND DELIVERY

When you place an order, we may use your personal data to:

• review and accept the order;

• verify and process payment;

• screen the transaction for fraud or misuse;

• manufacture, personalise or prepare the product;

• issue an order confirmation or invoice;

• pack and dispatch the order;

• create shipping labels;

• provide the carrier with delivery information;

• send tracking and delivery updates;

• prepare customs documentation where applicable;

• provide after-sales assistance;

• process returns, replacements and refunds.

To deliver an order, we may provide the carrier with:

• your name;

• delivery address;

• email address;

• telephone number;

• parcel information;

• customs information where required;

• other information reasonably necessary to complete the delivery.

6. CUSTOMER ACCOUNTS

When you create or use a customer account, we may process:

• your name and contact details;

• secure login or authentication information;

• saved addresses;

• order history;

• returns and refunds;

• account preferences;

• saved shopping or checkout information.

You are responsible for protecting your account credentials.

You may request deletion of your customer account. Information that must be retained for accounting, tax, fraud-prevention, contractual or legal purposes may be kept separately for the applicable retention period.

7. CUSTOMER SERVICE, WITHDRAWALS AND COMPLAINTS

When you contact us or submit a cancellation, withdrawal, return, warranty request or complaint, we may process:

• your contact information;

• order and payment details;

• delivery and tracking information;

• the contents of your messages;

• photographs of products and packaging;

• details about the requested resolution;

• replacement or refund information;

• records showing how the matter was handled.

Please avoid including unrelated sensitive information in correspondence or photographs.

8. EMAIL AND WHATSAPP COMMUNICATION

Our primary contact channel is email.

When you contact us by email, we process the information contained in your message and any attachments for the purpose of responding and administering your request.

Where WhatsApp customer service is offered and you contact us through WhatsApp:

• your telephone number and profile information may be visible to us;

• your messages and attachments are processed to respond to your request;

• WhatsApp and Meta may independently process information in accordance with their own privacy terms;

• data may be processed outside the European Economic Area.

Please do not send payment-card details, passwords, health information or other unnecessary sensitive information through email or WhatsApp.

9. NEWSLETTERS AND DIRECT MARKETING

You may subscribe to receive product news, offers and inspiration from Blue Bottle Love Europe.

We may send marketing communications:

• when you have given consent; or

• in limited circumstances where applicable law permits marketing to existing customers concerning similar products.

Every marketing email will include an unsubscribe option.

You may also unsubscribe by contacting:

info@bluebottlelove.eu

Unsubscribing from marketing does not prevent us from sending necessary transactional messages, such as:

• order confirmations;

• payment notifications;

• shipping updates;

• product-safety notices;

• cancellation, return and refund communications;

• responses to customer-service enquiries.

After you unsubscribe, we may retain limited information on a suppression list to ensure that your preference continues to be respected.

10. COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small data files stored on your browser or device. Similar technologies include pixels, tags, software development kits and local storage.

Strictly necessary technologies

These technologies may be required for:

• operating the shopping cart;

• checkout and payment processing;

• customer-account login;

• website and payment security;

• fraud prevention;

• load balancing and network management;

• remembering privacy choices;

• maintaining a secure session.

Strictly necessary technologies do not normally require consent because they are needed to provide the website or a service you requested.

Preference technologies

Preference technologies may remember:

• language;

• country or region;

• account preferences;

• display settings;

• other website choices.

Analytics technologies

Analytics technologies may help us understand:

• visitor numbers;

• pages and products viewed;

• website navigation;

• technical errors;

• store performance;

• campaign and referral performance.

Advertising technologies

Advertising technologies may be used to:

• measure advertisements;

• understand which campaigns led to visits or purchases;

• create or measure audiences;

• personalise advertising;

• limit how often an advertisement is shown.

Where consent is legally required, non-essential analytics and advertising technologies will not be activated until you have given consent.

11. COOKIE PREFERENCES

You can accept, reject or change non-essential cookie preferences through:

• the cookie banner;

• the Cookie Preferences function available on our website;

• your browser or device settings.

Withdrawing cookie consent does not affect processing that took place lawfully before consent was withdrawn.

Blocking strictly necessary technologies may prevent parts of the website, cart, checkout or customer-account functions from working correctly.

12. ANALYTICS AND ADVERTISING

Subject to your cookie choices and applicable law, our website may use analytics and advertising services provided by organisations such as:

• Shopify;

• Google;

• Meta;

• affiliate and referral providers;

• other services connected to our Shopify store.

These services may process information such as:

• IP address;

• device and browser identifiers;

• pages and products viewed;

• cart and checkout activity;

• purchases;

• referring advertisements and links;

• cookie or pixel identifiers.

We use this information to understand website use, improve our services and measure or personalise advertising.

Non-essential analytics or advertising services are subject to consent where legally required.

13. SHOPIFY

Our online store is hosted and supported by Shopify.

Shopify may provide:

• website hosting;

• online-store functionality;

• checkout;

• payment services;

• customer accounts;

• order and return management;

• security and fraud-prevention tools;

• analytics;

• privacy and consent tools.

For core store services, Shopify generally processes personal data on our behalf.

For certain Shopify services, such as Shop, Shop Pay or other consumer-facing and enhanced services, Shopify may process personal data as an independent controller under its own privacy terms.

Where Shopify Network Intelligence or related Enhanced Services are enabled, Shopify may combine information about activity on our store with information from other Shopify services to:

• improve fraud detection;

• improve store and product personalisation;

• improve analytics and advertising measurement;

• provide enhanced Shopify features.

Where consent is required, non-essential processing is subject to the choices made through our cookie and privacy settings.

Certain Shopify-specific privacy choices may also be available through Shopify’s privacy portal.

14. AFFILIATE AND REFERRAL PROGRAMMES

Where you apply to or participate in an affiliate or referral programme, we and our programme provider may process:

• your name and contact information;

• company or website information;

• social-media profiles;

• affiliate application information;

• referral links and codes;

• clicks and attributed orders;

• commission information;

• payment and tax information;

• fraud and programme-compliance information.

We use this information to:

• assess applications;

• operate the programme;

• attribute sales and referrals;

• calculate and pay commissions;

• communicate with participants;

• prevent misuse and fraud;

• comply with accounting and tax obligations.

The programme provider may also process information under its own privacy terms.

15. REVIEWS AND USER-SUBMITTED CONTENT

When you submit a review, photograph, testimonial or other content, we process the information you provide.

Where content is published, information such as your chosen display name, review, photograph or testimonial may become publicly visible.

Where legally required, we will obtain additional permission before using identifiable customer content for other promotional purposes.

Do not submit personal information about another person unless you have permission to do so.

16. SOCIAL MEDIA AND EXTERNAL PLATFORMS

We may maintain pages or accounts on social-media and content platforms.

When you visit or interact with an external platform, that platform may independently process information under its own privacy policy.

We may receive:

• your public profile name;

• comments and direct messages;

• reactions and interactions;

• aggregated audience information;

• advertising-performance information.

We do not control how external platforms independently collect and use personal data.

17. SHARING PERSONAL DATA

We may share personal data where reasonably necessary with:

• Shopify and its affiliates;

• payment and checkout providers;

• delivery carriers and dispatch partners;

• IT, hosting and security providers;

• email and customer-service providers;

• analytics and advertising providers, subject to consent where required;

• affiliate and referral providers;

• accountants, insurers, legal advisers and other professional advisers;

• banks and financial institutions;

• customs, tax and regulatory authorities;

• judicial and law-enforcement authorities;

• a purchaser or successor in connection with a lawful sale, merger or restructuring.

Service providers may process personal data only for the relevant service or as otherwise permitted or required by law.

We do not sell personal data in exchange for money.

Certain advertising disclosures may be legally classified as “sharing” or a “sale” under the laws of some jurisdictions. Where applicable, eligible visitors can use the cookie or data-sharing preferences provided on the website.

18. INTERNATIONAL DATA TRANSFERS

Some service providers may process or store information outside the European Economic Area, the United Kingdom or Switzerland.

This may include processing in Canada, the United States and other countries.

Where personal data is transferred internationally, we rely on appropriate safeguards where required, such as:

• an adequacy decision;

• European Commission Standard Contractual Clauses;

• the UK International Data Transfer Addendum;

• contractual and organisational protections;

• another legally recognised transfer mechanism.

You may contact us for more information about safeguards relevant to your personal data.

19. AUTOMATED PROCESSING AND FRAUD PREVENTION

Shopify, payment providers and fraud-prevention services may automatically analyse transactions and technical signals to identify:

• suspected fraud;

• unauthorised payment;

• repeated failed payment attempts;

• suspicious account or device activity;

• misuse of discounts or checkout systems.

This may result in a payment being delayed, referred for manual review or declined.

We do not intentionally make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards.

Where applicable, you may request human review of a significant automated decision.

20. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy and to comply with legal, tax, accounting and dispute-resolution requirements.

Orders, invoices and accounting

Basic order, invoice, payment and accounting information is generally retained for at least seven years to comply with Dutch tax and accounting obligations.

Information connected with the European Union One Stop Shop scheme may need to be retained for ten years.

Customer accounts

Customer-account information is normally retained while the account remains active.

After account deletion, information not subject to another retention requirement will be deleted or anonymised within a reasonable period.

Personalisation files

Customer-supplied artwork, photographs, logos and personalisation instructions are retained only as long as reasonably necessary to:

• produce the order;

• provide customer service;

• manage possible complaints or warranty issues;

• meet legal requirements.

Files may be deleted earlier when they are no longer required.

Customer-service and return records

Customer-service, withdrawal, return and complaint records are normally retained for as long as necessary to handle the matter and possible legal claims.

Where they form part of an order, accounting or legal record, they may be retained for the applicable statutory period.

Marketing information

Marketing information is retained until:

• you unsubscribe;

• you withdraw consent;

• the information is no longer required;

• we determine that the contact details are no longer active.

Limited suppression information may be retained to ensure that your unsubscribe request remains effective.

Cookies and analytics

Cookie and analytics information is retained according to:

• the function of the technology;

• your consent choices;

• provider settings;

• applicable legal requirements.

Information may be deleted, aggregated or anonymised earlier.

Fraud prevention and legal claims

Relevant data may be retained for longer where reasonably necessary to:

• investigate fraud or security incidents;

• protect customers and our business;

• establish, exercise or defend legal claims;

• comply with a preservation order or other legal obligation.

21. YOUR PRIVACY RIGHTS

Depending on the law that applies to you, you may have the right to:

• receive information about how your data is processed;

• request access to your personal data;

• correct inaccurate or incomplete data;

• request deletion of personal data;

• restrict certain processing;

• object to processing based on legitimate interests;

• object to direct marketing at any time;

• receive eligible data in a structured, commonly used and machine-readable format;

• request transfer of eligible data to another controller;

• withdraw consent at any time;

• request information about international-transfer safeguards;

• request human review of certain automated decisions;

• lodge a complaint with a data-protection authority.

These rights are not absolute. A request may be limited where continued processing is necessary for legal obligations, accounting records, fraud prevention, contractual administration or legal claims.

22. EXERCISING YOUR RIGHTS

To exercise a privacy right, contact:

info@bluebottlelove.eu

Please clearly describe:

• the right you wish to exercise;

• the information, account or order concerned;

• the email address connected to the account or order;

• any relevant order number.

We may request additional information where reasonably necessary to verify your identity and prevent unauthorised access.

We will normally respond within one month, unless applicable law permits an extension.

You will not normally be charged for exercising a privacy right. A reasonable fee may be charged, or a request may be refused, where legally permitted because the request is manifestly unfounded or excessive.

23. SECURITY

We use reasonable technical and organisational measures intended to protect personal data against:

• unauthorised access;

• accidental loss;

• unlawful use;

• alteration;

• disclosure;

• destruction.

Measures may include:

• secure Shopify services;

• access restrictions;

• authentication controls;

• secure payment providers;

• data minimisation;

• software and security updates;

• contractual protections with service providers.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

Please contact us immediately if you believe that your account or personal information has been compromised.

24. CHILDREN’S PRIVACY

Our online store is not directed at children.

Orders must be placed by an adult or with the permission and supervision of a parent or legal guardian.

We do not knowingly collect personal data from children for marketing purposes.

A parent or guardian who believes that a child has provided personal data without appropriate permission may contact us to request its removal.

25. THIRD-PARTY WEBSITES

Our website may contain links to external websites, platforms and services.

This Privacy Policy applies only to processing for which Peace Of I Ecommerce is responsible.

We are not responsible for the privacy practices of external organisations. Please review their privacy policies before providing personal data.

26. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect:

• changes to our website or services;

• changes to Shopify or installed applications;

• new payment, delivery, analytics or marketing providers;

• changes to our processing activities;

• legal or regulatory developments;

• security or operational requirements.

The latest version and update date will be published on this page.

Where a change materially affects your rights or how personal data is used, we will provide additional notice where required.

27. PRIVACY COMPLAINTS

Please contact us first if you have a privacy question or complaint so that we have an opportunity to investigate and respond.

Email:

info@bluebottlelove.eu

You also have the right to lodge a complaint with the Dutch data-protection authority:

Autoriteit Persoonsgegevens

If you reside outside the Netherlands, you may also contact the competent data-protection authority in your country of residence.

28. CONTACT INFORMATION

Questions about this Privacy Policy or the processing of your personal data can be sent to:

Peace Of I Ecommerce
Trading as Blue Bottle Love Europe

De Zalmen 52
6865 AK Doorwerth
The Netherlands

Please note: this is not a visitation, showroom, dispatch or return address.

Company registration number: 77198433
VAT registration number: NL003161519B91

Email:

info@bluebottlelove.eu

Website:

www.bluebottlelove.eu