Privacy Notice — SVYT BODY

Last updated: May 2026

This Privacy Notice explains how SVYT BODY ("we", "us", "our") collects, uses, and protects your personal data when you visit or make a purchase from svytbody.com, create an account, or otherwise interact with us.

We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and UK GDPR.

1. Who We Are

Data Controller:

• Legal name: SVYT
• Trading name: SVYT BODY
• Address: Bosrankstraat 48, 1032 LH, Amsterdam, NL
• KvK number: 99020424
• BTW-ID: NL005366940B24
• Contact: info@svytbody.com

If you have questions about this Privacy Notice or your personal data, you can contact us using the details above.

2. What Personal Data We Collect

a) Information you provide to us

• Name
• Email address
• Shipping and billing address
• Phone number
• Account login details
• Order and payment information
• Communications with us (emails, contact forms)

b) Information collected automatically

When you visit our website, we may automatically collect:

• IP address
• Device and browser information
• Pages viewed and interactions
• Referral source

This data is collected through cookies and similar technologies (see Section 5 below).

3. How We Use Your Personal Data

We use your personal data to:

• Process and deliver your orders
• Create and manage customer accounts
• Process payments and prevent fraud
• Communicate with you about your orders or account
• Improve our website and services
• Analyze website usage and performance
• Send marketing communications (where consent is given)

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Performance of a contract — to fulfill orders and provide services
• Legal obligation — accounting and tax compliance
• Legitimate interest — improving our services, fraud prevention
• Consent — marketing communications, cookies, and tracking technologies

You may withdraw your consent at any time.

5. Cookies and Tracking Technologies

Cookies are small text files placed on your device when you visit our website. They help the website function properly, improve user experience, and provide information to us. Cookies may be session cookies (deleted when you close your browser) or persistent cookies (stored for a defined period).

a) Strictly necessary cookies

These cookies are required for the operation of our website and cannot be disabled. They allow you to navigate the website, use shopping cart and checkout, access secure areas, and manage your account.

Legal basis: Legitimate interest / contractual necessity

b) Analytics & performance cookies

These cookies help us understand how visitors interact with our website, such as pages visited, time spent on pages, and errors or performance issues. This data is aggregated and anonymous.

Examples: Google Analytics (GA4) (if enabled)

Legal basis: Consent

c) Marketing & advertising cookies

These cookies are used to deliver relevant ads, measure the effectiveness of advertising campaigns, and track conversions and user interactions. These cookies may track your browsing activity across websites.

Examples: Meta / Facebook Pixel, Instagram advertising tools

Legal basis: Consent

d) Functional cookies

These cookies allow enhanced functionality and personalization, such as remembering preferences and language or region settings.

Legal basis: Legitimate interest or consent (depending on function)

Cookie consent

When you first visit our website, you will be presented with a cookie banner allowing you to accept all cookies, reject non-essential cookies, or manage your preferences. You can withdraw or change your consent at any time via cookie settings on our website or your browser settings.

You can also control or delete cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. Learn more at https://www.allaboutcookies.org.

Some cookies may involve data transfers outside the EU/UK. Where applicable, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful safeguards.

We and our partners, including *Shopify, use cookies and other technologies to personalize your experience, show you ads, and perform analytics. We will not use cookies or other technologies for these purposes unless you accept them. 

6. Third-Party Service Providers

We share personal data with trusted third parties only where necessary to operate our business and fulfill your orders. These include:

E-commerce platform:

• Shopify

Payment processing:

• Stripe, PayPal, iDEAL

Shipping and delivery:

• UPS
• DPD
• PostNL

Marketing and advertising:

• Meta (Facebook / Instagram)

Email marketing:

• Klaviyo (if enabled)

Analytics:

• Google Analytics (if enabled)

These providers act as data processors or independent controllers and process data in accordance with their own privacy policies. Personal data shared with shipping carriers is limited to what is necessary to deliver your order (name, address, phone number, email for delivery notifications).

Hosting & Data Processing

Our store is hosted by Shopify Inc. Shopify collects and processes your personal data when you visit and make purchases on our store, including to provide services based on your interactions with other merchants and with Shopify ("Enhanced Services"). These Enhanced Services enable us and Shopify to (i) provide you with a more customized experience, (ii) serve you more relevant ads, and (iii) understand how you interact with our store and our ads.

Data Sharing

Information about your activity on our store will be shared with Shopify and other third parties that may be located in other countries, in order to provide you and us with services, including Enhanced Services.

Your Privacy Rights with Shopify

You can opt out of Shopify's processing of your data for certain uses, or request deletion of your data, directly via Shopify's privacy portal: https://privacy.shopify.com

https://privacy.shopify.com/en

For more information on how Shopify collects and uses your data, please review: 

https://www.shopify.com/nl/legal/privacy/consumers

7. International Data Transfers

Some of our service providers are located outside the EU/UK.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable

8. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Privacy Notice. Specific retention periods:

• Order and transaction data: 7 years from the date of the transaction (required by Dutch tax law / Belastingdienst)
• Customer account data: for the duration of your account, plus 12 months after account deletion
• Marketing and communication data: until you withdraw consent or unsubscribe
• Website analytics data: up to 26 months (depending on the analytics provider)
• Customer support correspondence: up to 2 years after resolution

After the applicable retention period, personal data is securely deleted or anonymized.

9. Your Rights (EU & UK)

Under the GDPR and UK GDPR, you have the right to:

• Access your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Object to processing based on legitimate interest
• Restrict processing in certain circumstances
• Data portability — receive your data in a portable format
• Withdraw consent at any time for consent-based processing

To exercise your rights, contact us at info@svytbody.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. This includes encrypted connections (SSL/TLS), secure payment processing, and access controls.

11. Children's Privacy

Our website and products are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact

For any privacy-related questions or requests: info@svytbody.com