PrPrivacy Policy
Because your trust matters — and so does your privacy.
At Treat Project B.V., we believe that shopping online should be straightforward, secure, and transparent.
Whether you’re browsing our webshop, ordering hair systems and supplies, subscribing to our newsletter, or contacting us for advice, we respect your privacy and take the protection of your personal information seriously.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under the General Data Protection Regulation (GDPR).
We aim to keep things clear and understandable, without unnecessary legal jargon.
1. Who Is Responsible for Your Personal Data?
Treat Project B.V. is responsible for processing personal data collected through our webshop and related business activities.
Company details
Treat Project B.V.
Tj. de Boerstraat 18
8561 EL Balk
The Netherlands
Chamber of Commerce (KvK): 85503983
VAT number: NL863645823B01
Email: info@treatproject.nl
Phone: +31 6 8997 3422
For questions about your personal data or this Privacy Policy, you can contact us using the details above.
2. What Personal Data Do We Collect?
Depending on how you interact with Treat Project, we may collect and process the following information.
2.1 Personal and Contact Information
When you place an order, create an account, or contact us, we may collect:
- First and last name
- Company name, if applicable
- Billing and shipping address
- Email address
- Telephone number
- VAT number, where applicable
- Information you voluntarily provide when contacting us
2.2 Order and Payment Information
When you purchase products from our webshop, we process information such as:
- Products ordered
- Order dates and order numbers
- Purchase amounts
- Payment status and payment method
- Shipping and tracking information
- Order history
- Returns, refunds, and customer service correspondence
Payments are processed through secure third-party payment providers.
We do not store your full credit card details on our own systems.
2.3 Account Information
If you create a customer account, we process the information necessary to manage that account.
This may include your login details, saved addresses, and order history.
Passwords are stored using appropriate security measures and are not accessible to us in readable form.
2.4 Website Usage and Technical Information
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and device information
- Operating system
- Pages visited
- Website interactions
- Referral sources
- Cookie preferences
Some of this information is necessary for the website to function correctly. Other information is collected only where permitted by law and, where required, after obtaining your consent.
3. Why Do We Process Your Personal Data?
We only process personal information when we have a valid legal basis under the GDPR.
3.1 Processing and Delivering Orders
We use your information to:
- Process and confirm purchases
- Arrange payments
- Prepare and dispatch orders
- Provide tracking information
- Handle returns and refunds
- Communicate about your order
Legal basis: Performance of a contract.
Without certain personal details, we cannot process or deliver your order.
3.2 Customer Service
When you contact us with questions about products, hair systems, orders, or other matters, we use the information you provide to respond and assist you.
Legal basis: Performance of a contract, steps taken before entering into a contract, or our legitimate interest in providing customer service, depending on the circumstances.
3.3 Legal and Administrative Obligations
We process certain personal and financial information to comply with applicable laws and regulations.
This includes maintaining accurate business records, issuing invoices, and meeting Dutch tax and accounting requirements.
Legal basis: Compliance with a legal obligation.
3.4 Newsletters and Marketing Communications
We occasionally send emails about:
- New products and brands
- Special offers and promotions
- Product availability
- Useful information about hair systems and related products
- Relevant product recommendations
We use Brevo to manage email marketing and customer communications.
Marketing emails are sent where you have given your consent or where another applicable legal basis permits us to contact you, such as the existing-customer exception under Dutch electronic marketing rules.
You can unsubscribe from marketing emails at any time using the unsubscribe link included in those messages.
Unsubscribing from marketing does not prevent you from receiving essential communications about your orders.
3.5 After-Purchase Emails
We may send follow-up emails after a purchase containing useful product information, application tips, maintenance advice, or reminders about related supplies.
Some follow-up messages may also contain promotional content or suggestions for additional purchases.
Where these messages qualify as direct marketing, we apply the same legal requirements as for other marketing communications.
You can opt out of promotional follow-up emails at any time.
3.6 Website Improvement and Analytics
We use website analytics to understand how visitors interact with our webshop.
This helps us identify technical problems, improve navigation, and make our website more useful.
Where required, analytics technologies are activated only after you have given the appropriate consent.
3.7 Advertising and Remarketing
We may use advertising services, including Google Ads and Meta advertising technologies, to measure advertising performance and show relevant advertisements.
Depending on your cookie preferences, these services may process information about your website interactions.
Where consent is required, advertising and remarketing technologies are activated only after you have agreed to the relevant cookie category.
Legal basis: Consent, where required.
4. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device that help websites function properly and, depending on your preferences, provide analytics and advertising functionality.
We distinguish between the following categories.
Necessary Cookies
These cookies are essential for the operation of our webshop.
They support functions such as:
- Shopping cart functionality
- Checkout processes
- Account login
- Website security
- Remembering cookie preferences
Necessary cookies do not require consent when they are strictly necessary for the requested service.
Analytics Cookies
Analytics cookies help us understand website traffic and visitor behaviour.
We use tools such as Google Analytics to improve our webshop and evaluate its performance.
Where required, these cookies are used only after you have given consent.
Marketing Cookies
Marketing cookies may be used to measure advertising campaigns and display relevant advertisements through services such as Google Ads and Meta.
These cookies are activated only where permitted and, when required, after obtaining your consent.
Managing Your Cookie Preferences
We use a cookie consent management system to help you manage your preferences.
You can accept or reject optional cookies and change or withdraw your consent through the cookie settings available on our website.
You can also manage cookies through your browser settings.
Please note that disabling certain necessary cookies may affect the functionality of our webshop.
5. Who Do We Share Your Personal Data With?
We never sell your personal information.
However, running an international webshop requires working with carefully selected service providers.
We share personal data only when necessary for legitimate business purposes and in accordance with applicable privacy laws.
5.1 Website and Hosting Services
Our webshop operates using WordPress and WooCommerce.
Our hosting and technical service providers may process information necessary to maintain, secure, and operate the website.
5.2 Payment Providers
We use secure payment providers, including Mollie, to process customer payments.
These providers receive the information necessary to complete and verify transactions.
Payment providers may also process certain information under their own legal responsibilities.
5.3 Shipping Companies
We share relevant delivery information with shipping providers, including GLS, FedEx, and UPS, depending on the selected shipping method.
This information may include your name, delivery address, telephone number, email address, and shipment details.
5.4 Email and Marketing Services
We use Brevo for newsletters, email campaigns, and automated customer communications.
Brevo processes relevant contact information and communication data on our behalf.
5.5 Analytics and Advertising Services
Depending on your consent and the services in use, information may be processed by:
- Google Analytics
- Google Ads
- Meta advertising services
These services may collect technical information and website interaction data according to their applicable privacy terms.
5.6 Accounting and Administration
We use accounting and administrative software, including Exact, to manage invoices, financial records, and business administration.
Relevant customer and transaction information may be processed for these purposes.
5.7 Legal Requirements
We may disclose personal information when legally required, for example to comply with tax obligations, lawful requests from authorities, or other applicable regulations.
6. International Data Transfers
Treat Project B.V. is based in the Netherlands and works with service providers that help us operate our webshop, process payments, manage customer communications, analyse website performance, and arrange international deliveries.
Some of these providers may process or access personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we ensure that an appropriate legal transfer mechanism is in place, where required under the GDPR. Depending on the destination and service provider, this may include an adequacy decision by the European Commission, the EU-US Data Privacy Framework for certified organisations, or approved Standard Contractual Clauses with additional safeguards where necessary.
For international deliveries, relevant shipping information may also be shared with carriers and their partners in the destination country to arrange delivery and comply with applicable customs requirements.
You can contact us at info@treatproject.nl for more information about international data transfers and the safeguards applicable to your personal information.
7. How Long Do We Keep Your Data?
We retain personal information only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law.
Orders and Financial Records
Financial records, invoices, and related administrative information are generally retained for seven years in accordance with Dutch tax legislation. Certain records may be subject to longer statutory retention periods.
Customer Accounts
Customer account information is retained for as long as necessary to provide our services, maintain customer relationships, and comply with applicable legal obligations.
Customers may request deletion of their accounts at any time, subject to legal retention requirements.
Customer Service Communications
Customer correspondence is retained for as long as reasonably necessary to respond to enquiries, handle complaints, and resolve potential disputes.
Marketing Information
We retain marketing contact information while a valid legal basis exists.
Customers can unsubscribe from marketing communications at any time. Limited information may be retained to ensure that unsubscribe requests continue to be respected.
Website Analytics
For Google Analytics, user-level and event-level data retention is currently configured for 14 months. This does not necessarily apply to all aggregated analytics reports.
Data Deletion
When personal information is no longer required, we delete or anonymise it where appropriate, unless continued retention is legally required.
8. How Do We Protect Your Personal Data?
Protecting customer information is an important part of running Treat Project.
We use appropriate technical and organisational measures to reduce the risk of unauthorised access, loss, misuse, or disclosure.
These measures include:
- Encrypted website connections (HTTPS/SSL)
- Restricted access to personal information
- Password protection and access controls
- Website maintenance and security monitoring
- Regular software updates
- Secure payment processing
- Appropriate arrangements with service providers where required
Although no online system can guarantee absolute security, we continuously work to maintain a safe shopping environment.
9. Your Privacy Rights
Under the GDPR, you have several rights regarding your personal data.
Depending on the circumstances, you may:
Request access
Ask what personal information we hold about you.
Request correction
Ask us to correct inaccurate or incomplete information.
Request deletion
Ask us to delete your personal information when there is no valid reason to retain it.
Request restriction
Ask us to limit how your personal information is processed in certain circumstances.
Object to processing
Object to processing based on legitimate interests and object at any time to the use of your personal data for direct marketing.
Request data portability
Request certain personal information in a structured, commonly used, machine-readable format.
Withdraw consent
Withdraw previously given consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
How to Exercise Your Rights
Simply contact us at:
We may ask you to verify your identity before processing certain requests to protect your personal information.
We will respond within the time limits required by the GDPR, generally within one month.
Some requests may be subject to legal exceptions, including mandatory recordkeeping requirements.
10. Complaints
If you have concerns about how we handle your personal information, please contact us first.
We appreciate the opportunity to address your concerns.
You also have the right to submit a complaint to the Dutch supervisory authority:
Autoriteit Persoonsgegevens
Dutch Data Protection Authority
11. Children’s Privacy
Our webshop is intended for customers who are legally able to make purchases.
We do not knowingly collect personal information from children for marketing purposes without the required consent or other lawful basis.
If you believe that a child has provided personal information to us unlawfully, please contact us so we can investigate and take appropriate action.
12. External Websites
Our website may contain links to external websites, manufacturers, service providers, or social media platforms.
We are not responsible for the privacy practices of websites operated by third parties.
We recommend reviewing their privacy policies before providing personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy when our services, business processes, technologies, or legal obligations change.
The most recent version will always be available on our website.
Where required by law, we will inform you separately about significant changes.
14. Contact Us
Have a question about your privacy, personal information, or cookie preferences?
We’re happy to help.
Treat Project B.V.
Tj. de Boerstraat 18
8561 EL Balk
The Netherlands
Email: info@treatproject.nl
Phone: +31 6 8997 3422
Personal service, transparent communication, and respect for your privacy — that’s how we like to do business.
Last updated: 21 October 2026