Privacybeleid

Last updated: August 30, 2026

FitGirl Nutrition respects your privacy and handles personal data carefully, transparently and securely.

This Privacy Policy explains which personal data we collect when you visit fitgirl-nutrition.nl, create an account, place an order, contact us, subscribe to marketing communications or otherwise use our services. It also explains why we process this data, how long we retain it, with whom it may be shared and which rights you have.

FitGirl Nutrition is a brand of Hoeft Niet B.V., trading as Nutriworld.

1. DATA CONTROLLER

The controller responsible for the processing of personal data through fitgirl-nutrition.nl is:

Hoeft Niet B.V., trading as Nutriworld
Brand: FitGirl Nutrition

Registered office:

Middenweg 113a
1782 BC Den Helder
The Netherlands

Store and pickup location:

Ambachtsweg 6c
1785 AJ Den Helder
The Netherlands

Email: info@fitgirl-nutrition.com
Telephone and WhatsApp: +31 6 15518795
Website: fitgirl-nutrition.nl

2. PERSONAL DATA WE COLLECT

Depending on how you use our website and services, we may collect the following categories of personal data.

2.1 Contact and identification data

This may include:

First and last name
Billing address
Delivery address
Email address
Telephone number
Company name, where applicable
VAT number or other business information, where applicable

2.2 Order and transaction data

This may include:

Products ordered
Order number
Order value
Discounts used
Payment method
Payment status
Invoice information
Shipping method
Delivery and Track & Trace information
Returns, refunds and complaints
Previous orders associated with your account or email address

We do not normally receive or store complete payment-card details. Payments are processed by the payment provider selected during checkout. We may receive limited payment information, such as the payment method, status and transaction reference.

2.3 Account information

If you create a customer account, we may process:

Login and account details
Saved addresses
Account preferences
Order history
Information you voluntarily add to your account

Passwords are processed in protected form through our e-commerce platform and are not visible to FitGirl Nutrition in plain text.

2.4 Communications and customer-service data

When you contact us by email, telephone, WhatsApp, a contact form, social media or another channel, we may process:

Your contact details
The content of your message
Order information
Attachments and photographs
Previous correspondence
Information necessary to answer your question or resolve a complaint

Please do not send health information, medical records or other sensitive personal data unless it is strictly necessary. FitGirl Nutrition does not provide medical diagnosis or treatment.

2.5 Website and device data

When you visit our website, certain technical information may be processed automatically, including:

IP address
Browser type
Device type
Operating system
Language and regional settings
Referring website
Pages viewed
Date, time and duration of visits
Cookie identifiers
Shopping-cart activity
General interaction and conversion data
Technical error and security information

Non-essential analytics, marketing and advertising technologies are used only where permitted and, where legally required, after obtaining your consent.

2.6 Marketing preferences

If you subscribe to a newsletter or agree to receive marketing, we may process:

Name
Email address
Marketing consent
Subscription date and source
Email engagement information
Unsubscribe and communication preferences

3. HOW WE COLLECT PERSONAL DATA

We collect personal data:

Directly from you when you place an order, create an account or contact us;
When you subscribe to marketing communications;
Automatically through necessary website technologies;
Through analytics or marketing technologies where you have given the required consent;
From payment providers, delivery companies and other service providers involved in completing your order;
From platforms through which you choose to communicate with us;
From legally accessible sources where necessary for fraud prevention, security or compliance.

4. PURPOSES AND LEGAL BASES

We process personal data only when we have a valid purpose and legal basis.

4.1 Processing and delivering orders

We use personal data to:

Process your order;
Receive and verify payment;
Prepare invoices;
Pack and dispatch products;
Provide Track & Trace information;
Communicate about delivery;
Handle returns and refunds.

Legal basis: performance of the purchase agreement and compliance with legal obligations.

4.2 Customer service

We process personal data to:

Answer questions;
Provide product and order information;
Resolve delivery issues;
Handle returns, complaints and warranty requests;
Maintain relevant correspondence.

Legal basis: performance of the agreement, taking steps at your request and our legitimate interest in providing effective customer service.

4.3 Customer accounts

We process account information to provide and maintain your customer account, display order history and save your preferences.

Legal basis: performance of the requested account service and our legitimate interest in providing convenient account functionality.

4.4 Legal and administrative obligations

We process information where necessary to:

Maintain financial and tax records;
Prepare and retain invoices;
Respond to lawful requests from public authorities;
Comply with product-safety, accounting and consumer-protection obligations;
Establish, exercise or defend legal claims.

Legal basis: compliance with legal obligations and, where applicable, our legitimate interests.

4.5 Security and fraud prevention

We may process technical, account and transaction information to:

Protect our website and systems;
Detect or prevent fraud and payment abuse;
Investigate suspicious activity;
Prevent misuse of discounts, accounts or services;
Secure customer and company information.

Legal basis: our legitimate interest in protecting customers, our business and our services, and compliance with legal obligations where applicable.

4.6 Website functionality

Necessary cookies and similar technologies may be used to:

Operate the shopping cart;
Remember checkout information;
Maintain secure sessions;
Process orders;
Store privacy preferences;
Prevent fraud;
Ensure that the website functions properly.

Legal basis: performance of the requested service and our legitimate interest in operating a secure and functional website.

4.7 Analytics and website improvement

Where legally required, and only after consent, we may use analytics technologies to understand how visitors use our website and to improve its performance, content and usability.

Legal basis: consent where required. Where limited privacy-friendly measurement is legally permitted without consent, our legitimate interest may apply.

4.8 Marketing and personalised advertising

With your consent where required, we may use personal data to:

Send newsletters and promotional emails;
Measure marketing performance;
Create advertising audiences;
Display relevant advertising on third-party platforms;
Measure whether advertisements result in visits or purchases.

Legal basis: consent where required and, for certain existing-customer communications where legally permitted, our legitimate interest in marketing similar products.

You may withdraw consent or unsubscribe from marketing at any time.

5. COOKIES AND SIMILAR TECHNOLOGIES

FitGirl Nutrition uses cookies and similar technologies.

These may include:

Necessary cookies: required for security, shopping-cart functionality, checkout and privacy preferences;
Preference cookies: remember selected settings;
Analytics cookies: help us understand website use and performance;
Marketing cookies: help measure advertising and display relevant advertisements.

Where legally required, analytics and marketing cookies will not be placed until you have given consent.

You can accept, reject or adjust non-essential cookie categories through the cookie settings available on the website. Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

More detailed information about the technologies currently used may be provided through our cookie banner or Cookie Policy.

6. EMAIL MARKETING

We send marketing emails only where we have an appropriate legal basis.

Every marketing email contains an unsubscribe option. You may also unsubscribe by contacting info@fitgirl-nutrition.com.

After unsubscribing, we may retain limited information on a suppression list to ensure that we respect your request and do not send further marketing messages to that address.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications about an order, payment, delivery, return or account.

7. PARTIES WITH WHOM WE SHARE PERSONAL DATA

We share personal data only when necessary and subject to appropriate safeguards.

Recipients may include:

7.1 E-commerce and hosting providers

Our online store is powered by Shopify. Shopify processes personal data to provide the store, checkout, account, security and related e-commerce services.

Shopify may also process certain information as an independent controller for its own permitted purposes. More information is available in the Shopify Consumer Privacy Policy.

7.2 Payment providers

Payment and transaction data may be shared with the payment provider selected during checkout and with relevant banks or card networks.

7.3 Delivery and fulfilment partners

We share the information necessary to deliver an order with carriers and logistics partners, such as the recipient’s name, delivery address, email address, telephone number and parcel information.

7.4 IT, security and technical providers

We may use service providers for hosting, website functionality, cybersecurity, email delivery, data storage, technical support and system maintenance.

7.5 Analytics and advertising partners

Where you have given the required consent, website and interaction data may be processed through analytics and advertising services, including services provided by Google or Meta.

The providers concerned may process certain data for their own purposes in accordance with their privacy policies.

7.6 Review, customer-service and marketing providers

We may use service providers for product reviews, newsletters, customer communication, search optimisation and marketing support.

Only the information necessary to provide the relevant service is shared.

7.7 Professional advisers and public authorities

Personal data may be shared with accountants, legal advisers, insurers, auditors, regulators, courts, law-enforcement agencies or tax authorities where necessary or legally required.

7.8 Business transactions

If our business or part of it is sold, transferred, reorganised or merged, relevant personal data may be disclosed to professional advisers and prospective or actual acquiring parties, subject to confidentiality and applicable data-protection law.

We do not disclose personal data to third parties for unrelated purposes without a valid legal basis.

8. INTERNATIONAL DATA TRANSFERS

Some service providers and their affiliated companies may process personal data outside the European Economic Area.

Where personal data is transferred to a country without an applicable adequacy decision, we use or rely on appropriate safeguards where required, such as:

European Commission Standard Contractual Clauses;
Approved Binding Corporate Rules;
Adequacy decisions;
Other legally recognised transfer mechanisms.

Although certain Shopify merchant and customer data may be stored in Europe, Shopify may still use international processing. Shopify states that its international transfers are protected through recognised mechanisms, including approved Binding Corporate Rules where applicable.

You may contact us for more information about the safeguards relevant to your personal data.

9. DATA RETENTION

We do not retain personal data longer than necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

We generally apply the following principles:

Order, invoice, payment and accounting information is generally retained for at least seven years where required by Dutch tax and administration laws;
Certain cross-border VAT records may have to be retained for ten years;
Customer-account information is retained while the account remains active and for a reasonable period afterwards, unless deletion is requested or longer retention is necessary;
Customer-service correspondence is retained for as long as necessary to resolve the matter and for a reasonable period afterwards;
Complaint, return and warranty information may be retained for the relevant legal limitation period;
Marketing information is retained until consent is withdrawn, the person unsubscribes or the information is no longer needed;
Cookie and analytics information is retained according to the settings and retention periods of the relevant technology;
Fraud-prevention and security records may be retained for as long as reasonably necessary to investigate and prevent misuse;
Suppression-list information may be retained to ensure that unsubscribe requests continue to be respected.

When information is no longer required, it will be deleted, anonymised or securely restricted.

10. DATA SECURITY

We take appropriate technical and organisational measures to protect personal data against:

Unauthorised access;
Unlawful processing;
Accidental loss;
Alteration;
Disclosure;
Destruction or damage.

These measures may include access controls, secure connections, account authentication, backups, monitoring and contractual security requirements for service providers.

No online system can be guaranteed to be completely secure. Customers are responsible for keeping their account credentials confidential and for notifying us if they suspect unauthorised account use.

11. YOUR PRIVACY RIGHTS

Subject to the conditions and exceptions under applicable law, you may have the right to:

Request access to your personal data;
Request correction of inaccurate or incomplete data;
Request deletion of your personal data;
Request restriction of processing;
Object to processing based on legitimate interests;
Object at any time to direct marketing;
Withdraw consent at any time;
Request transfer of data you provided in a structured, commonly used and machine-readable format;
Submit a complaint to a data-protection authority.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Some information cannot be deleted immediately where retention is required by law or necessary for the establishment, exercise or defence of legal claims.

12. EXERCISING YOUR RIGHTS

To exercise a privacy right, contact:

info@fitgirl-nutrition.com

Please clearly describe your request and specify which information or processing it concerns.

To protect your information, we may ask for additional information to verify your identity. We will use any identification information supplied for this purpose only to verify and process the request.

We will respond within the period required by applicable data-protection law. In certain complex cases, this period may be extended where legally permitted. We will inform you if an extension is necessary.

13. COMPLAINTS

If you have a concern about how we handle your personal data, please contact us first at info@fitgirl-nutrition.com so that we can investigate and try to resolve the matter.

You also have the right to submit a complaint to the Dutch supervisory authority:

Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl

If you live in another EEA country, you may also contact the supervisory authority in your country of residence.

14. AUTOMATED DECISION-MAKING

We may use automated tools to help identify suspicious transactions, security threats or possible fraud.

FitGirl Nutrition does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects for customers without appropriate safeguards or human involvement where required by law.

15. CHILDREN

Our website and products are not directed at young children.

We do not knowingly collect personal data from children where parental consent is legally required. If you believe that a child has provided personal data to us unlawfully, please contact us so that we can investigate and, where appropriate, delete the information.

16. THIRD-PARTY WEBSITES

Our website may contain links to websites, services or social-media platforms operated by third parties.

We are not responsible for the privacy practices of those third parties. We recommend reviewing their privacy policies before providing personal data or using their services.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our data-processing activities, service providers, website functionality or legal obligations change.

The latest version will always be published on fitgirl-nutrition.nl. The “Last updated” date at the top indicates when the policy was most recently revised.

Material changes will be communicated through the website or by another appropriate method where required.

18. CONTACT INFORMATION

For questions about this Privacy Policy or the processing of your personal data, contact:

FitGirl Nutrition
A brand of Hoeft Niet B.V., trading as Nutriworld