Privacy Policy

Dispopet.nl is the website of DispoPet B.V. (hereinafter referred to as DispoPet). Our business address (which is also our postal address) is Adriespoort 16-B04, 6211WD Maastricht, the Netherlands. Our registration number with the Chamber of Commerce is 98497006. Our VAT number is: NL868520081B01.

When you visit our website www.dispopet.nl, we store your personal data. We may also collect data about you from third parties, for example from companies we work with, such as Bol.com.

We handle personal data with the utmost care. This Privacy Policy explains what personal data we store about you, how we handle it, and what your rights are regarding the personal data we collect. We recommend that you read this carefully. If you have any further questions regarding this Privacy Policy, please contact us. Our contact details are at the bottom of this Privacy Policy.

Personal data

Personal data is processed via our online shop www.dispopet.nl. Personal data is information that can be used to identify a natural person. We store personal data to ensure your order is processed correctly.

Dispopet considers the careful handling of personal data to be of the utmost importance. We therefore process and secure personal data with the utmost care. In our processing of data, we comply with the requirements set out in privacy legislation. Personal data is not passed on to other organisations for commercial purposes.

Creation of log files

If you use our website solely for informational purposes, i.e. if you do not register or provide us with information in any other way, our system will only collect data from you if you visit our website via an affiliate link from our own partner programme. The following data is then collected in a database log table:

• The user’s IP address and internet service provider

These database tables contain IP addresses or other data that may be traceable to a user. This is possible if, for example, order data can be linked to the log data via an IP address.

Purpose and legal basis for data processing

Data is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

This processing is necessary for the purposes of the legitimate interests pursued by Dispopet as referred to in Article 6(1)(f) of the AVG.

Duration of storage

Data is stored in our database log table for seven years. After seven years, we delete this data.

Right to object and right to erasure

The collection of data for the purpose of making the website available and the storage of data in log files is necessary for the functioning of the website and therefore constitutes a legitimate purpose as referred to in Article 6(1)(f) of the GDPR. You therefore do not have the right to object.

Use of our online shop

If you wish to place an order in our online shop, it is necessary for the conclusion of a contract that you provide us with your personal data, which we require to process your order. This also applies to the provision of data required for the processing of your order by payment service providers such as our bank and, if you are purchasing on account, to credit reference agencies for the purposes of credit applications.

Mandatory data required for the processing of contracts is marked separately; other data is provided on a voluntary basis. The legal basis for this is Article 6(1)(a) of the GDPR.

You can voluntarily create a customer account, which allows us to store your details for future purchases. When you create an account under ‘My Account’, the details you provide will be stored on a revocable basis. Your orders will be automatically saved to your customer account. If you wish to delete your customer account, please send us an email to: klantenservice@dispopet.nl. Dispopet will then permanently and completely delete your customer account, unless this is prevented by Dispopet’s legitimate interests or statutory retention obligations.

We may also process the information you provide to inform you about other interesting products in our range or to send you technical information by email. We are legally obliged to store your address, payment and order details for a period of ten years. However, after two years, we will restrict the processing, i.e. your data will only be used to comply with our legal obligations. To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

Purposes and the legal basis for data processing

Dispopet processes personal data on the legal bases set out in the GDPR, namely (1) because this is necessary for the performance of a contract with you / processing your order, or (2) because this is necessary to pursue our legitimate interests or those of a third party, or (3) on the basis of your consent, or (4) because this is necessary to comply with a legal obligation, such as meeting legal, tax or accounting requirements.

The personal data processed by Dispopet in connection with Dispopet’s communications is processed exclusively for the following purposes:

• To be able to contact you;
• To inform you about new products and/or offers from Dispopet (whether or not tailored to the areas of interest you have indicated);
• To analyse and improve Dispopet’s services.
• To carry out market research on behalf of Dispopet.
• To fulfil a contract.

Any other processing of your personal data will only take place to the extent that you have given Dispopet your unambiguous consent. Such consent may be inferred from the mere fact that you submit a query to Dispopet by email or otherwise, in which case Dispopet will process your personal data for the purpose of answering that query.

Order processing

When you place an order with us, we use your personal data to process it properly. We may then pass on your personal data to our delivery service so that the order can be delivered to you. We also receive payment details from your bank or credit card company. For this purpose, we use your email address, telephone number, billing address, name and address details, and gender. We require this information in accordance with the contract we enter into with you.

Disclosure to third parties

We sometimes share your personal data with third parties, such as service providers we engage with, for example:

• Delivery services (e.g. DPD).
• Payment processors (e.g. Shopify Payments)
• Review platforms (e.g. Judge.me).
• IT companies (e.g. hosting providers).

In addition, there are companies that obtain personal data through the use of cookies, such as Google Analytics, Sovendus, Facebook, Instagram, Pinterest, VWO-Wingify and Hotjar. In rare cases, we share your personal data with third parties based outside the EEA. In such cases, we have put in place appropriate safeguards to ensure that the personal data can be transferred lawfully and securely.

We ensure that appropriate measures are taken when we pass on your personal data to third parties. For example, we will enter into a data processing agreement where necessary (which sets out restrictions on the use of your personal data and obligations regarding the security of your personal data).

Data retention period

Your personal data will not be stored for longer than is necessary for the purposes for which it was collected and processed. We will only retain personal data for longer periods if we are legally obliged to do so, or if this is necessary to defend our legal interests (for example, in the event of a dispute).

Below is an overview of the personal data we may collect, followed by the retention period for this data.

Retention of personal data

Data required to create a Dispopet account:

• First name
• Surname
• Email address
• Password
• Date of birth
• Gender
• IP address

Seven years, unless you request the deletion of your data within this seven-year period. After seven years, this data will be deleted by Dispopet.

Website log data

• IP address

Seven years. After seven years, this data will be deleted by Dispopet.

Product reviews

• First name
• Surname
• Email address
• IP address

After seven years, this data will be deleted by Dispopet.

Order and billing details

• First name
• Surname
• Email address
• Date of birth
• Gender
• Telephone number
• Street name
• House number
• Postcode
• Town/city
• Country
• Company name
• IP address

After seven years, this data will be deleted by Dispopet.

Newsletter subscription

• Email address
• Language

If completed and/or an order placed

• Gender
• Title
• First name
• Middle name
• Surname
• Customer number
• Date of last order
• Amount of last order
• Items in last order

Your data will be retained for as long as you are subscribed to our newsletter. If you unsubscribe from our newsletter, this data will also be retained, unless you request that your data be deleted. In that case, your data will be deleted.

Customer service contact (email, chat and contact form)

• First name
• Surname (if provided)
• Email address
• Email correspondence (for email contact)
• Contact form correspondence (when contacting us via the contact form)
• Chat conversation (when using chat)
• IP address (when using chat)

Email address

We only retain your email address if you have given your explicit consent. You can give your consent, for example, when creating a Dispopet account, placing an order, subscribing to our newsletter or contacting us via our contact form.

Contact form

You can use the contact form to ask us questions or make enquiries. For this purpose, we use your name, address and telephone number, as well as your email address. We need this information because of the contract we enter into with you. We retain this information until we are certain that you are satisfied with our response.

Newsletter

We offer a newsletter to keep interested parties informed about our products and/or services. Every newsletter contains a link allowing you to unsubscribe. You can also contact our customer service team by email (free of charge) or by telephone to have your email address removed from our newsletter subscriber list. Your email address will only be added to the subscriber list with your consent. We retain at least the email addresses of newsletter subscribers. In addition to your email address, we may supplement the profiles of newsletter subscribers with additional personal data. We receive this data from you when you create an account with us or place an order (provided this is done using the same email address with which you subscribed to the newsletter).

If you create an account with us using the email address you used to subscribe to the newsletter, we will store the following details (if provided):

• Gender
• First name
• Surname
• Date of birth

Finally, we may supplement your details if you place an order with us using the email address you used to subscribe to the newsletter. This includes the following details:

• Gender
• Company name (if specified by the customer)
• Telephone number (if provided by the customer)
• First name
• Surname
• Street name
• House number + any suffix
• Postcode
• Town/city
• Country
• Date of birth
• Telephone number
• Email address
• Product(s) ordered
• Order date
• Order total

The personal data listed above is linked to newsletter subscribers until you cancel your subscription.

Profiling

The newsletter we send out may be addressed to all newsletter subscribers and is the same for everyone. In addition, we may send a newsletter to a ‘subset’ of all newsletter subscribers. In that case, we use profiling: we create so-called segments of groups of people who share the same characteristics. A segment is created based on order history:

• Products ordered (brand, product category, product category, product)
• Pet (the animal for which the product was intended)
• Order date

In practice, this means, for example, that based on a customer’s order date, we can estimate when their purchased pet food will run out. Just before we think the pet food is about to run out, we send the customer an email asking if they would like to reorder the same pet food.

Product review email

When you place an order with us, your email address is stored. A few days after placing your order, you will receive an email from us at this address inviting you to write a review of the product(s) you have purchased. If you no longer wish to receive these product review emails for future orders, you can easily unsubscribe by clicking the unsubscribe button in the email. You can also object to receiving these product review emails by contacting our customer service team. You can do this by sending an email to klantenservice@dispopet.nl.

Advertising

We would like to send you advertising about special offers and new products or services. We do this:

• By email
• Via social media

You can opt out of receiving this advertising at any time. Every email contains an unsubscribe link. You can block us or use the unsubscribe option.

Advertisements

Our online shop displays general advertisements. We do not keep track of any personal data in this regard, so we do not know whether you like them.

Disclosure to other companies or organisations

With the exception of the companies mentioned above, we never disclose your personal data to other companies or organisations, unless we are legally obliged to do so (for example, if the police require it in connection with a suspected offence).

Statistics

We keep statistics on the use of our online shop. Our online shop includes social media buttons. The operators of these services use these to collect your personal data.

Cookies

On this site, we use cookies to improve the content of our website. Cookies are small files in which we can store information so that you do not have to enter it repeatedly. We also use cookies to see whether you visit our website again. When you visit our online shop for the first time, we display a notification explaining how cookies work. We will ask for your consent to the use of these cookies. You can disable cookies via your browser, but some features of our online shop may then no longer work properly.

We have agreements in place with other companies that set cookies regarding the use of these cookies. However, we do not have complete control over what these companies do with the cookies. You should therefore also read their privacy policies (please note: these may change regularly).

When we transfer or receive your data via our website, we always use encryption technologies recognised as industry standards within the IT sector. We have implemented the necessary security measures to prevent the loss, unauthorised use or alteration of information we receive on our site. You can read more about our cookies in our cookie statement.

Personal data from third parties

We also receive personal data from the following third parties: Bol.com, Amazon.de, Amazon.co.uk, Amazon.fr. We receive personal data from these parties when a user orders a Dispopet product on one of these websites. Personal data is sent to us via an API link. The personal data we receive from these third parties consists of:

• Gender (if specified by the customer)
• Title
• Company name (if specified by the customer)
• Telephone number (if provided by the customer)
• First name
• Surname
• Street name
• House number + any additions
• Postcode
• Town/city
• Country
• Email address (this email address has been anonymised by Amazon and is not visible to us)
• Product(s) ordered
• Order date
• Order total

We require this personal data to process orders from these parties correctly.

Security

The security of personal data is of the utmost importance to us. We ensure that your data is properly secured with us. We continually update our security measures and remain vigilant about potential risks. However, transmissions over the internet can never be completely secure or free from errors. Nevertheless, we take appropriate technical and organisational measures, commensurate with the risks of misuse, unauthorised access, unauthorised disclosure, alteration or destruction of personal data, and to protect your personal data. We also ensure that third parties and affiliated companies that process personal data on behalf of Dispopet maintain adequate security measures and operate in accordance with the applicable laws and regulations.

Data breaches

In the unlikely event that Dispopet accidentally or deliberately loses your personal data, or that your personal data falls into the hands of unauthorised third parties, this constitutes a data breach. Dispopet’s Data Protection Officer will report this data breach digitally to the Dutch Data Protection Authority within 72 hours of Dispopet discovering the breach. The report will include: the nature of the breach; which bodies or individuals can be contacted to obtain further information about the breach; what measures are recommended to minimise the negative consequences of the breach; what potential consequences the breach may have; and what measures Dispopet has taken or proposes to take to remedy these consequences. If the breach poses a high risk to the individual(s) concerned, they will be notified by Dispopet. Dispopet also documents data breaches internally in the ‘data breach register’ in order to learn from them and take measures to prevent such breaches in the future.

We have put in place the necessary administrative, technical and organisational measures to ensure a level of security appropriate to the specific risks we have identified. We protect your personal data against destruction, loss, alteration, unauthorised disclosure of or access to personal data that is transmitted, stored or otherwise processed.

Data Protection Officer

We have appointed a Data Protection Officer within Dispopet. This person is responsible for data protection within our organisation. Our Data Protection Officer is P. Nicolaï and can be contacted by email at klantenservice@dispopet.nl.

Changes to this privacy policy

We reserve the right to make changes to this privacy policy. We recommend that you consult this privacy policy regularly so that you are aware of any changes. We will do our best to announce changes separately as well.

Accessing, amending and deleting your data

If you have any questions or would like to know what personal data we hold about you, you can always contact us. Please see the contact details at the bottom of this privacy policy. You have the following rights:

• To be informed about what personal data we hold and what we do with it.
• To access the specific personal data we hold.
• To have any errors corrected.
• To have (out-of-date) personal data deleted.
• To withdraw consent.
• To object to a specific use of your data.

Please ensure you always clearly state who you are, so that we can be certain we are not amending or deleting data belonging to the wrong person.

Submitting a complaint

If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the supervisory authority. This is the Dutch Data Protection Authority.

Contact

If you wish to comment on our privacy policy, please contact us:

By email: klantenservice@dispopet.nl

Version number: 1.1 – Last amended on 11 November 2025