Privacy policy
This page explains which data we process about you, why, how long we keep it and what rights you have. We collect no more than we need to handle your order properly.
Version 1.0, updated on 24 September 2026.
Who is responsible
Peppro, trading as PepPure, Torenlaan 5, 1402 AT Bussum, the Netherlands, Chamber of Commerce 42154286, is responsible for processing your personal data. Questions about privacy can be sent to info@peppure.nl.
What data we process
- When you order: name, address, email address, phone number (if you provide it), what you order, your payment method and the payment status. We do not receive your card or bank details; our payment service provider processes those.
- Confirmation of age and intended use: that you confirmed you are 18 or older and will use the products solely for research, with date and time.
- When you contact us: your name, email address, order number and your message, via the contact form, email or WhatsApp.
- For the newsletter: your email address and the personal discount code linked to it.
- When you visit the site: technical data such as your IP address and browser, and the cookies described in our cookie policy.
Why, and on what legal basis
- To process, charge, ship and, where needed, handle returns of your order: performance of the contract.
- To keep our accounts and meet our tax retention obligation: legal obligation.
- To record that you gave the age and intended-use declaration, prevent fraud and secure the site: legitimate interest.
- To answer your questions: legitimate interest or, where it concerns your order, performance of the contract.
- To send you the newsletter and, if you choose, to measure our advertising with marketing cookies: consent. You can withdraw it at any time.
How long we keep data
- Order and invoice data: 7 years, because of the tax retention obligation.
- Messages via the contact form, email or WhatsApp: up to 2 years after the last contact.
- Newsletter data: until you unsubscribe.
- A customer account: until you ask us to delete it, except for the order data we are legally required to keep.
Who we share data with
We never sell your data. We only share it with parties we need to provide our service, with whom we have agreed on careful processing:
- PostNL, for delivery;
- our payment service provider (WooPayments, processed by Stripe), for payment;
- our hosting provider, where the website and data are stored;
- Meta, if you contact us via WhatsApp, and for the Meta Pixel if you accept marketing cookies;
- government authorities, where we are legally required to.
Some of these parties also process data outside the European Economic Area, for example in the United States. This only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
Security
The site runs entirely over an encrypted connection. Access to your data is limited to those who need it for their work. Payment details never reach our server.
Your rights
You may access, correct or delete your data, object to or ask us to restrict its processing, request your data in a common format and withdraw any consent you have given. Send your request to info@peppure.nl; we respond within one month. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, in Belgium, the Data Protection Authority (Gegevensbeschermingsautoriteit).
Changes
We may update this privacy policy. The date at the top shows when it was last updated.