Privacy Policy

Last updated: 1 August 2026

Who We Are

Euro Health 365® is a brand operated by NexaGens B.V. NexaGens B.V. is the data controller for personal data processed through euhealth365.com, except where another party acts as an independent controller for its own service.

Contact details:
NexaGens B.V.
De Limes 7, BioPartner 5, Leiden BioScience Park
2342 DH Oegstgeest
The Netherlands
Email: info@euhealth365.com
KVK: 99957442
VAT: NL869203654B01

Data We May Collect

Depending on how you use the website, we may collect:

• identification and contact data, such as name, billing and delivery address, email and phone number
• order and transaction data, including products, quantities, prices, refunds and delivery status
• payment-related data processed through our payment providers; we do not normally receive or store complete card details
• account, subscription and preference data
• communications sent to customer support
• device, browser, IP-address, cookie and website-usage data
• marketing consent and email-interaction data
• fraud-prevention, security and technical-log data

Why We Use Personal Data and Our Legal Bases

We process data to:

• receive, confirm, fulfil and deliver orders, manage payments and handle returns—necessary to perform the contract
• answer questions and provide customer service—necessary for the contract or our legitimate interest in supporting customers
• maintain records, issue invoices and meet tax, food-safety, consumer-protection and other legal obligations
• prevent fraud, secure the website and defend legal claims—our legitimate interests and, where applicable, legal obligations
• improve website functionality and understand aggregated use—our legitimate interests for essential analytics or consent where non-essential cookies or tracking require it
• send newsletters or promotional messages—consent, unless another lawful basis is clearly available
• manage product recalls or safety communications—legal obligations and protection of customers

Shopify and Service Providers

The store is hosted on Shopify. We may share data with service providers that support ecommerce hosting, payments, fraud prevention, order fulfilment, delivery, email, customer support, analytics, accounting, IT security and professional advice. Providers receive only the data reasonably needed for their service and must process it under applicable agreements and law.

Some providers, including Shopify and payment or technology providers, may act as independent controllers for certain services. Their privacy notices may also apply.

International Transfers

Some service providers may process data outside the European Economic Area. Where required, transfers are protected using recognised legal safeguards, such as adequacy decisions or standard contractual clauses, together with supplementary measures where appropriate.

Cookies

Essential cookies are used for functions such as security, checkout, cart contents and account access. Non-essential analytics, preference or advertising cookies are only loaded after you make your choice in the cookie banner, in line with applicable law. You can change your choice at any time through the cookie settings link. You can change available cookie choices through the cookie settings link.

The exact cookie list depends on the final Shopify theme, installed apps, analytics tools and advertising services. The live cookie banner and cookie policy must be updated whenever these tools change.

Retention

We keep personal data only as long as necessary for the purposes described above. Order, invoice and accounting records are generally retained for the period required by Dutch tax and administration law, normally seven years and, for relevant OSS/IOSS ecommerce records, potentially ten years. Support and account data are retained according to operational need, legal limitation periods and security requirements. Marketing data are retained until consent is withdrawn or the data are no longer needed.

Your Rights

Subject to the GDPR and applicable exceptions, you may request access to, correction of, deletion of or restriction of your personal data; object to processing based on legitimate interests or direct marketing; request data portability; and withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

To exercise a right, email info@euhealth365.com. We may ask for reasonable information to verify identity. You also have the right to complain to the Dutch Data Protection Authority or another competent supervisory authority.

Children

The website and launch range are not directed to children. We do not knowingly use children's data for direct marketing. A parent or guardian who believes a child has provided personal data should contact us.

Security

We use organisational and technical measures intended to protect personal data. No internet system is completely secure, so customers should also protect account credentials and contact us if they suspect misuse.

Changes

We may update this policy when the website, services, suppliers or law change. The current version and update date will be posted here.

Contact

Questions or privacy requests:
info@euhealth365.com