Privacy Policy – Natarya
Last updated: December 2025
At Natarya, we are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains what information we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and Dutch data protection laws.
By using our website or making a purchase on our e-commerce store, you agree to the practices described below.
1. Who We Are
Natarya
Email: hello@natarya.com
Website: www.natarya.nl
Registered in: Netherlands
KVK : 96983930
We are the data controller responsible for processing your personal information.
2. What Personal Data We Collect
We collect the following categories of data when you browse our website, make a purchase, or contact us:
A. Information You Provide
Name
Email address
Billing address
Shipping address
Phone number
Payment information (handled securely through payment providers; we do not store your card details)
Account details (if you create an account)
B. Information Collected Automatically
IP address
Device information
Browser type
Website usage and navigation
Cookies (see section 6)
C. Information Collected During Purchase
Products ordered
Order history
Payment status
Delivery details
D. Communication Data
Messages you send through contact forms or email
Newsletter sign-up information
3. How We Use Your Data
We use your personal data only when necessary and for legitimate business purposes:
To process your orders
Fulfill orders
Deliver products
Provide invoices and payment confirmations
Handle returns and customer service
To manage your customer account
To communicate with you
Order updates
Customer support
Newsletter (only if you give consent)
To improve our website
Analyze website performance
Enhance user experience
Prevent fraud and ensure security
For legal and administrative purposes
Compliance with tax and accounting laws
Prevention of misuse or fraud
4. Legal Basis for Processing (GDPR)
We process data based on:
Contractual necessity – to process your order
Your consent – for newsletters, marketing, cookies
Legal obligations – tax, accounting, compliance
Legitimate interest – website security and improvement
5. Do We Share Your Data?
We do not sell your personal data.
We only share information with trusted third parties that help us operate our business:
A. Payment Providers
(Example: Stripe, Mollie, Adyen)
They process payments securely. Natarya does not store your payment card details.
B. Shipping Partners
(DHL, PostNL, etc.)
To deliver your order.
C. Website & IT Providers
Odoo hosting, analytics services, email services.
All third parties comply with GDPR and process only what is necessary.
6. Cookies & Tracking Technologies
Our website uses cookies to:
Enable essential website functions
Improve website performance
Provide personalized shopping experience
Analyze traffic (Analytics)
Support marketing (Meta Pixel, Google Ads tracking, if activated)
When you first visit our website, you will see a cookie consent banner where you can accept or manage your preferences.
You can disable cookies anytime via your browser.
7. How Long We Keep Your Data
We keep your data only as long as necessary:
Customer accounts: until you request deletion
Order information: 7 years (required by Dutch tax law)
Marketing emails: until you unsubscribe
Website analytics: typically 12–26 months
8. Your GDPR Rights
You have the right to:
Access your data
Correct inaccurate information
Delete your data (“right to be forgotten”)
Restrict processing
Object to certain processing
Withdraw consent (for marketing or cookies)
Request data portability
To exercise any of these rights, contact us at:
9. Data Security
We take security seriously.
We use:
Encrypted connections (HTTPS/SSL)
Secure servers
Limited internal access
Trusted payment gateways
Despite these measures, no system is 100% secure.
If a data breach occurs, we will notify affected users as required by law.
10. Children’s Privacy
Natarya does not knowingly collect data from children under 16 years old.
If you believe a child has submitted data, contact us and we will delete it.
11. International Transfers
If our service providers operate outside the EU (e.g., cloud services), personal data may be transferred under:
Standard Contractual Clauses (SCCs)
GDPR-compliant safeguards
12. Changes to This Privacy Policy
We may update this Privacy Policy as our services evolve or regulations change.
The latest version will always be posted on this page.
13. Contact Us
If you have questions, concerns, or requests, contact: