Skip to content

Privacy Policy

House of Chi B.V. (hereinafter: House of Chi, we, us) attaches great importance to the protection of your personal data. In this privacy statement, we explain what data we collect, why, how long we keep it, and what your rights are. We only process data necessary for our services and handle it with care. We never sell your data to third parties.

This statement applies to the website www.houseofchi.nl, including the webshop. Our private label activities are conducted via www.defrisdrankfabriek.nl; a separate privacy statement applies to that domain.

1. Who we are

House of Chi B.V. is the data controller for the processing of personal data as described in this statement.

Address: Asterweg 18B, 1031 HN Amsterdam

Chamber of Commerce: 75097087

VAT: NL860140842B01

Email: info@houseofchi.nl

Phone: +31 (0)20 21 01 607

We have not appointed a Data Protection Officer (DPO); this is not legally required for our organization. For privacy-related questions, please use the contact details provided above.

2. What data we process, why, and for how long

Below, we outline which personal data we process for each situation, the purpose, the legal basis, and how long we retain it.

2.1 Website visitors

Data: IP address (partially anonymized), device and browser information, and your use of the website, collected via cookies and similar technologies.

Purpose: Ensuring the website functions properly, measuring traffic, improving our site, and marketing upon consent.

Legal basis: Legitimate interest for necessary and privacy-friendly statistics; consent for analytical and marketing cookies that require it.

Retention period: Depends on the specific cookie. See the Cookies section and the settings in our cookie banner.

2.2 Contact form

Data: Name, email address, phone number, subject, and the content of your message.

Purpose: Answering your question and contacting you.

Legal basis: Legitimate interest, and where applicable, taking steps prior to an agreement.

Retention period: Up to 12 months after your inquiry has been handled, unless a customer or supplier relationship arises from it.

2.3 Shop customers

Data: Name, address, city, email address, phone number, order and payment details, and, if you create an account, your account details (including an encrypted password).

Purpose: Processing and delivering your order, payment, customer service, and administration.

Legal basis: Performance of the purchase agreement; a legal obligation applies to administration.

Retention period: We keep order and invoice data for 7 years due to fiscal retention requirements. We keep a customer account as long as it is active; after 2 years of inactivity, we delete or anonymize it.

2.4 Newsletter subscribers

Data: Name (if provided) and email address.

Purpose: Sending our newsletter with news, offers, and updates.

Legal basis: Consent. You can unsubscribe at any time using the link at the bottom of every newsletter.

Retention period: Until you unsubscribe. We will then remove your data from our mailing list.

2.5 Applicants

Data: Name, contact details, CV, cover letter, and any other information you choose to share with us.

Purpose: Assessing your application and managing the application process.

Legal basis: Consent and taking steps prior to a potential employment contract.

Retention period: Up to 4 weeks after the procedure is completed. With your consent, we will store your data for a maximum of 1 year so that we can contact you regarding a suitable position.

2.6 Business leads and private label inquiries

Data: Name, company name, contact details, and the content of your inquiry.

Purpose: Following up on your request and maintaining the business relationship.

Legal basis: Legitimate interest and taking steps prior to entering into an agreement.

Retention period: Duration of the process and up to 2 years after the last contact, unless a partnership is formed.

2.7 Investors and certificate holders

Data: Name and email address. We do not process identity or financial data in this context.

Purpose: Communication with (prospective) certificate holders.

Legal basis: Performance of the agreement and legitimate interest.

Retention period: For the duration of the relationship and the subsequent applicable statutory periods.

3. Cookies

Our website uses cookies and similar technologies. We distinguish between three types:

  • Necessary cookies, for the basic operation and security of the site. No consent is required for these.
  • Statistical cookies, to measure traffic and improve the site. For this, we use Plausible Analytics (privacy-friendly, without cookies and without traceable personal data) and Google Analytics.
  • Marketing cookies, to make advertisements more relevant and measure results. For this, we use tools including Google Ads and Meta.

We only place statistical and marketing cookies after you have given your consent via our cookie banner. We use Cookiebot to manage your consent. You can adjust or withdraw your choice at any time via the cookie settings on the site. A complete and up-to-date overview of the cookies used, including their purpose and retention period, can be found in our cookie policy and in the cookie banner.

4. Sharing with third parties

We only share your data when necessary for our services or if we are legally required to do so. We never sell your data and do not provide it to third parties for commercial purposes.

For certain services, we engage processors to handle data on our behalf. These include the following types of parties:

  • our email marketing platform: [email marketing tool name]
  • our CRM system: [CRM name]
  • our payment service provider: [payment provider name]
  • our delivery partner(s): [name of delivery partner]
  • our hosting and webshop provider: [name of hosting or webshop platform]

We enter into data processing agreements with these processors, in which we establish arrangements regarding the security and confidentiality of your data. Additionally, we may share data with parties such as the Tax Authorities or other authorities when legally required.

5. Transfers outside the EEA

Some of our service providers, including Google and Meta, process data (partly) outside the European Economic Area, for example in the United States. In such cases, we ensure appropriate safeguards, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses (SCCs) established by the European Commission, so that your data remains protected there as well.

6. Security

We take appropriate technical and organizational measures to protect your data against loss or unlawful use. This includes a secure connection (SSL/TLS), encrypted password storage, access to data only for authorized employees, and keeping our systems up to date. Should something go wrong, we will act in accordance with the legal obligation to report data breaches.

7. Your rights

Under the GDPR, you have the following rights:

  • access to the data we process about you
  • rectification (correction) of inaccurate data
  • erasure of your data
  • restricting processing
  • objecting to processing
  • data portability
  • withdrawing previously given consent

You can submit a request via info@houseofchi.nl. We will respond within the legal timeframe of 4 weeks. To ensure the request is made by you, we may ask you to identify yourself in a way that respects your privacy. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

8. Minors

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect data from minors without the consent of a parent or guardian. If you believe we have done so, please contact us and we will delete the information.

9. Automated decision-making and profiling

We do not make decisions based on automated processing that could affect you, and we do not engage in profiling.

10. Changes

We may update this privacy statement from time to time. The most recent version can always be found on this page. This version is dated August 12, 2026. When a new version is published, previous versions are no longer valid.

11. Contact

House of Chi B.V.

Asterweg 18B, 1031 HN Amsterdam

info@houseofchi.nl

+31 (0)20 21 01 607

‍