Privacy policy

Bona Beauty (Maud, KVK 42145125) is the data controller for personal data processed through this website. Questions? Email [email protected].

At checkout I ask for your name, email address and shipping address (street and number, postal code, city and country). I use this to process your order, ship it, and keep you posted on its status.

Payments are handled by Mollie. Your payment details (card or iDEAL information, for example) go straight to Mollie and never reach Bona Beauty; Mollie's own privacy policy applies to that data.

Order data is kept for as long as the law requires, including the Dutch tax record-keeping obligation (typically 7 years).

If you sign up to be emailed when a new drop goes live, I store your email address and language preference until you unsubscribe. Every email includes an unsubscribe link.

The moment you visit the site, your browser gets a random, anonymous session id stored locally in your browser (not a cookie). This lets me temporarily hold (for 10 minutes) items you add to your cart, so someone else can't buy them out from under you at the same time.

That session id, together with your visit stage (browsing, items in cart, or at checkout), the items and quantities in your cart, the page you're currently viewing, and an approximate location (city and country, derived from your IP address) is used to show a live overview in my own password-protected admin area, so I can see how many people are shopping at any given moment.

This data lives only in the server's memory, is never permanently stored or exported, disappears automatically once you've been inactive for a minute, and isn't linked to an order or identity unless you actually complete a purchase.

Bona Beauty doesn't use Google Analytics, ad cookies, or other third-party trackers. The only things stored in your browser are your cart and the session id above, purely functional so the site works.

Mollie may set its own cookies during the payment step; Mollie's own privacy policy applies to those.

The reviews on this website are imported from my former Vinted shop and show the username as it was publicly visible there. If you left one of these reviews and would rather not be named, email me and I'll edit or remove it.

I only share data with parties needed to fulfil your order: Mollie for payment, and the carrier for delivery. I never sell your data to third parties.

You have the right to access, correct, or delete your data, and to object to how it's used. Email [email protected] to do so. If you disagree with how I handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).