Privacy Policy

We only collect the personal data we need to deliver your order, and we handle it with care. On this page we explain what we collect, why, who we share it with and how long we keep it. We don't sell your data, we don't show advertisements and we don't track you across websites.

Last updated: 2 November 2026

Who we are

BioGlow Bioluminescence, located in Utrecht, the Netherlands (Chamber of Commerce/KvK number 71114335), is responsible for the processing of your personal data as described on this page. For any question about your data, email us at info@bioglow.eu.

What we collect and why

When you place an order

Your name, email address, shipping and billing address and phone number; if you provide them, your company name, VAT number and order reference; and what you ordered, with your chosen shipping and payment method. We use this to process and ship your order, to send you the order confirmation, the invoice and updates about your shipment, and to contact you if there's a problem with your order. Without this data we can't deliver your order. Legal basis: performance of the contract (our sales agreement with you), and for the invoice our legal obligation to keep accounting records.

When you create an account

An account is optional; you can also order as a guest. For an account we store your email address and your password (encrypted, so that nobody, including us, can read it), and your orders are linked to your account so you can view them later. Legal basis: performance of the contract.

When you email us

Your email address and whatever you write to us, so that we can answer your question. Legal basis: our legitimate interest in answering you, or performance of the contract if it's about an order.

When you visit the website

Like any web server, ours records technical data for every visit: your IP address, the page you requested, the time, and your browser type. We use this only to keep the website secure and running, for example to detect abuse and to fix errors. Legal basis: our legitimate interest in a secure, working website.

Visitor statistics

We count visits with Simple Analytics, which does not use cookies and does not collect personal data: it does not store your IP address and cannot recognise you on a later visit or on other websites. We only see totals, such as how many people visited a page.

Who we share your data with

We only share what is needed for each task:

• Mollie handles online payments. You enter your payment details on Mollie's own page; we never see your card or bank details. Mollie processes your payment data as an independent party under its own privacy policy.
• Sendcloud creates the shipping label and tracks the shipment. It receives your name, shipping address, email address and phone number.
• Carriers such as PostNL and UPS deliver your order. They receive the details on the shipping label, and may use your email address or phone number to notify you about the delivery.
• Our hosting provider, which runs the server this website and its database are on, and our email provider, through which we send order emails and receive your messages.
• The tax authorities (Belastingdienst), if they ask to see our accounting records, which include invoices.

Sendcloud, our hosting provider and our email provider only process your data on our instructions and under an agreement with us.

Outside the EU: if you have your order shipped to a country outside the European Union, the carrier and the customs authorities in that country receive the shipping details. This is necessary to deliver your order there.

How long we keep your data

• Orders and invoices: 7 years, because Dutch tax law requires us to keep our accounting records that long.
• Your account: until you ask us to delete it. Orders you placed remain in our records for the 7 years mentioned above.
• Emails: as long as needed to handle your question, and longer if they are part of an order.
• Server logs with IP addresses: a few weeks at most.

Cookies

We only use functional cookies: cookies the shop needs to work, for example to remember your shopping cart, the language you chose and that you're signed in. They don't track you and are not shared with anyone, so we don't need to ask for your permission and you won't see a cookie banner.

Mollie may set its own cookies on its payment page; see Mollie's privacy policy for those.

Security

The website only works over an encrypted connection (HTTPS). Passwords are stored encrypted, invoices are never publicly accessible, and only we have access to your data.

Your rights

You have the right to:

• see the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted;
• object to processing based on our legitimate interest, or have it restricted;
• receive your data in a common digital format, to pass on to someone else.

Email us at info@bioglow.eu to use any of these rights. We'll respond within one month. We may ask you to confirm your identity first, so that we don't give your data to someone else. Note that we can't delete data we're required by law to keep, such as invoices, until the 7 years have passed.

If you're not satisfied with how we handle your data, please let us know. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.