Privacy policy

Privacy Policy

PRIVACY POLICY
Bella Haire
Last updated: 26/08/2026

1. Company Information

Bella Haire operates under Dutch law.

Legal entity: Bella Haire
Registered address: Amersfoortsestraatweg 1, 1411 HB Naarden, Netherlands
KVK number: 85186538
VAT number: NL004062470B53
Email: info@bellahaire.com
Phone / WhatsApp: +31 6 57725571

Bella Haire is the data controller responsible for processing your personal data.

2. What Personal Data We Collect

Information you provide to us

• Full name
• Billing address
• Shipping address
• Email address
• Phone number
• Order details
• Communication history
• Information submitted for Medical Support applications

Information collected automatically

• IP address
• Browser type and device information
• Website behaviour and analytics data
• Cookie data
• Advertising identifiers, where you have consented to marketing cookies

Payment Information

Payments are processed via secure third-party providers (e.g. Shopify Payments, Klarna, Stripe). Bella Haire does not store full credit card details.

Special Category Data

Information you submit as part of a Medical Support application may include data concerning your health. This is special category data under Article 9 of the GDPR. We process it only with your explicit consent, only for the purpose of assessing your application, and we apply additional safeguards to it. We never use this data for marketing or advertising purposes, and we never share it with advertising platforms. You may withdraw your explicit consent at any time by contacting info@bellahaire.com.

3. Legal Basis for Processing (GDPR)

We process personal data on the following legal grounds:

• Contractual necessity – to process and deliver your order
• Legal obligation – for tax and accounting compliance
• Legitimate interest – to improve website performance and prevent fraud
• Consent – for marketing communications and newsletter subscriptions, and for the use of marketing cookies and advertising tools such as the Meta pixel
• Explicit consent (Article 9 GDPR) – for the processing of health-related information submitted as part of a Medical Support application

You may withdraw consent at any time.

4. How We Use Your Data

Your data may be used to:

• Process and fulfil orders
• Provide customer support
• Handle returns and exchanges
• Verify Medical Support eligibility
• Send order confirmations and updates
• Improve website functionality
• Prevent fraud and misuse
• Send marketing emails (only if you have opted in)
• Measure the effectiveness of our advertising and show you relevant advertisements (only with your consent)

We do not sell your personal data to third parties.

5. Data Sharing & International Transfers

We may share data with trusted third-party service providers including:

• Shopify (e-commerce platform)
• Payment providers (e.g. Klarna, Stripe)
• Shipping carriers
• Accounting software providers
• Analytics services (e.g. Google Analytics)
• Meta Platforms Ireland Limited (Facebook and Instagram) – advertising and conversion measurement

Advertising and Conversion Measurement

We use the Meta pixel and Meta's Conversions API on our website. Where you have given consent via our cookie banner, we share personal data with Meta Platforms Ireland Limited, including your email address, phone number, name, city, postal code and country, and an identifier for your device or session. This data is hashed before transmission and is used to measure the effectiveness of our advertising and to show you more relevant advertisements on Facebook and Instagram. For part of this processing Meta acts as an independent controller under its own privacy policy. You can withdraw your consent at any time via our cookie banner.

Health-related information submitted as part of a Medical Support application is never shared with advertising platforms.

Some providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards such as:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

6. Data Retention

We retain personal data only as long as necessary:

• Order & invoice data: 7 years (Dutch tax law)
• Customer service records: up to 2 years
• Medical Support application data: up to 2 years after the application is concluded, or sooner if you withdraw your explicit consent
• Marketing data: until consent is withdrawn
• Analytics data: according to platform retention settings
• Advertising audience data held by Meta: up to 180 days for website-based audiences and up to 365 days for engagement-based audiences

After this period, data is securely deleted or anonymised.

7. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens

To exercise your rights, contact: info@bellahaire.com
We will respond within 30 days.

8. Data Security

Bella Haire implements appropriate technical and organisational measures to protect personal data, including:

• SSL encryption
• Secure payment gateways
• Limited internal data access
• Secure hosting infrastructure

9. Cookies

Bella Haire uses cookies to enhance your browsing experience. We use:

• Functional cookies – required for website operation
• Analytical cookies – to analyse website traffic
• Marketing cookies – only with your consent

You can manage cookie preferences through your browser settings or via our cookie banner. For more details, see our Cookie Policy.


COOKIE POLICY
Bella Haire
Last updated: 26/08/2026

What Are Cookies?

Cookies are small text files stored on your device when visiting a website.

Types of Cookies We Use

  1. Functional Cookies

Required for:

• Shopping cart functionality
• Checkout process
• Security features

These cannot be disabled.

  1. Analytical Cookies

Used to:

• Analyse website traffic
• Improve user experience

Example: Google Analytics
Data may be processed outside the EU with appropriate safeguards in place.

  1. Marketing Cookies

Used to:

• Measure ad performance
• Show relevant advertisements

Example: Meta pixel (Facebook and Instagram)

These are only placed with your consent. Where you consent, data including your email address, phone number, name and location may be shared in hashed form with Meta Platforms Ireland Limited. Data may be processed outside the EU with appropriate safeguards in place.

Managing Cookies

You may:

• Accept or reject cookies via our cookie banner
• Disable cookies in your browser settings

You can change or withdraw your consent at any time via the cookie banner.