Privacy Policy

Last updated: 8 September 2026

At BlueApril, we respect your privacy and handle your personal data with care. This Privacy Policy explains what personal data we collect, why we process it, which service providers may receive it, how long it may be retained, and what rights you have under applicable data protection law, including the General Data Protection Regulation (GDPR).

1. Who Is Responsible for Your Personal Data?

BlueApril is responsible for the processing of personal data described in this Privacy Policy.

BlueApril
Cruquiuszoom 508
2142 EW Cruquius
The Netherlands

Chamber of Commerce (KvK): 93322305
VAT identification number: NL005013834B64
Email: info@blueapril.nl
WhatsApp: +31 6 53248184

For questions about privacy or the processing of your personal data, please contact us at info@blueapril.nl.

2. What Personal Data Do We Process?

Depending on how you use our website and services, we may process:

your name;
billing and delivery address;
email address;
telephone number, where provided;
order and purchase information;
payment and transaction information;
customer account information, if you choose to create an account;
shipping and delivery information;
invoice information;
returns, refunds and complaint information;
communications with our customer service, including through WhatsApp;
marketing preferences and newsletter subscriptions;
IP address, browser, device and technical information;
website usage and analytics information; and
cookie and advertising-related information where you have provided the required consent.

We only process personal data where we have a valid legal basis to do so.

3. Why Do We Process Your Personal Data?

Orders and Contract Fulfilment

We process your personal data to:

accept and process orders;
receive and administer payments;
prepare and ship your order;
provide order and delivery information;
issue invoices;
process returns and refunds; and
provide customer service relating to your purchase.

The legal basis for this processing is generally the performance of our contract with you.

Legal Obligations

We may retain and process information where necessary to comply with tax, accounting, consumer protection and other legal obligations.

The legal basis for this processing is our legal obligation.

Customer Service and Complaints

When you contact us with a question, complaint, return request, withdrawal or product issue, we process the information necessary to respond to and handle your request.

Depending on the circumstances, this processing may be necessary to perform our contract with you, comply with legal obligations or pursue our legitimate interest in providing appropriate customer service.

Security and Fraud Prevention

Where necessary, we may process information to detect and prevent fraud, misuse, unauthorised transactions and security threats.

Where applicable, this is based on our legitimate interest in protecting our customers, website and business.

4. Shopify

Our online store is operated using Shopify.

Shopify provides the technical infrastructure used to operate our webshop, checkout, customer accounts and related e-commerce functionality.

As a result, Shopify may process personal data relating to your use of our website and your purchases where necessary to provide these services.

If you choose to create a BlueApril customer account, information associated with your account is also processed through Shopify's infrastructure.

5. Payments

We offer payment methods including:

iDEAL;
Visa;
Mastercard;
American Express;
Apple Pay;
Shop Pay; and
PayPal.

Depending on the payment method you select, payment and transaction information is processed by Shopify Payments, PayPal and/or the relevant payment provider.

These providers may process information necessary to complete the transaction, verify payments, prevent fraud and comply with their own financial and legal obligations.

BlueApril does not receive or store your complete payment-card details when these are processed directly by the relevant payment provider.

6. Shipping and Delivery

BlueApril currently uses PostNL for the delivery of customer orders, with shipments managed through EctaroShip.

To prepare, manage and deliver your order, information necessary for shipment may be shared with EctaroShip and PostNL.

This may include:

your name;
delivery address;
email address;
telephone number where necessary;
order or shipment reference; and
other information reasonably necessary to deliver and track the shipment.

This processing is necessary to fulfil our contract with you.

7. Invoicing – WinkelFactuur

BlueApril uses WinkelFactuur to assist with invoice processing.

When an order reaches the relevant fulfilment stage, order and customer information may be processed through WinkelFactuur to create and send the corresponding invoice.

The information processed may include your name, billing details, email address, order information, prices, VAT information and other information required for invoicing.

This processing is necessary to administer your purchase and comply with applicable accounting and tax obligations.

8. Email and Newsletter – Shopify Email

BlueApril uses Shopify Email for email marketing and newsletters.

You may receive marketing emails from us when you have actively subscribed or otherwise provided the required permission.

Subscription to our newsletter is voluntary.

Where consent is the applicable legal basis, you can withdraw your consent at any time by using the unsubscribe link included in our marketing emails.

Withdrawing your consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

Transactional emails relating to your orders, payments, shipping or other necessary customer-service matters are separate from marketing communications and may still be sent where necessary to fulfil our agreement with you or comply with legal obligations.

9. Google Analytics

BlueApril uses Google Analytics 4 (GA4) to understand how visitors use our website and to help us improve the webshop.

Depending on your cookie preferences, Google Analytics may process information such as:

website interactions;
pages viewed;
approximate location derived from technical information;
device and browser information;
referral information; and
other technical or usage information.

Where consent is legally required, analytics technologies are activated only in accordance with the choices you make through our cookie consent system.

10. Google Ads

BlueApril uses Google Ads conversion tracking to measure the effectiveness of our advertising campaigns.

Where you have provided the required consent, advertising technologies may be used to determine whether interactions with an advertisement lead to actions on our website, such as visiting certain pages or completing a purchase.

We use this information to understand and improve the effectiveness of our advertising.

We do not currently use a Meta Pixel on our website.

11. Cookies and Consent Preferences

Our website uses cookies and similar technologies.

Some cookies are necessary for the operation of the webshop, for example to provide shopping-cart, checkout, security and account functionality.

Other technologies may be used for analytics, personalisation and advertising where permitted.

BlueApril uses a cookie consent system that allows visitors to choose how non-essential technologies may be used.

Visitors can:

Accept available optional cookies;
Decline optional cookies; or
use Manage preferences to review and adjust available cookie choices.

Where consent is required by law, non-essential analytics or advertising technologies are used in accordance with the consent choices made through this system.

You can change your available cookie preferences through the cookie settings on our website.

12. WhatsApp

BlueApril provides a WhatsApp contact button on the website for customers who choose to communicate with us through WhatsApp.

If you choose to contact us through WhatsApp, information such as your telephone number, profile information made available through WhatsApp and the contents of your messages may be processed by WhatsApp and its service providers according to their own terms and privacy practices.

BlueApril processes the contents of these communications where necessary to respond to your enquiry, provide customer service or handle matters relating to an order.

Use of WhatsApp to contact us is voluntary. You may alternatively contact us by email at info@blueapril.nl.

13. WebwinkelKeur and Review Invitations

BlueApril uses WebwinkelKeur for customer reviews and dispute mediation.

After an order, information necessary to send and verify a review invitation may be shared with WebwinkelKeur.

Depending on the service, this may include information such as:

your name;
email address;
order number; and
relevant order information.

This information is used to invite customers to provide a review and to help verify that reviews relate to genuine customer experiences.

If you submit a complaint or dispute through WebwinkelKeur, additional information may be processed where necessary to handle the complaint or mediation process.

WebwinkelKeur processes personal data in accordance with its applicable privacy terms.

14. Other Service Providers

We may use additional technical service providers and Shopify applications to operate and improve our webshop.

These may provide functions such as:

website translation;
store automation;
search and product discovery;
order-document generation;
product feeds;
promotional functionality;
customer messaging; and
order-management functionality.

Such providers may process personal data only where necessary for the services they provide and according to the applicable contractual and legal requirements.

The installation of an application does not necessarily mean that customer personal data is actively shared with that provider.

15. Sharing Personal Data

We do not sell your personal data.

We may share personal data with third parties where necessary to:

process an order or payment;
deliver products;
issue invoices;
provide technical webshop functionality;
provide customer service;
send communications you have requested;
perform analytics or advertising where you have provided the required consent;
collect customer reviews;
prevent fraud or protect our systems; or
comply with a legal obligation.

We aim to limit the information shared to what is reasonably necessary for the relevant purpose.

16. International Data Transfers

Some service providers we use may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, appropriate safeguards must be used where required by applicable data protection law.

Depending on the destination and provider, these safeguards may include an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another legally recognised transfer mechanism.

17. How Long Do We Keep Personal Data?

We do not retain personal data longer than necessary for the purpose for which it was collected, unless a longer retention period is required by law.

Retention periods therefore vary depending on the type of information and the reason for processing it.

For example:

order, invoice and transaction records may be retained for the period required by tax and accounting legislation;
information relating to returns, warranties, complaints or disputes may be retained for as long as reasonably necessary to handle and document the matter;
customer account information may be retained while the account remains active and as otherwise necessary for legal or administrative purposes;
marketing information may be retained until you unsubscribe or withdraw your consent, unless another lawful basis applies;
customer-service correspondence may be retained for as long as reasonably necessary to handle and document the enquiry; and
cookie and analytics information is retained according to the applicable service and cookie settings.

When personal data is no longer required, it will be deleted or anonymised where appropriate.

18. Your GDPR Rights

Under the GDPR, depending on the circumstances, you may have the right to:

Access
Request information about the personal data we process about you and receive a copy of that data.

Rectification
Ask us to correct inaccurate personal data or complete incomplete information.

Erasure
Ask us to delete your personal data where the legal requirements for deletion are met.

Restriction of Processing
Ask us to restrict the processing of your personal data in certain circumstances.

Data Portability
Receive certain personal data you have provided to us in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another organisation.

Object to Processing
Object to certain processing of your personal data, including processing based on legitimate interests where applicable.

Object to Direct Marketing
You have the right to object to the processing of your personal data for direct marketing purposes.

Withdraw Consent
Where processing is based on your consent, you can withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

These rights may be subject to conditions and exceptions under applicable law.

19. How to Exercise Your Privacy Rights

To exercise any of these rights, please contact:

info@blueapril.nl

Please clearly describe your request.

We may ask for additional information where reasonably necessary to verify your identity and protect your personal data from unauthorised access.

We will respond within the time period required by applicable data protection law.

Exercising your privacy rights is generally free of charge. However, applicable law may permit a reasonable fee or refusal in certain cases involving manifestly unfounded or excessive requests.

20. Complaints About Personal Data

If you have concerns about how BlueApril processes your personal data, please contact us first at:

info@blueapril.nl

We will try to resolve your concern.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

For BlueApril in the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

21. Security

BlueApril takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised access, disclosure or misuse.

Access to personal data is limited where reasonably possible to parties that require the information for a legitimate business or legal purpose.

No electronic transmission or storage system can, however, be guaranteed to be completely secure.

22. Children's Privacy

Our webshop is intended for general consumer shopping and is not specifically directed at children.

We do not knowingly seek to collect personal data from children who cannot legally provide the relevant information or consent independently where consent is required.

If you believe personal data relating to a child has been provided to us improperly, please contact info@blueapril.nl.

23. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, service providers, legal obligations or data-processing practices change.

The current version will be published on our website with the date of the latest update.

24. Contact

For questions about this Privacy Policy or the processing of your personal data: