Privacy policy
This is a translation provided for your convenience. In case of any discrepancy, the Dutch version of this document is legally binding.
1. Who we are
This privacy statement is issued by H2OT Water Solutions B.V., trading under the name H2Ot (hereinafter: "we"). We are the controller for the processing of your personal data via h2ot.nl and when handling orders, quotations and questions.
H2OT Water Solutions B.V. · Heuvelstraat 9, 5131 AP Alphen (NB) · info@h2ot.nl · +31 6 3891 6733 · KvK 76125971
Do you have a question about your privacy? Email us at info@h2ot.nl.
2. What data we process
We only process data that you provide to us yourself or that is generated when you use our website:
- Contact details: name, address, email address and telephone number.
- Order details: what you order, the delivery address, your order number and the payment status. Your payment details (such as your bank account or card number) are processed by the payment provider; we do not see them.
- Business details: company name, Chamber of Commerce (KvK) number and VAT number, if you order as a business or request a quotation.
- Data you send us: your message, questions about your situation or your water, photos accompanying a warranty claim.
- Reviews: your name (or the name you provide), your rating and your text.
- Website data: technical data such as your IP address, browser, device and the pages you view, via cookies (see section 7).
We do not ask for data about your health. Please do not include it in a message to us either.
3. Why we use your data
| Purpose | Which data | Legal basis (GDPR) |
|---|---|---|
| Handling, delivering and receiving payment for your order | Contact, order and business details | Performance of the contract |
| Preparing and following up a custom quotation | Contact and business details, your message | Performance of the contract (at your request) |
| Warranty, returns and customer service | Contact and order details, your message and photos | Performance of the contract |
| Our accounts and tax returns | Order and business details, invoices | Legal obligation |
| Asking you for a review after your purchase | Name, email address, product purchased | Legitimate interest; you can always unsubscribe |
| Sending a reminder to replace your filter | Name, email address, product and date of purchase | Legitimate interest; you can always unsubscribe |
| Keeping the website secure and improving it | Website data | Legitimate interest; we ask for consent for analytics and marketing cookies |
| Advertisements and recommendations tailored to you, including on social media | Website data and purchase data | Consent via the cookie banner; you can withdraw it at any time |
4. Who we share data with
We never sell your data. We only share it where this is necessary for the purposes above:
- Shopify: the platform of our online store. Shopify stores data in, among other places, Canada and the United States.
- Shopify also uses data from our online store, together with data from other Shopify stores, to improve products, advertisements and personalisation (Shopify Network Intelligence). Other stores cannot view your data. We ask for your consent for advertisements and personalisation via the cookie banner.
- Shopify Payments: the payment service that processes your payment.
- The manufacturer that delivers your order directly to you, and the carrier. They only receive your name, delivery address and telephone number. All manufacturers are located within the European Union.
- Judge.me: the service we use to collect and display reviews.
- Yourhosting: the party that hosts our email.
- Google: Google Search Console helps us see how the website is found in Google; it contains no data that can be traced back to you. We measure visits to the website using Shopify's own statistics.
We make agreements on security and confidentiality with parties that process data on our behalf. Where data ends up outside the European Economic Area, as with Shopify and Google, this takes place on the basis of the EU arrangements for that purpose (the EU-US Data Privacy Framework or standard contractual clauses).
We also disclose data where the law requires us to do so.
5. How long we keep data
| Data | Retention period |
|---|---|
| Orders and invoices | 7 years (statutory tax retention obligation) |
| Warranty and customer service contact | 2 years after completion, or for as long as the warranty runs if that is longer |
| Quotation requests without an order | 1 year after the request |
| Customer account | Until you have the account deleted |
| Reviews | For as long as the review is online; you can have it removed |
| Website data and cookies | See the duration per cookie in the cookie banner |
6. Security
We protect your data with appropriate technical and organisational measures. Our online store runs on a secure connection (https) and only people who need the data for their work have access to it. Do you notice anything that suggests misuse? Then email us immediately at info@h2ot.nl.
7. Cookies
Our website uses cookies. We always place cookies that are necessary for the online store to work (such as your basket). For cookies that measure visits or are used for marketing, we first ask for your consent via the cookie banner. You can change your choice at any time via the "Cookie settings" link at the bottom of the website.
8. Your rights
You have the right to:
- access your data;
- have incorrect data rectified;
- have your data erased, if we no longer need it or are not legally required to retain it;
- have the processing restricted;
- object to processing based on our legitimate interest, for example to review or reminder emails, or to the use of your data for advertisements;
- receive your data in a commonly used file format (portability);
- withdraw any consent you have given.
Send your request to info@h2ot.nl. We will respond within one month. To be sure that the request comes from you, we may ask you to identify yourself. Never send a copy of your passport or ID card.
Are you not satisfied with how we handle your data? Let us know first, and we will look for a solution together. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
9. No automated decisions
We do not take decisions about you that are made solely by a computer, without a human looking at them.
10. Changes
We may amend this privacy statement, for example if we start using a new service. The latest version is always available on h2ot.nl. This version is dated 14 October 2026.