Privacy Policy

Last updated: August 10, 2026

YnFi Skincare, a trading name of Organic Beauty Point, operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services").

YnFi Skincare is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person.

Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or reasonably be linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live and as permitted or required by applicable law:

• Contact details, including your name, address, billing address, shipping address, phone number and email address.

• Financial information, including payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.

• Account information, including your username, password, security questions, preferences and settings.

• Transaction information, including the items you view, place in your cart, add to your wishlist or purchase, return, exchange or cancel, as well as your past transactions.

• Communications with us, including information you provide when communicating with us, for example when submitting a customer support enquiry.

• Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.

• Usage information, including information regarding your interaction with the Services, such as how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide us with your personal information.

• Automatically through the Services, including from your device when you use our Services or visit our website and through the use of cookies and similar technologies.

• From our service providers, including when we engage them to provide certain technology or services and when they collect or process your personal information on our behalf.

• From our partners or other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Providing, Tailoring and Improving the Services

We use your personal information to provide you with the Services, including to perform our contract with you, process your payments, fulfil your orders, remember your preferences and items you are interested in, send notifications related to your account or order, process purchases, returns, exchanges or other transactions, create and manage your account, arrange shipping and delivery, provide customer support and improve the shopping experience.

Marketing and Advertising

Where permitted by applicable law, we may use your personal information for marketing and promotional purposes.

This may include sending you marketing communications by email if you choose to subscribe to our marketing communications, as well as displaying relevant advertisements where you have provided any consent required by applicable law.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our marketing communications.

Where consent is required for marketing cookies, tracking technologies or personalised advertising, these technologies will only be used after you have provided the required consent.

Security and Fraud Prevention

We use your personal information to authenticate accounts, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity and protect the security of our Services.

If you create an account, you are responsible for keeping your account credentials secure. We recommend that you do not share your username, password or other access details with anyone else.

Communicating with You

We use your personal information to provide customer support, respond to your enquiries, provide effective Services and maintain our business relationship with you.

Legal Reasons

We may process personal information where necessary to comply with applicable law or valid legal processes, respond to requests from government or law enforcement authorities, establish, exercise or defend legal claims and enforce or investigate potential violations of our terms or policies.

Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we process your personal information on one or more of the following legal bases:

• Performance of a contract, where processing is necessary to process and fulfil your order or otherwise provide the Services you have requested.

• Compliance with a legal obligation, including applicable tax, accounting and other legal requirements.

• Our legitimate interests, including operating and improving our business, protecting our Services, preventing fraud and providing customer support, provided that these interests are not overridden by your rights and interests.

• Your consent, where consent is required, for example for certain marketing communications, cookies or tracking technologies.

Where processing is based on your consent, you may withdraw your consent at any time.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes and subject to applicable data protection laws.

Such circumstances may include:

• With Shopify, payment service providers and other third parties who perform services on our behalf, such as IT services, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.

• With our fulfilment partners, including Selfnamed, where necessary to produce, process, fulfil and ship your order.

• With relevant shipping and delivery providers where necessary to deliver your order. The carrier used may vary depending on the destination and shipping method available at the time your order is processed.

• With business and marketing partners where necessary to provide marketing services or advertising and where permitted by applicable law.

• When you direct, request or otherwise consent to our disclosure of certain information to third parties, such as where information is necessary to ship products to you or through your use of social media widgets or other integrations.

• In connection with a business transaction such as a merger, acquisition, restructuring or insolvency.

• Where disclosure is required to comply with applicable legal obligations, enforce our Terms of Service or other policies, or protect or defend our Services, rights, customers or others.

We only share personal information that is reasonably necessary for the relevant third party to provide its services.

Fulfilment and Shipping

YnFi Skincare works with third-party service providers to produce, fulfil and deliver orders.

For certain products and orders, we use Selfnamed as our production and fulfilment partner.

To process and deliver your order, we may provide Selfnamed and the relevant shipping provider with information such as:

• Your name

• Shipping address

• Email address

• Telephone number, where necessary for delivery

• Order and product information

This information is shared only where necessary to produce, fulfil and deliver your order or provide related customer service.

The shipping carrier used for an order may vary depending on the destination and the shipping services available at the time.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you.

Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services.

In addition, to help protect, grow and improve our business, we may use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and Shopify.

To provide these enhanced features, Shopify may use personal information collected about your interactions with our Store, other merchants and Shopify.

In these circumstances, Shopify is responsible for the processing of your personal information, including responding to requests to exercise your rights regarding Shopify's use of your personal information for these purposes.

For more information about how Shopify uses your personal information and any rights you may have, please refer to the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate and improve our website.

Some cookies are strictly necessary for the website, shopping cart and checkout to function correctly.

Other cookies and similar technologies may be used for purposes such as:

• Remembering your preferences

• Understanding how visitors use our website

• Measuring website performance

• Improving our Services

• Marketing and advertising

Where required by applicable law, non-essential cookies and tracking technologies will only be used after you have provided your consent.

You may manage or withdraw your consent through the cookie preferences available on our website.

If we introduce additional analytics, advertising or tracking technologies in the future, our privacy and cookie information may be updated accordingly.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties.

If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy, security, accuracy, completeness or reliability of third-party websites.

Our inclusion of links does not, by itself, imply endorsement of the content, owners or operators of those websites.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information from children where parental or guardian consent would be required under applicable law.

If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details below to request that the information be deleted.

Security and Retention of Your Information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no security measures or method of electronic transmission can be guaranteed to be completely secure.

How long we retain personal information depends on the type of information, the purpose for which it was collected and our applicable legal obligations.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required by law.

Certain financial and transaction records may be retained for the period required under applicable Dutch tax and accounting legislation.

We may also retain information where necessary to resolve disputes, enforce agreements or establish, exercise or defend legal claims.

When personal information is no longer required, we will delete or anonymise it where reasonably possible.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information.

These rights are not absolute and may only apply in certain circumstances.

Right of Access

You may have the right to request access to personal information we hold about you.

Right to Deletion

You may have the right to request that we delete personal information we maintain about you, subject to applicable legal requirements and exceptions.

Right to Correction

You may have the right to request that we correct inaccurate or incomplete personal information.

Right to Data Portability

You may have the right to receive a copy of certain personal information we hold about you in a structured, commonly used and machine-readable format and, where applicable, request that it be transferred to another party.

Managing Communication Preferences

If you subscribe to promotional emails, you can unsubscribe at any time by using the unsubscribe option included in our emails.

If you unsubscribe, we may still send non-promotional communications, such as emails regarding your account, purchases, orders or customer service requests.

Additional Rights for EEA and UK Residents

If you reside in the European Economic Area (EEA) or the United Kingdom, and subject to the exceptions and limitations provided by applicable law, you may also have the right to:

• Object to certain processing of your personal information.

• Request restriction of certain processing.

• Withdraw your consent where we rely on consent to process your personal information.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You may exercise your rights by contacting us using the contact details below.

We may need to verify your identity before processing your request, as permitted or required by applicable law.

We will respond to your request within the time limits required under applicable data protection legislation.

Complaints

If you have a complaint or concern about how we process your personal information, please contact us using the details below so that we have the opportunity to address your concerns.

If you are located in the Netherlands, you also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If you reside elsewhere in the EEA, you may also have the right to lodge a complaint with the competent data protection authority in your country.

International Transfers

We may transfer, store and process personal information outside the country in which you live.

If personal information is transferred outside the European Economic Area or the United Kingdom to a country that has not been recognised as providing an adequate level of protection, we will rely on appropriate safeguards as required by applicable law.

These may include the European Commission's Standard Contractual Clauses or another recognised legal transfer mechanism.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our Services, business practices or for operational, legal or regulatory reasons.

We will publish the revised Privacy Policy on this website, update the "Last updated" date and provide any additional notice required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your privacy rights, please contact us:

Organic Beauty Point, trading as YnFi Skincare
Hugo de Grootsingel 6
1277 CE Huizen
The Netherlands

Dutch Chamber of Commerce (KvK): 57751374
Email: ynfiskincare@gmail.com
Phone: +31 6 51280443

For the purposes of applicable data protection laws, Organic Beauty Point, trading as YnFi Skincare, is the data controller responsible for your personal information.