Privacy Policy

Who we are

DS Cosmetics en Skincare B.V. (Unity Cosmetics), based at Botter 29-6, 8232 KH Lelystad, the Netherlands. Chamber of Commerce: 99636018.

What data we collect

When placing an order we collect: name, email address, phone number, delivery address and payment details (processed by Mollie). When signing up for the newsletter we collect your email address.

What we use your data for

• Processing and shipping your order
• Sending order confirmations and shipping notifications
• Replying to your questions via the contact form or WhatsApp
• Sending the newsletter (only with your consent)
• Improving our shop and service

How long we keep your data

We keep order data for 7 years (legal retention obligation). We keep account data as long as your account is active. You can unsubscribe from the newsletter at any time.

The Google Ads cookies expire after 90 days. Your choice we keep for 12 months in your browser; after that we ask again. Necessary storage disappears as soon as you empty your basket, sign out or clear your browser data. Visitor statistics are kept in aggregate; only after your consent do visits from the same device belong together through a visit id. For every choice we also keep a record on our side without an IP address and without any other identifying data: only whether you accepted or refused, which cookie text you saw, in which language, through which campaign you arrived and when. We keep that record for 3 years, so that we can demonstrate that consent was asked for and given.

Sharing with third parties

We work with the following parties, each for its own purpose:

• Mollie (payment processing)
• PostNL / DHL / DPD (shipping)
• Resend (transactional emails: order confirmation, shipping notification)
• Amazon Web Services / SES (Frankfurt, EU) (marketing emails: newsletter and offers)
• Umami, self-hosted by Nurani on servers in the European Union (visitor statistics)
• Hetzner Online GmbH (Falkenstein, Germany) (hosting inside the EU)
• Cloudflare (DNS and security)
• Google Ireland Limited (advertising measurement with your consent, and the review question after a paid order)

We never sell your data to third parties.

Marketing emails and newsletter

If you have subscribed to our newsletter or have been a customer with us, we may send you emails about new products and offers. These emails are sent via Amazon Web Services (Amazon SES) from our EU data centre in Frankfurt.

For our newsletter we use double opt-in: you first receive a confirmation email before we add you to the list. You can unsubscribe at any time via the unsubscribe link at the bottom of every email, or via the One-Click Unsubscribe button shown by your email client. Unsubscribing is immediately effective and is recorded irrevocably.

We track whether emails are opened and which links you click, so that we can improve the content and avoid irrelevant emails. This data is only visible to us in aggregate and is anonymised after 12 months.

Visitor statistics

We measure how often pages are viewed with Umami, which Nurani self-hosts for us on servers in the European Union. As long as you do not consent, nothing about your website visit goes to Google or to any other advertising platform, and we place no cookie or any other storage on your device for this; what does happen once you consent is described below under Google Ads. Only after a purchase do we share a confirmation of the purchase (order number, amount and time) with Google, together with your email address in a form Google cannot read, solely to measure which ads lead to sales: no name, no address, no readable email address and never your browsing behaviour. Rather not? Email us and we will exclude your purchases from this.

What we see is aggregated: which pages are viewed, from which country, on what kind of device and which route visitors take through the shop. We build no profile. Without your consent we link visits neither to each other nor to you; if you consent, your browser receives a visit id (umami_visitor_id) that groups visits from the same device, without us knowing who you are. If you arrive on a campaign link, we remember that origin only in your tab's memory; if you order, it is stored with your order in our own system and nowhere else.

Google Ads: advertising measurement

If you consent, we place the Google Ads tag. The controller within the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing also runs through Google LLC in the United States.

We use this for one purpose: measuring which ad click led to an order. We do not measure website statistics with it, we use Umami for that, and we send no purchase event to Google from your device: the confirmation of an order goes from our own server, as described above under Visitor statistics. Ad personalisation stays off: your consent is for measurement, not for building a profile.

With your consent Google places these cookies:

• _gcl_au (Google Ads, 90 days): links an ad click to an order.
• _gcl_aw and _gac_<id> (Google Ads, 90 days): click identifiers for conversion measurement.

Google may also process this data outside the European Economic Area, in particular in the United States. Google LLC is certified for this under the EU-US Data Privacy Framework; that adequacy decision of the European Commission is the basis for the transfer. If you withdraw your consent, we delete these cookies from your device and tell Google that consent has been withdrawn.

Google Customer Reviews: the question after your order

Once you have paid, Google shows a question on the confirmation page: would you like a short email survey about your order after it arrives? Google asks it, and you answer it yourself. Say no and Google sends you nothing and no review is created.

So that Google can ask, we hand over your email address in readable form, the country the order ships to, your order number and the date we expect delivery. If your order contains items with a barcode we pass those barcodes too, so a review lands on the right product. That data reaches Google the moment the question appears, so before you answer: Google needs it to ask the question at all.

This does not depend on the cookie banner. The banner is about cookies and identifiers on your device; here nothing is stored on or read from your device, an order detail is passed to Google. We do this on the basis of our legitimate interest in customer feedback. Rather not? Email [email protected]; how to request deletion is described below under Your rights.

Cookies and similar techniques

To run the shop we use necessary storage on your device: your basket, your language choice and your login session. It is required to make the shop work and needs no consent. Everything beyond that, the Google Ads cookies above, is placed only after you click Accept all. Your choice itself we keep in your browser's local storage (nurani_consent and nurani_consent_at), and after an acceptance a visit id for our own statistics (umami_visitor_id) is kept there too.

So there is a cookie banner, and your choice is not final. If you click Accept all, we place the Google Ads cookies above and keep a visit id for our own statistics. If you click Necessary only, or make no choice at all, neither happens and only the necessary storage remains. Did you consent before 5 August 2026? That question was about different measurement software from an agency that has since gone, so we deleted that choice and ask again.

You can change your choice at any time under Cookie preferences below, or via the link at the bottom of every page. Withdrawing takes effect immediately: we delete the cookies that were placed and tell Google that consent has been withdrawn. After 12 months we ask again.

Your rights

Under the GDPR you have the right to access, rectify, erase and port your data. Contact us at [email protected].

Contact

Questions about this privacy policy? Email us at [email protected].