Privacy Policy

Introduction

Discover Your Fragrance (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect and use personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection laws.

Discover Your Fragrance is operated by MVH, established in Belgium.

Data we collect

We collect only the data needed to provide our service:

Contact details (such as email, and name if you choose to provide it) when you contact us or make a purchase
Purchase and transaction details needed to process payments and provide customer support
Fragrance preferences and responses you provide during the guided experience to generate your recommendations and results
Privacy-conscious analytics information through Umami Cloud when analytics is configured
Technical signals processed by Cloudflare Turnstile when you use protected forms on our website (such as IP address, browser information, and user agent)

If a shipping address is required to deliver a physical product, it is provided for delivery purposes and shared with our delivery carrier (PostNL) to fulfill your order. We do not aim to store shipping addresses longer than necessary for fulfillment and legal obligations.

How we use your data

We use personal data to:

Deliver the guided discovery experience and generate personalized recommendations
Provide access codes and experience continuity where applicable
Respond to enquiries and provide customer support
Improve the service using aggregated, privacy-conscious insights

Fragrance preference data is used to generate recommendations within the Discover Your Fragrance experience. We do not use this data for advertising, and we do not share it with third parties for marketing purposes.

Legal basis for processing

We process personal data under the following legal bases:

Contractual necessity (to provide purchases and the discovery experience)
Legitimate interests (for privacy-conscious analytics, service improvement, and proportionate security measures)
Consent (where we introduce optional features that require consent under applicable law)

We do not sell your personal data. We may share data with trusted service providers only as necessary, such as:

Payment processors such as Mollie to complete transactions
Email delivery providers such as Postmark to send transactional messages
Delivery carriers such as PostNL to deliver physical products (when applicable)
Analytics providers such as Umami Cloud where configured in a privacy-conscious way
Security and anti-abuse providers such as Cloudflare Turnstile to protect our website and forms
Hosting provider Hetzner, where our website and data are stored and processed

Third-party services we use

We use trusted service providers as data processors where necessary to operate our website, deliver orders, send communications, and protect the service. Each provider processes personal data only for the purposes described below and in their own privacy materials.

Cloudflare Turnstile

We use Cloudflare Turnstile to help protect our website and forms from spam, bots, and other automated abuse.

Turnstile may process technical signals, such as your IP address and browser information, to help distinguish legitimate use from automated abuse.

For more information, please see Cloudflare’s Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

Umami Analytics

We use Umami Analytics to understand how visitors use our website and to improve the website experience.

Umami is a privacy-focused analytics tool. We use it to collect aggregated website usage information, such as page views, referrers, device/browser information, approximate location, and interactions with our website.

Umami does not use cookies in its tracking code and is designed not to identify individual visitors or track users across different websites.

For more information, please see Umami’s Privacy Policy: https://umami.is/privacy

Mollie Payments

We use Mollie to process payments securely.

When you make a purchase, Mollie may process personal data necessary to complete the payment, such as payment details, transaction information, billing information, your name, email address, IP address, and other information required for fraud prevention, compliance, and payment processing.

Mollie processes this information in accordance with its own privacy statement and applicable financial regulations.

For more information, please see Mollie’s Privacy Statement: https://www.mollie.com/legal/privacy

Postmark

We use Postmark to send transactional email on our behalf, such as order confirmations, access codes, experience-related messages, and responses to contact enquiries.

To deliver these messages, Postmark may process personal data such as your email address, name (where provided), and the content needed for the specific message (for example, order or support details).

For more information, please see Postmark’s Privacy Policy: https://postmarkapp.com/privacy-policy

PostNL

When you order a physical product such as the Discovery Box, we use PostNL to deliver your order.

PostNL may process personal data necessary for delivery, such as your name, delivery address, postal code, city, country, and phone number where provided, as well as shipment and tracking information.

For more information, please see PostNL’s Privacy Statement: https://www.postnl.nl/en/privacy/

Hosting and infrastructure

Our website and applications are hosted on infrastructure provided by Hetzner.

Hetzner provides the server, network, storage, and infrastructure services needed to operate our website. In this role, Hetzner may process limited technical data, such as server logs, IP addresses, network metadata, and data transmitted to or stored on our hosted systems, only as necessary to provide, secure, maintain, and support the hosting service.

We use appropriate technical and organizational measures to protect personal data and have appropriate contractual safeguards in place with our hosting provider, including a data processing agreement where required.

Your rights

Under GDPR, you have the right to request:

Access to your personal data
Correction of inaccurate data
Deletion of your data
Objection to processing
Data portability
Withdrawal of consent at any time (where processing is based on consent)

To exercise your rights, contact [email protected].

You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA/APD) at www.gegevensbeschermingsautoriteit.be.

Data retention

We retain personal data only for as long as needed to provide the service and meet legal obligations.

Experience data (preferences and responses) is kept to provide your results and support your experience, and may be retained for future experiences where relevant unless you request deletion.

Purchase records may be retained as required for accounting and legal compliance.

Where a shipping address is used for fulfillment, it is not retained longer than necessary for delivery and related obligations.

Contact

For privacy questions or data subject requests, contact: [email protected].