Privacy Policy

TapCleanse

Website: tapcleanse.com

Email: privacy@tapcleanse.com

For all data protection enquiries, you can reach us at the email above. We aim to respond within 30 days.

a) Data you provide to us

• Name and email address (when placing an order or subscribing to our newsletter)
• Billing and shipping address
• Payment information (processed securely through third-party payment processors, we do not store your full card details)
• Phone number (if provided)
• Order history and purchase information
• Messages and enquiries you send to our customer support team
• Photos or reviews you voluntarily submit

b) Data collected automatically

• IP address and browser type
• Device information and operating system
• Pages visited, time spent on the Site, and click behaviour
• Referral source (how you found us)
• Cookie identifiers and session data

c) Data from third parties

• If you were referred to us by a partner or affiliate, we may receive your name and email address
• Payment processors may share transaction confirmation details with us

Fulfilling your order

We use your name, address, and payment details to process and deliver your purchase, send order confirmations, and provide post-purchase support. This is necessary to perform our contract with you.

Customer support

When you contact us, we use your details to respond to your query and resolve any issues. This is based on our legitimate interest in providing good customer service.

Subscriptions

If you sign up for our filter refill subscription, we process your data to manage recurring orders and billing. This is based on your contract with us.

Marketing communications

With your consent, we may send you emails about new products, promotions, and skincare tips. You can unsubscribe at any time by clicking the link at the bottom of any email or contacting us directly.

Improving our Site and products

We analyse how visitors use our Site to improve performance, user experience, and product offerings. This is based on our legitimate interests, and we use anonymised or aggregated data wherever possible.

Fraud prevention and legal compliance

We may use your data to detect and prevent fraudulent transactions, and to comply with our legal obligations under applicable law.

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Contract performance — when processing is necessary to fulfil your order or subscription
• Consent — for marketing emails and non-essential cookies (you can withdraw consent at any time)
• Legitimate interests — for fraud prevention, site analytics, and service improvement, where these do not override your rights
• Legal obligation — where we are required to process data under applicable law

We do not keep your personal data for longer than necessary. Our general retention approach is:

• Order and transaction data: retained for 7 years to comply with financial and tax regulations
• Customer support communications: retained for up to 3 years after your last interaction
• Marketing data (email subscribers): retained until you unsubscribe or request deletion
• Website analytics and cookie data: retained for up to 2 years
• Fraud prevention and security data: retained for up to 5 years

When data is no longer needed, it is securely deleted or anonymised.

We do not sell your personal data. We only share it with trusted service providers who help us operate our business. All third parties are contractually obligated to handle your data securely and only for the purposes we specify.

Our service providers include:

• Shopify — our e-commerce platform (data processed in line with Shopify's privacy policy)
• Payment processors (e.g., Stripe, PayPal, Klarna) — to handle secure payment transactions
• Shipping and logistics partners — to deliver your order
• Email marketing platforms (e.g., Klaviyo) — to send order confirmations and marketing emails
• Analytics providers (e.g., Google Analytics) — to help us understand how our Site is used
• Customer support tools — to manage support tickets and communications

We may also share data when:

• Required by law, a court order, or regulatory authority
• Necessary to protect the safety, rights, or property of TapCleanse or others
• Involved in a business transfer (e.g., merger or acquisition), in which case we will notify you

Some of our service providers are based outside the European Economic Area (EEA), including in the United States. Whenever we transfer your personal data outside the EEA, we ensure it is protected through appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions issued by the European Commission
• The provider's participation in a recognised data protection framework

You can request more information about our international transfer mechanisms by contacting us at privacy@tapcleanse.com.

We use cookies and similar technologies to make our Site work, improve your experience, and understand how visitors use it.

Essential cookies

These are necessary for the Site to function. They enable things like your shopping cart, login session, and checkout process. You cannot opt out of essential cookies.

Analytics cookies

These help us understand how visitors navigate the Site, which pages are most popular, and where people drop off. We use tools such as Google Analytics. The data is aggregated and not linked to identifiable individuals.

Marketing and advertising cookies

These allow us to show you relevant ads on other platforms (such as Facebook, Instagram, and Google) based on your visit to our Site. We only place these cookies with your consent.

Managing your cookie preferences

When you first visit our Site, you will be asked to accept or manage your cookie preferences. You can update your preferences at any time through our cookie settings. You can also control cookies through your browser settings. Please note that blocking some cookies may affect the functionality of the Site.

To opt out of Google Analytics specifically, you can use the opt-out browser add-on at: tools.google.com/dlpage/gaoptout

As a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data, where we are not required by law to keep it
• Right to restriction — you can ask us to limit how we process your data in certain circumstances
• Right to data portability — you can request your data in a machine-readable format to transfer to another provider
• Right to object — you can object to our processing based on legitimate interests, including direct marketing
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
• Right not to be subject to automated decision-making — we do not make decisions about you based solely on automated processing that have a legal or significant effect on you

To exercise any of these rights, please contact us at privacy@tapcleanse.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (AP): autoriteitpersoonsgegevens.nl

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse.

• SSL/TLS encryption for all data transmitted through our Site
• Secure payment processing through PCI-DSS compliant providers; we never store full payment card details
• Access controls that limit who within TapCleanse can access personal data
• Regular security reviews and updates to our systems

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us immediately.

Our Site and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests related to this Privacy Policy or how we handle your data, please get in touch:

TapCleanse
Email: privacy@tapcleanse.com
Website: tapcleanse.com

We aim to respond to all privacy-related enquiries within 30 days.