Privacy Policy

This website is operated by ED/BET BV Enfusion ("Enfusion Nutrition", "we", "us"), ED/BET BV Enfusion, Hofdijkstraat 5, 1814 EC Alkmaar, The Netherlands. We are registered with the Dutch Chamber of Commerce under KvK number 50134078, VAT number NL822570051B02. We are the controller of the personal data described in this policy.

For anything to do with your personal data — a copy of it, a correction, deletion, or a question about this policy — write to privacy@enfusionnutrition.com. For questions about an order, write to support@enfusionnutrition.com.

We collect only what each part of the site actually needs. Every form and feature on this site that collects personal data is listed below.

Newsletter sign-up (in the footer). Your email address, and the fact that you ticked the consent box.

Support form (on the FAQ page). Your name, email address, an optional order number, an optional subject, and your message.

Contact form. Your name, email address, an optional phone number, an optional order number, an optional subject, and your message.

Business enquiry form (Partners › Contact). Your name, company name, email address, phone number, the type of enquiry, and your message.

Partnership application forms (White Label and Affiliate). Your first name, last name, email address and phone number; optionally your company or brand name and your website or primary social media URL; your estimated initial order volume (White Label) or estimated audience size (Affiliate); and anything you write in the message box. The form also carries an optional, unticked marketing opt-in — leaving it unticked has no effect on your application.

Product quiz ("Find Your Perfect Stack"). The answer you pick for each of the four questions — your main training goal, what your training looks like, your biggest challenge, and how long you have been training — plus the email address you enter on the last screen. We also store the recommendation the quiz works out from those four answers, so that we know what you were shown. The last screen carries an optional, unticked marketing box, and we record whether you ticked it. None of the four questions asks about your health, your diet or any medical condition — they are about training goals and experience only.

With every form submission — the quiz included — we also record the IP address it was sent from, your browser's user-agent string, the page you submitted from, the date and time, and, if you happened to be signed in to an account, which account it was. We keep these to detect and block automated spam and abuse, and for nothing else: they are not used for advertising, and we do not build a profile from them.

Product reviews. The name and review text you publish, your star rating, plus your email address, your IP address and your browser's user-agent string, which are stored but never published.

Orders and accounts. Your name, email address, billing address, delivery address, phone number, what you ordered, and the status of the payment. We never see or store your card details — those are entered on our payment provider's own systems and never reach our server.

Server logs. Our web host keeps standard access logs, which include IP addresses, for security and troubleshooting.

We do not collect health information, dietary or medical details, date of birth, government identity numbers, or bank details anywhere on this site, and none of our forms asks for them.

• To send you the newsletter — your consent, Article 6(1)(a) GDPR. You can withdraw it at any time using the unsubscribe link in any newsletter, or by emailing us. Withdrawing it does not affect anything we sent before.
• To answer a support or contact message — our legitimate interest in replying to someone who has written to us, Article 6(1)(f).
• To respond to a business enquiry — steps taken at your request before entering into a contract, Article 6(1)(b).
• To assess a partnership application (White Label or Affiliate) — steps taken at your request before entering into a contract, Article 6(1)(b). This is not based on consent, which is why those forms carry no "I agree" tick.
• To email you about products, offers and partner news — your consent, Article 6(1)(a), given only if you tick the optional marketing box on an application form. You can withdraw it at any time by emailing us or using the unsubscribe link.
• To work out your quiz result and show it to you — our legitimate interest in answering a request you deliberately made of us, Article 6(1)(f). This uses the four answers you give. We keep those answers, the recommendation we derive from them, and the email address you enter with them, so that we can pick the conversation up if you come back to us about your result. You can object to this at any time, and we will stop unless we have compelling grounds not to.
• To email you Enfusion news and offers after the quiz — your consent, Article 6(1)(a), given only if you tick the optional, unticked box on the last screen of the quiz. If you leave it unticked we will not send you marketing email, and your result is exactly the same either way. You can withdraw consent at any time.
• To take, deliver and support an order — performance of our contract with you, Article 6(1)(b).
• To keep invoices and order records — our legal obligation under Dutch tax law, Article 6(1)(c).
• To publish a review you chose to submit — your consent, given by submitting it, Article 6(1)(a).
• To keep the site working and block spam and abuse — our legitimate interest in keeping the service available and usable, Article 6(1)(f).

Automated decisions and profiling. The quiz is the one place on this site where something about you is worked out automatically: it matches the four answers you give against a fixed set of rules and shows you the product that fits. That is profiling in the sense Article 4(4) GDPR uses the word, so we name it here rather than deny it. It is a product suggestion and nothing more — it has no legal or similarly significant effect on you under Article 22, it does not change what you are charged, it does not change what you are shown anywhere else on the site, and we do not combine it with your order history. Nothing else on this site profiles, scores or ranks you. We never sell personal data.

• Newsletter sign-ups — 24 months from your last activity, then deleted automatically.
• Support and contact messages — 12 months, then deleted automatically.
• Quiz entries — 12 months, then deleted automatically. That covers your four answers, the recommendation derived from them, your email address, and whether you ticked the marketing box.
• Business enquiries — 24 months, because they are the record of a possible commercial relationship.
• Partnership applications (White Label and Affiliate) — 24 months, for the same reason.
• Orders, invoices and the records behind them — seven years, which is the retention period Dutch tax law requires of us.
• Reviews — until you or we remove them. They are published content.
• Server logs — as long as our hosting provider retains them, which is a short rolling window.

Deletion of form submissions is run by a scheduled job on this site, not by hand, so the periods above are what actually happens rather than an intention.

We share your personal data only with the suppliers that make the site work, and only with as much of it as each one needs:

• Our web hosting provider, which runs the servers this site and its database sit on.
• Our email delivery provider, which sends order confirmations, newsletters and the notification emails our forms generate.
• Our payment provider, which processes payments and receives the information it needs to take one. Your card details go to it directly and are never stored by us.
• Our delivery carriers, which receive the name, address and contact details needed to deliver your parcel.

Each of them acts on our instructions under a written data-processing agreement. We do not sell, rent or trade personal data, and we do not pass it to advertisers.

We may also disclose data where the law requires it — for example to a tax authority or in response to a valid court order.

The suppliers listed above process your data inside the European Economic Area. We do not currently transfer personal data outside the EEA. If that ever changes, we will update this policy first and will only make the transfer under a mechanism the GDPR permits, such as the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply.

This site sets only the cookies it needs to function — to keep your shopping basket, to keep you signed in, and to keep a form submission attached to the right session. We do not run advertising cookies, and we do not run third-party analytics. Our Cookie Policy lists each cookie and what it does.

Because we process your data in the European Union, the GDPR gives you the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — have anything inaccurate corrected.
• Erasure — have your data deleted, where we have no overriding obligation to keep it (invoices are the usual exception).
• Restriction — ask us to stop using your data while a dispute about it is resolved.
• Portability — receive the data you gave us in a structured, machine-readable file.
• Objection — object to processing we base on legitimate interest, and object to direct marketing at any time, with no reason needed.
• Withdrawal of consent — withdraw consent you have given, at any time.

Email privacy@enfusionnutrition.com, or write to us at ED/BET BV Enfusion, Hofdijkstraat 5, 1814 EC Alkmaar, The Netherlands. We will answer within one month. If a request is unusually complex we may extend that by a further two months, and we will tell you within the first month if we do. We may ask you to confirm your identity before we release data. Exercising any of these rights is free.

If you are not satisfied with how we have handled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens — Postbus 93374, 2509 AJ Den Haag, autoriteitpersoonsgegevens.nl — or to the supervisory authority in the EU country where you live.

If we change how we handle personal data we will update this page and change the date at the top. Where a change is significant we will tell newsletter subscribers by email before it takes effect.