Privacy & cookies
Ordering is not open yet. These policies describe the intended consumer service. Verified seller and return-address details will be published before sales open.
Seller and privacy contact
KCJ Skin operates kcjskin.nl. The registered legal name, KvK number, VAT number, business address, return address and telephone number are awaiting verification. For current account, support and privacy questions: info@kcjskin.nl.
Accounts, support and orders
When you use an account, we process your email, profile, saved addresses, favourites and account activity to provide the service you request. Support and withdrawal messages include the contact and order information you submit. Supabase stores the application database in the EU; authorised staff handle support. Resend delivers sign-in and service emails. Account access and service requests rely on performance of a contract or steps at your request; security and handling enquiries also rely on our legitimate interests in protecting and operating the service. Order and accounting records may be required by law. Payments remain closed; when enabled, Stripe handles payment details and provides transaction and order information. We do not store full card numbers in the storefront.
Newsletter and consent
Newsletter emails require your separate signup and email confirmation. Buying or creating an account does not subscribe you. Withdraw consent using the unsubscribe link or account preferences without affecting earlier lawful processing. We keep the minimum consent and suppression information needed to evidence your choice and prevent unwanted mail.
Browser storage and cookies
Necessary storage remembers your bag, language and requested account session. Secure HttpOnly account cookies last up to one hour (access) and 30 days (refresh); the checkout receipt cookie lasts up to seven days. Guest favourites, plans and demonstration data can remain in local storage until you clear them. Account and provider records are not erased by clearing your browser. Cloudflare Turnstile processes technical information for anti-abuse checks. No advertising or behavioural analytics tools are enabled in the storefront. Any future non-essential tracking requires prior consent with an equally accessible refusal and withdrawal choice.
AI adviser and hosting
The adviser sends your question, selected products and a limited recent conversation context to Cloudflare Workers AI. The current conversation can remain in this browser tab through session storage until it is cleared or the tab closes. We do not save a chat history in our application database. Vercel and Cloudflare serve and protect the website and process technical request data. Do not submit medical records, passwords or payment-card details. The adviser does not make legally significant decisions about you. Providers may process data outside the EEA; applicable adequacy decisions or contractual safeguards and provider arrangements must be verified, and copies of relevant safeguards can be requested through customer care.
Retention and your rights
We keep data only as needed for the requested service, resolving an open complaint, applicable legal retention or establishing and defending legal claims. Account closure does not automatically erase records that must lawfully be retained. Exact operational retention and deletion schedules are being completed before sales open. Ask info@kcjskin.nl for access, correction, erasure, restriction, portability or to object where the relevant right applies. We may ask proportionate verification, not a full identity document by default. We respond within one month; a lawful extension of up to two further months will be explained within the first month. You may complain to the Autoriteit Persoonsgegevens or your competent supervisory authority. Essential service data is needed to provide the requested account, order or support function.