Privacy policy

Last updated: 16/10/2026

This Privacy Policy explains how Try Sapura (“we”, “us”, “our”) collects, uses and shares your personal information when you visit or buy from trysapura.com (the “Site”) or otherwise contact us (together, the “Services”).

Try Sapura is based in the Netherlands and is the data controller of your personal information. We process personal data in accordance with the EU General Data Protection Regulation (GDPR). Where they apply to you, we also comply with the UK GDPR and with US state privacy laws.

Some of our products are used for skin-related concerns, so information about what you buy may be considered health data in certain places. How we handle that is explained below and in our [Consumer Health Data Privacy Policy – link].

1. What Personal Information We Collect

Information you give us

  • Contact details: name, address, phone number and email address.
  • Order information: billing and shipping address, payment confirmation, products purchased and subscription details.
  • Account information: login details and security information.
  • Customer support information: anything you include in messages to us, including photos you send with a claim.

Information collected automatically (“Usage Data”)

We collect information about how you use the Services through cookies, pixels and similar technologies (“Cookies”). This includes device and browser information, IP address, network information and how you interact with the Site.

Information from third parties

We receive information from Shopify, from our payment processors, and from advertising and analytics partners. Our payment processors handle your card details, and we never see your full card number. Advertising and analytics partners collect data through tracking technologies when you visit the Site, open our emails or interact with our ads.

2. How We Use Your Information and Our Legal Basis

Purpose Legal basis (GDPR)
Processing payments, fulfilling orders and subscriptions, shipping, returns, refunds, account management Performance of our contract with you
Customer support and handling guarantee claims Performance of our contract; our legitimate interest in helping customers
Marketing emails to customers about similar products Our legitimate interest (you can opt out at any time)
Marketing emails to non-customers, text messages, advertising Cookies and personalized ads Your consent
Analytics and improving our Services Your consent (for non-essential Cookies); our legitimate interest
Detecting and preventing fraud, including refund abuse and chargeback fraud Our legitimate interest
Keeping records for tax and accounting purposes, responding to authorities Legal obligation

3. Health-Related Information

  • We don’t ask you about your health, and you don’t have to tell us anything about your health to buy from us.
  • Your purchase history, such as buying an anti-fungal soap, and anything you choose to tell our support team may reveal information about a health condition.
  • We process such information only to fulfil your order and handle your requests. Where it is sensitive (special category) data, we process it only on the basis of your explicit consent or where otherwise permitted by law.
  • We don’t sell health-related information. We don’t use it to build profiles about you, and we don’t share it with advertising partners without your consent.
  • We configure our advertising pixels so that they do not send product names or product-level purchase details to advertising platforms.

4. Cookies

We use Cookies to make the Site work, remember your preferences, run analytics and, with your consent, for advertising. Strictly necessary Cookies are always active. Other Cookies are only placed after you have given consent through our cookie banner. You can change or withdraw your consent at any time through the cookie settings on our Site or on our [Your Privacy Choices – link] page. You can also manage Cookies in your browser settings. For Shopify’s Cookies, see shopify.com/legal/cookies.

Our Site recognizes the Global Privacy Control (GPC) signal as a valid request to opt out of “sale”, “sharing” and targeted advertising for that browser or device, and for your account where we can link them. We don’t respond to other “Do Not Track” signals.

5. Who We Share Your Information With

  • Service providers who process data on our behalf under a data processing agreement. These cover hosting and checkout (Shopify), payment processing, fulfillment and shipping, customer support, analytics, email and SMS, and cloud storage.
  • Advertising and marketing partners, such as Meta and Google, to show you ads. This is subject to your consent and your opt-out rights. Health-related information is excluded, as described above.
  • When you ask us to, or with your consent.
  • In connection with a merger, acquisition or bankruptcy, to comply with legal obligations, to enforce our terms, or to protect our rights and the safety of others.

Information for US residents. In the past 12 months, we have “sold” or “shared” (as defined under US state privacy laws) identifiers (name, email address, phone number), commercial information (purchase records) and Usage Data with advertising partners for targeted advertising. You can opt out at [Your Privacy Choices – link] or by enabling GPC. We do not use or disclose sensitive personal information to infer characteristics about you.

6. International Transfers

Some of our service providers process data outside the European Economic Area (EEA), for example in the United States. When we transfer personal data outside the EEA or the UK, we make sure it is protected. We do this through an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, where the recipient is certified), or through the European Commission’s Standard Contractual Clauses (or the UK equivalent).

7. How Long We Keep Your Information

  • Order and transaction records: 7 years, as required by Dutch tax law.
  • Account data: until you delete your account.
  • Marketing data: until you unsubscribe or withdraw your consent.
  • Support messages and claim photos: up to 2 years after your last contact, unless we need them longer to resolve a dispute.
  • Cookie data: according to the retention periods shown in our cookie banner.

8. Security

We use appropriate technical and organizational measures to protect your information. No security measure is perfect, but we work to keep your data safe and limit access to people who need it.

9. Children’s Data

The Services are not intended for anyone under 18, and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we’ll delete it. We don’t knowingly sell or share the personal information of anyone under 16.

10. Your Rights

You have the right to:

  • Access the personal information we hold about you and know how we use it.
  • Correct inaccurate information.
  • Delete your personal information.
  • Restrict or object to our processing, including processing based on legitimate interests.
  • Data portability: receive a copy of your information in a commonly used format.
  • Withdraw your consent at any time, where we rely on it. This doesn’t affect processing that took place before you withdrew it.
  • Opt out of sale, sharing or targeted advertising.
  • Unsubscribe from marketing using the link in any email, or by replying STOP to text messages. We may still send you order and account messages.
  • Appeal a decision we make on your request, by replying to our response.

To exercise your rights, email info@trysapura.com or use our [Your Privacy Choices – link] page. We respond within one month. In complex cases this may be extended by up to two more months, and we’ll tell you if that happens. We may need to verify your identity first. You may use an authorized agent, and we won’t discriminate against you for exercising your rights.

11. Complaints

If you’re not satisfied with how we handle your data, please contact us first. You also have the right to file a complaint with a data protection authority:

  • Netherlands (our lead authority): Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl
  • Other EEA countries: your local data protection authority
  • UK: Information Commissioner’s Office, ico.org.uk
  • US: your state Attorney General, where applicable

12. Third-Party Websites

Our Site may link to third-party websites and platforms. We are not responsible for their privacy practices, so please review their policies.

13. Changes to This Policy

We may update this policy. We’ll post changes on this page with a new “Last updated” date, and email you about material changes.

Contact

Store Name: Try Sapura

Address: Zinkstraat 24, 4823 AD, Breda, Noord-Brabant, Nederland

Chamber of Commerce: 90189876

VAT: NL004795126B15

Email: info@trysapura.nl

Phone Number: +31 6 26824667