🛡️ Privacy Policy – X-treme Smile

Last updated: November 2025

Who we are

X-treme Smile (hereinafter: “X-treme Smile”), located at Albert Einsteinweg 4, 8501 XE Joure, is responsible for the processing of personal data as described in this privacy policy.

Contact details
🌐 https://www.xtremesmile.nl
📧 info@xtremesmile.nl
📞 0513-333666
📍 Albert Einsteinweg 4, 8501 XE Joure

Our privacy contact person can be reached via info@xtremesmile.nl.

What personal data we process

We process personal data that you provide to us or that arise when using our services, including:

• -  First and last name
• -  Address, postal code and city
• -  Phone number and email address
• -  Order and payment details (via our payment providers)
• -  Account and login details
• -  IP address, browser and device data
• -  Browsing and click behaviour on our website
• -  Communication via email, WhatsApp or phone

We do not process special categories of personal data such as medical information.

Purposes and legal grounds

We process your data only for clear and legitimate purposes:

You can withdraw your consent at any time via the unsubscribe link in our emails or through the cookie settings on our website.

Retention periods

We do not keep your personal data longer than necessary:

• -  Customer and order data: 7 years (fiscal retention requirement)
• -  Account data: as long as your account is active; then max 3 months
• -  Newsletter and marketing data: until you unsubscribe or 24 months after last interaction
• -  Cookies: according to the periods stated in the cookie policy

Sharing personal data

X-treme Smile does not sell your data to third parties. We only share your data when necessary for our services or to comply with legal obligations.

We work with the following processors and partners:

Webshop & Hosting

• -  Prestashop (shop software)
• -  Oxxa.com (web hosting and server security)

Payment providers

• -  Mollie
• -  Pay.nl
• -  PayPal

Shipping & Logistics

• -  PostNL
• -  DHL
• -  DPD

Email & Marketing

• -  Mailchimp (Intuit Mailchimp)
• -  Omnisend

Accounting & Administration

• -  Brincr
• -  SnelStart

Analytics & Advertising

• -  Google Analytics 4
• -  Google Tag Manager
• -  Google Ads / Performance Max
• -  Meta (Facebook & Instagram Ads/Pixels)

Reviews

• -  WebwinkelKeur
• -  Google Reviews

With all of the above parties, data processing agreements have been concluded that comply with the Dutch GDPR (AVG).

International data transfer

Some partners (such as Google, Meta, Mailchimp) are located outside the EEA. We use the European Commission’s approved Standard Contractual Clauses (SCCs) and additional security measures to protect your data.

Your rights

You have the right to:

• -  access your personal data;
• -  have incorrect data corrected;
• -  request deletion of your data;
• -  object to processing;
• -  request restriction or portability of your data;
• -  withdraw your consent.

Send your request to info@xtremesmile.nl.
We will respond within one month. You can also file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) via autoriteitpersoonsgegevens.nl.

Security of personal data

We take the protection of your data seriously and have implemented appropriate measures, such as:

• -  SSL/TLS encryption (https)
• -  strict access controls and password policies
• -  secure hosting by Oxxa.com
• -  secure connections with processors (API, SFTP, SSL)
• -  regular updates and monitoring

If you suspect misuse, please report it via info@xtremesmile.nl.

🍪 Cookie Policy

What are cookies?

Cookies are small text files placed on your device to ensure our website functions properly, measure usage, and tailor advertisements to your preferences.

When you first visit our website, we display a cookie banner allowing you to set your preferences.
You can later change your choice via the link “Cookie settings” at the bottom of each page.

Types of cookies we use

Third-party cookies

Cookies may also be placed by third parties through our website, such as:

• -  Google LLC (Analytics, Ads, Tag Manager)
• -  Meta Platforms Ireland Ltd. (Facebook & Instagram Pixel)
• -  Mailchimp / Omnisend (newsletter statistics)

These parties may process data outside the EEA under the SCCs and their own privacy policies.
More information:

• -  Google Privacy Policy
• -  Meta Privacy Policy
• -  Mailchimp Privacy Policy

Managing or deleting cookies

You can delete or block cookies via your browser settings.
See www.veiliginternetten.nl for more information.
Note: Some website functions may not work properly without cookies.

📆 Opening Hours & Holidays

🕓 Monday to Thursday: 10:00 – 17:00
📞 Friday: available by phone from 10:00 – 13:00
😎 Weekend: closed
🎉 Public Holidays: We are closed on Dutch public holidays – we take a day to recharge as well!
☀️ Summer / Christmas / New Year period: adjusted opening hours (see newsletter or this page).

🔚 Changes to this policy

We may update this privacy and cookie policy from time to time.
The most recent version will always be available on this page. In case of significant changes, we will inform you by email or through our newsletter.

✅ Summary for Cookie Banner (short)

Categories

• – Functional – Always active
• – Analytical – Only with consent
• – Marketing – Only with consent

Buttons

• – “Accept all”
• – “Functional only”
• – “Save preferences”