Privacy Policy

Privacy Policy

Last updated: 2 September 2026

This Privacy Policy explains how BLENDED [RITUAL] collects, uses, stores and shares your personal data when you visit www.blendedritual.com, place an order, create an account, subscribe to our services or newsletter, contact us or otherwise interact with us.

We respect your privacy and process personal data in accordance with the General Data Protection Regulation (“GDPR”) and other applicable data-protection legislation.

1. Who we are

BLENDED [RITUAL] is the controller responsible for the processing of your personal data through this website.

BLENDED [RITUAL]
Nieuwe Rijn 27 a
2312 JD Leiden
The Netherlands

Dutch Chamber of Commerce number: 75826054
VAT identification number: NL175385701B02
Email: drink@blendedritual.com
Website: https://www.blendedritual.com

If you have questions about this Privacy Policy or the way we process your personal data, please contact us using the details above.

2. Personal data we collect

The personal data we collect depends on how you use our website and services.

Information you provide to us

We may collect:

  • your first and last name;

  • your billing and shipping address;

  • your email address;

  • your telephone number;

  • your account login details;

  • your order and subscription information;

  • your communication and marketing preferences;

  • messages, questions, reviews or other information you submit to us;

  • information you provide when participating in a survey, promotion or customer-service interaction; and

  • any other personal data you voluntarily provide.

Please do not provide health information or other sensitive personal data unless we specifically request it and explain why it is needed.

Order and payment information

When you place an order, we process information about the products ordered, the order value, payment status, delivery method and transaction history.

Payments are processed by authorised payment-service providers. Depending on the payment method selected, this may include PayPal or payment providers available through Shopify. We generally do not receive or store complete debit- or credit-card details.

Information collected automatically

When you visit our website, we may automatically collect:

  • your IP address;

  • browser and device type;

  • operating system;

  • language and approximate location;

  • pages viewed and links clicked;

  • referring website;

  • date and time of access;

  • shopping-cart activity;

  • cookie identifiers; and

  • information about how you interact with our website, emails and content.

We collect this information through cookies and similar technologies, subject to your consent where required.

Information received from third parties

We may receive personal data from service providers that help us operate our store, such as payment providers, delivery companies, subscription platforms, customer-service systems, marketing platforms and analytics providers.

For example, we may receive payment confirmations, delivery updates, subscription changes or information about your interaction with our emails.

3. How we use your personal data

We may use your personal data for the following purposes.

Processing and delivering orders

We use your personal data to:

  • process and confirm your order;

  • collect and administer payments;

  • deliver products;

  • provide order and shipping updates;

  • manage returns and refunds;

  • administer subscriptions; and

  • provide customer service relating to your purchase.

The legal basis for this processing is the performance of our contract with you or taking steps at your request before entering into a contract.

Managing accounts and subscriptions

If you create an account or subscription, we use your data to administer it, process recurring orders and payments, send upcoming-order notifications and allow you to skip, reschedule, change or cancel deliveries.

The legal basis for this processing is the performance of our contract with you.

Customer service and communication

We use your contact details and messages to answer questions, resolve complaints, provide support and communicate about our products and services.

The legal basis is the performance of our contract with you, taking steps at your request or our legitimate interest in providing effective customer service.

Legal and administrative obligations

We use and retain certain personal data to:

  • comply with tax and accounting obligations;

  • keep legally required business records;

  • handle legal claims;

  • respond to lawful requests from public authorities;

  • prevent fraud, misuse and security incidents; and

  • enforce our Terms and Conditions.

The legal basis is compliance with a legal obligation or our legitimate interest in protecting our business and legal rights.

Improving our website and services

We may analyse how visitors use our website to:

  • improve its performance and usability;

  • identify and resolve technical problems;

  • understand which products and content are of interest;

  • improve our products and customer experience; and

  • measure the effectiveness of our communications.

Where information is collected using non-essential cookies or similar technologies, we rely on your consent. For other limited forms of analysis, we may rely on our legitimate interest in maintaining and improving our services.

Marketing

If you subscribe to our newsletter or otherwise provide valid consent, we may use your email address to send you:

  • product information;

  • special offers;

  • company news;

  • educational content; and

  • reminders relating to products in your shopping basket.

You can unsubscribe at any time by clicking the unsubscribe link in an email or by contacting drink@blendedritual.com.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Where permitted by law, we may send existing customers information about products similar to those they have previously purchased. You can object to this at any time.

Reviews and feedback

If you submit a review, testimonial or other feedback, we may use it to evaluate and improve our products and, with an appropriate legal basis or permission, display it on our website or marketing channels.

Please do not include information in a public review that you do not want others to see.

4. Legal bases for processing

Depending on the purpose, we process personal data on one or more of the following legal bases:

  • Contract: processing is necessary to enter into or perform a contract with you.

  • Legal obligation: processing is necessary to comply with applicable law.

  • Legitimate interests: processing is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests.

  • Consent: you have given us permission to process your personal data for a specific purpose.

Where we rely on legitimate interests, these may include operating and improving our store, providing customer service, securing our systems, preventing fraud and protecting our legal rights.

5. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files stored on your device when you visit a website.

We may use the following categories of cookies:

Strictly necessary cookies

These cookies are required for essential website functions, such as:

  • remembering the contents of your shopping basket;

  • processing checkout and payments;

  • maintaining security;

  • remembering privacy preferences; and

  • enabling account and subscription functions.

These cookies cannot generally be disabled through our consent tool because the website cannot function properly without them.

Functional cookies

These cookies enable additional functionality, such as video content, language preferences and personalised website features.

Analytics cookies

These cookies help us understand how visitors use the website, which pages are viewed and where errors occur. We use this information to improve the website and customer experience.

Marketing cookies

These cookies may be used to measure marketing campaigns, understand the effectiveness of advertisements and display more relevant advertising.

Except where permitted by law, we use non-essential cookies only after receiving your consent. You can change or withdraw your consent through the cookie settings on our website.

You can also configure your browser to refuse or delete cookies. Disabling certain cookies may affect the functionality of the website.

6. Service providers and third parties

We do not sell your personal data.

We may share personal data with service providers where this is necessary to operate our business and provide our services. These may include:

  • Shopify, which provides our e-commerce platform, hosting and checkout infrastructure;

  • payment-service providers, including PayPal where selected;

  • banks and financial-service providers;

  • delivery companies, fulfilment providers and postal services;

  • subscription-management providers;

  • Klaviyo, where used for email marketing and customer communication;

  • Gorgias, where used for customer-service management;

  • ReelUp and video-hosting providers where used to display and analyse product videos;

  • website hosting, security and technical-service providers;

  • analytics and advertising providers, subject to your consent where required;

  • review and feedback platforms;

  • professional advisers, including accountants, lawyers and insurers; and

  • public authorities where disclosure is required by law.

These third parties may process personal data only for the purposes for which it was provided and in accordance with applicable data-protection law and contractual obligations.

Some service providers may act as independent controllers for their own processing activities. Their own privacy policies will apply to those activities.

7. International data transfers

Some of our service providers may process personal data outside the European Economic Area (“EEA”).

When personal data is transferred outside the EEA, we take appropriate measures to protect it. Depending on the circumstances, these measures may include:

  • transferring data to a country recognised by the European Commission as providing an adequate level of protection;

  • using European Commission-approved Standard Contractual Clauses;

  • implementing additional contractual, technical or organisational safeguards; or

  • relying on another transfer mechanism permitted under the GDPR.

You may contact us if you would like more information about the safeguards that apply to a particular international transfer.

8. How long we retain personal data

We retain personal data only for as long as necessary for the purposes for which it was collected, including compliance with legal, accounting and reporting requirements.

In general:

  • order, invoice, payment and accounting records are normally retained for at least seven years or for the period required under applicable Dutch tax law;

  • account and subscription data is retained for as long as the account or subscription remains active and for a reasonable period afterwards;

  • customer-service correspondence may be retained for up to two years after the enquiry or complaint has been resolved, unless a longer period is required;

  • marketing data is retained until you unsubscribe, withdraw consent or successfully object to the processing;

  • limited information may be retained after an unsubscribe request to ensure that we respect your marketing preference;

  • cookie and analytics data is retained according to the period stated in our cookie settings or by the relevant service provider; and

  • information relating to disputes or legal claims may be retained until the applicable limitation period has expired.

We may retain anonymised information for statistical and analytical purposes where it can no longer be linked to an identifiable individual.

9. How we protect personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures may include:

  • encryption during data transmission;

  • access restrictions;

  • account authentication;

  • secure hosting;

  • monitoring and security controls;

  • confidentiality obligations; and

  • procedures for responding to suspected personal-data breaches.

No online system or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

10. Your privacy rights

Subject to the conditions and limitations of the GDPR, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete personal data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on our legitimate interests;

  • object at any time to the use of your personal data for direct marketing;

  • receive certain personal data in a structured, commonly used and machine-readable format;

  • request that certain personal data be transferred to another controller;

  • withdraw your consent at any time; and

  • lodge a complaint with a supervisory authority.

To exercise your rights, contact us at drink@blendedritual.com. Please clearly describe your request.

We may ask you to provide information needed to confirm your identity. We will normally respond within one month, although this period may be extended where permitted by law.

Privacy rights are not absolute. In certain circumstances, we may be legally entitled or required to refuse a request in whole or in part. If this happens, we will explain the reason where legally permitted.

11. Complaints

If you have concerns about the way we process your personal data, please contact us first so that we can try to resolve the matter.

12. Marketing preferences

You can unsubscribe from marketing emails at any time by:

Unsubscribing from marketing does not prevent us from sending transactional or service-related communications, such as order confirmations, shipping updates, subscription notifications or responses to customer-service enquiries.

13. Children’s privacy

Our website and products are not specifically directed at children under the age of 16, and we do not knowingly collect personal data directly from children under 16.

If you believe that a child has provided personal data to us without appropriate consent, please contact us so that we can investigate and, where appropriate, delete the information.

14. Automated decision-making

We do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects for you.

We may use automated tools for routine functions such as fraud prevention, website personalisation, email scheduling and marketing segmentation. These activities do not ordinarily produce legal or similarly significant effects.

15. Third-party websites

Our website may contain links to external websites, social-media platforms or services operated by third parties.

We are not responsible for the privacy practices, security or content of those third-party websites. We recommend reviewing their privacy policies before providing personal data.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, service providers or legal obligations.

The latest version will always be available on this page. The date at the top of the policy indicates when it was last updated.

Material changes may also be communicated through the website or by email where appropriate.

17. Contact us

If you have questions about this Privacy Policy, wish to exercise your privacy rights or have a complaint about the processing of your personal data, contact:

BLENDED [RITUAL]
Nieuwe Rijn 27 a
2312 JD Leiden
The Netherlands

Dutch Chamber of Commerce number: 75826054
VAT identification number: NL175385701B02
Email: drink@blendedritual.com
Website: https://www.blendedritual.com