Last updated: 30/January/2026
1. Who we are
This website is operated by Gomez Consulting & E-Commerce, KVK 99017768, trading as High Level Essentials.
Registered in The Netherlands.
Contact: info@highlevelessentials.com
For GDPR purposes, we are the Data Controller.
2. What personal data we collect
We may collect and process the following data:
a) Information you provide
- Name
- Email address
- Billing and shipping address
- Phone number
- Payment details (processed by third-party providers, not stored by us)
- Account login information
- Messages sent via contact forms
b) Automatically collected data
- IP address
- Browser type and device information
- Pages visited and usage behavior
- Cookies and similar technologies
3. Why we collect your data (legal basis)
Under GDPR, we process personal data based on the following legal grounds:
- Contractual necessity – to process orders, payments, and deliveries
- Legal obligation – accounting and tax compliance
- Legitimate interest – website security, analytics, service improvement
- Consent – marketing emails, non-essential cookies
You may withdraw consent at any time.
4. How we use your data
We use your data to:
- Process and fulfill orders
- Manage customer accounts
- Communicate about orders, refunds, or support
- Improve website performance and user experience
- Send marketing emails (only if you opted in)
- Prevent fraud and abuse
5. Payments
Payments are processed securely by third-party providers such as [Stripe / PayPal / Mollie / etc.].
We do not store your full payment details.
These providers act as independent data controllers and comply with GDPR.
6. Cookies
We use cookies to:
- Enable core site functionality
- Remember preferences
- Analyze website traffic
- Support marketing
You can manage or withdraw cookie consent via the cookie banner or browser settings.
7. Third-party services
We may share necessary data with:
- Hosting providers
- Payment processors
- Email marketing tools
- Analytics services (e.g. Google Analytics)
All third parties are required to process data in compliance with GDPR.
8. Data retention
We retain personal data only as long as necessary:
- Order and billing data: as required by law
- Account data: until account deletion
- Marketing data: until consent is withdrawn
9. Your rights under GDPR
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a Data Protection Authority
Requests can be sent to: info@highlevelessential.com
10. Data security
We take appropriate technical and organizational measures to protect your data, including:
- SSL encryption
- Secure hosting
- Access controls
- Regular updates
11. International data transfers
If data is transferred outside the EU, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs).
12. Changes to this policy
We may update this policy from time to time.
The latest version will always be available on this page.
13. Contact
If you have questions about this Privacy Policy or how your data is handled, contact:
info@highlevelessentials.com
