This policy explains what personal data we handle on bioshelf.co, why, and what your rights are. It covers this website and the early-access form. The Bioshelf app for Shopify merchants will get its own section before it launches on the Shopify App Store.
Who is responsible
Joanis Innovative Ventures B.V., 1015 XW Amsterdam, Netherlands (Chamber of Commerce number 93438540), is the controller of the personal data described here. Questions about your data go to hello@bioshelf.co.
What we collect, and why
The early-access form
When you use the form on our home page, we receive:
- your email address;
- your Shopify store address, if you give it;
- the button you pressed (early access or design partner) and the language of the page.
We use this only to reply to you about early access or the design-partner programme, because you asked us to (article 6(1)(b) of the GDPR). We don't add you to a mailing list or send you a newsletter.
The form is delivered to our inbox by Web3Forms, a form delivery service. Its FAQ says it doesn't store form submissions, that its server logs may contain personal data and are deleted about every two months, that its servers are in the United States, and that it is run by Web3Creative, a business based in India.
We keep form emails for as long as we are in touch with you, and delete them at the latest 12 months after our last exchange, unless you become a customer or design partner.
Emails you send us
If you email hello@bioshelf.co, we receive your email address and what you write. We use it to answer you (article 6(1)(b) or (f) of the GDPR, depending on your request) and keep it under the same 12-month rule. Our email is received and forwarded by Cloudflare's email routing to the mailbox we read.
Visiting the website
To deliver the website and protect it from abuse, our hosting provider Render (Frankfurt region, Germany) and our network provider Cloudflare process technical data such as your IP address, browser type and the pages you request. This is based on our legitimate interest in running a secure website (article 6(1)(f) of the GDPR). These providers keep such logs for their own limited periods.
Cookies and tracking
This website sets no cookies. It uses no analytics, no advertising pixels and no tracking scripts. Our fonts are served from our own website, so viewing a page doesn't send your data to a font provider.
Who we share data with
Only the service providers named above, who process it to provide their service: Web3Forms (the form), Render (hosting), and Cloudflare (network and email routing). We don't sell your data and we don't share it with anyone else, unless the law requires it.
Transfers outside the European Economic Area
Some of these providers are based, or process data, outside the European Economic Area: Web3Forms has its servers in the United States and its business in India, and Render and Cloudflare are US companies. Where data leaves the EEA, it is protected by the safeguards these providers offer, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, where available. You can ask us for details.
Your rights
Under the GDPR you can ask us to access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. Email hello@bioshelf.co and we'll reply within one month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live, such as the CNIL in France.
Changes
If we change this policy, we'll update it here and change the date at the top.