Privacy Policy

Last updated: 2026-05-04 Effective: 2026-05-04

This Privacy Policy explains how bestsupplements4u (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit bestsupplements4u.com (the “Site”). It applies to everyone who uses the Site, anywhere in the world.

We’ve tried to write this in plain English. If anything is unclear, email us at [email protected] and we’ll explain.

1. Who is responsible for your data

The data controller is:

Douwesinstallatiebedrijf
Griftdijk Noord 41, 6663AA Lent, Netherlands
Chamber of Commerce (KvK) number: 80220576
Email: [email protected]

We are based in the Netherlands. Our supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). You can reach them at autoriteitpersoonsgegevens.nl.

2. What we collect

We collect the minimum we need to run the Site. There are three categories.

Information you give us. If you sign up for our newsletter, you give us your email address (and, optionally, a first name). If you contact us, we receive whatever you write in your message.

Information collected automatically. When you visit the Site, our analytics tool ([ANALYTICS_TOOL]) records standard technical data: IP address (anonymised where the tool supports it), browser type and version, device type, operating system, the pages you view, the order you view them in, the referring URL, and the approximate location derived from your IP (country / region level only).

Information from cookies and similar technologies. See section 6 below for the full list and what each cookie does.

We do not collect health data, payment data, or government IDs. We do not sell supplements directly — clicking an affiliate link takes you to a third-party retailer who handles their own checkout.

3. Why we use your data and the legal basis

Under the GDPR we need a “legal basis” for everything we do with your data. Here is what we do and why:

To deliver the Site you asked for — legitimate interest. Without basic logging and analytics we can’t keep the Site running, secure, or useful.
To send you the newsletter you signed up for — your consent. You can withdraw this at any time using the unsubscribe link in every email or by emailing [CONTACT_EMAIL].
To track which articles and product comparisons people read — legitimate interest, balanced against your privacy by using aggregated, pseudonymous analytics.
To pay our affiliate partners (or rather, to be paid by them) — legitimate interest. Affiliate networks set cookies on your device to attribute referrals; this is how the Site is funded. See section 6.
To respond to your emails — legitimate interest in answering questions.
To comply with legal obligations — for example, responding to a valid court order.

We do not use your personal data for automated decision-making or profiling.

4. Who we share data with

We don’t sell your personal data. We share it only with the parties below, only when needed.

[ANALYTICS_TOOL] — page-view analytics.
[EMAIL_PROVIDER] — newsletter delivery.
Hosting provider — runs the servers that serve the Site to you.
Affiliate networks — when you click an outbound product link, you’re handed off to one of: Awin, Tradedoubler, Daisycon, Impact, ShareASale, Refersion, Skimlinks, Amazon Associates, or a brand’s direct affiliate program. Each network sets its own cookies and operates under its own privacy policy. We pass them no personal data; they see only the click and any data they collect themselves.
Authorities, where we are legally required to.

We use processors who are themselves GDPR-compliant. Where data is transferred outside the EEA (for example, to a US-based affiliate network), the transfer is covered by Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

We keep data only as long as we need it.

Newsletter subscribers — until you unsubscribe, then we delete your email within 30 days (we may keep a hashed record of unsubscribes to make sure we don’t mail you again by accident).
Analytics data — up to 26 months, then aggregated or deleted.
Email correspondence — up to 3 years after our last exchange, then deleted.
Server logs — up to 30 days for security and debugging.
Affiliate cookies — set by the affiliate network; their lifespan varies (typically 24 hours to 90 days). The network controls this, not us.

6. Cookies and tracking

A cookie is a small text file a website stores on your device. We use them sparingly.

Strictly necessary — keep the Site working, remember your cookie preferences. These don’t need consent.

Analytics — [ANALYTICS_TOOL] uses cookies (or cookie-less fingerprinting, depending on the tool) to count visits and see which pages people read. We ask for your consent before loading these.

Affiliate / referral — when you click an outbound product link, the destination retailer or affiliate network may set a cookie that identifies us as the referrer if you later make a purchase. The networks involved are Awin, Tradedoubler, Daisycon, Impact, ShareASale, Refersion, Skimlinks, Amazon Associates, and direct programs run by individual supplement brands. These cookies are placed on the destination site, not ours, but you should know they exist. They contain no personal data — only an opaque referral ID.

You can manage cookies through the cookie banner on your first visit, or through your browser settings. Blocking analytics or affiliate cookies will not break the Site for you, but it will make it harder for us to attribute referrals — which is how we fund free content.

7. Your rights

If you are in the EU/EEA, UK, or Switzerland, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Erase your data (“right to be forgotten”).
Restrict how we process it.
Port your data to another provider.
Object to processing based on legitimate interest.
Withdraw consent at any time, where consent is the basis.
Lodge a complaint with the Autoriteit Persoonsgegevens or your local data protection authority.

If you are a California resident, the CCPA / CPRA gives you parallel rights: to know what we collect, to delete it, to correct it, to opt out of “sale” or “sharing” (we do not sell or share personal data in the CCPA sense), and to non-discrimination for exercising any of these rights.

To exercise any of these rights, email [CONTACT_EMAIL] from the address you signed up with. We respond within 30 days (extendable to 90 if your request is complex). We may need to verify your identity before acting on a deletion or access request.

8. Children

The Site is intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, email [CONTACT_EMAIL] and we will delete it.

This is especially relevant for a supplements site: many products on the market are unsuitable for minors, and we do not want minors signing up for our newsletter or making purchasing decisions based on our content without adult supervision.

9. Security

We protect your data with HTTPS everywhere, hashed storage of newsletter addresses, regular software updates, and access controls on our admin tools. No system is perfectly secure; if a breach affects you, we will notify you and the Autoriteit Persoonsgegevens within 72 hours of becoming aware, as required by the GDPR.

10. Changes to this policy

We update this policy when our practices change. The “Last updated” date at the top reflects the current version. Material changes will be announced on the homepage and, if you’re a newsletter subscriber, by email. Your continued use of the Site after a change means you accept the new policy.

11. Contact

For privacy questions, complaints, or rights requests:

Email: [email protected]
Postal mail: Douwesinstallatiebedrijf, Griftdijk Noord 41, 6663AA Lent, Netherlands

We aim to reply within 5 working days.