Privacy Policy

1. Who we are

Nose and Partners is a fragrance design and private-label studio based in Rotterdam, the Netherlands. For the purposes of GDPR, Nose and Partners is the data controller for the personal data described in this policy. You can reach us at info@noseandpartners.com or +31 (0)10 20 80 777.

2. What data we collect

We collect personal data in three situations:

• When you contact us, name, email address, company, phone number and the content of your message.
• When you subscribe to our newsletter, email address and (optionally) name.
• When you request samples, place an order or work with us on a project, billing and shipping address, company details, VAT number and order history.

We also collect limited technical data when you visit our website (IP address, browser type, pages viewed) for security and analytics. See our Cookie Policy for details.

3. Why we process your data (lawful basis)

• Contract, to handle your sample requests, orders and ongoing project work.
• Legitimate interest, to respond to enquiries, manage our client relationships and improve our services.
• Consent, for newsletter sign-ups and non-essential cookies.
• Legal obligation, to comply with tax, customs and product-safety law.

4. How long we keep your data

Enquiries and CRM records are kept for the duration of our relationship and up to seven years after the last interaction for legal and accounting purposes. Newsletter subscribers are kept until they unsubscribe. Order and invoice data is kept for the period required by Dutch tax law (currently seven years).

5. Who we share data with

We do not sell personal data. We share it only with the processors required to deliver our services:

• Hosting, email and CRM providers (under data-processing agreements).
• Payment processors and banks for order handling.
• Logistics partners for sample and order shipments.
• Regulatory partners where required for product-safety dossiers.
• Public authorities where legally compelled.

Where data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Request erasure of your data (subject to legal retention obligations).
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time for activities based on consent.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any of these rights, email info@noseandpartners.com.

7. Security

We protect personal data with appropriate technical and organisational measures, including encrypted transport (TLS), access controls and supplier vetting. No system is completely secure; if we ever detect a personal-data breach, we notify the relevant authority and affected users in line with GDPR.

8. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page; material changes are announced in our newsletter or via direct communication.