Privacy and cookies
IntiemComfort privacy policy
IntiemComfort places great importance on privacy, confidentiality and the careful handling of personal data. This privacy policy explains which personal data we process, why we do so, the legal bases for processing, the parties with whom data may be shared, how long data is retained and the rights of data subjects.
This privacy policy applies to use of the website, creating an account, placing and fulfilling orders, payments, shipments, returns, complaints, customer service, newsletters, reviews, cookies, advertisements and other communication with IntiemComfort.
Article 1 – Data controller
The controller responsible for processing personal data through IntiemComfort is:
Kiljano
Trading as IntiemComfort
Geurdeland 17G
6673 DR Andelst
Netherlands
Chamber of Commerce: 94019525
VAT identification number: NL005060594B10
Email: info@intiemcomfort.nl
WhatsApp: +31 6 82574808
For questions about privacy, personal data, access, correction, deletion or other privacy rights, you can contact us in writing at info@intiemcomfort.nl.
Article 2 – Applicable law
Kiljano processes personal data in accordance with the General Data Protection Regulation, the Dutch GDPR Implementation Act, the applicable rules on electronic communications and cookies, and other relevant Dutch and European legislation.
Article 3 – Which personal data do we process?
Depending on how someone uses the website, we may process the following data, among other things:
- first and last name;
- company name and business details;
- billing and delivery addresses;
- postcode, town or city and country;
- email address;
- telephone and WhatsApp numbers;
- account details and encrypted login credentials;
- order number and order history;
- products purchased, quantities, prices and discounts;
- invoices, credit slips and payment statuses;
- chosen payment method;
- shipping method, tracking number and delivery status;
- return, withdrawal and complaint details;
- communications with customer service;
- reviews, ratings and other content posted by the customer;
- wishlists, basket details and account preferences;
- IP address;
- device, browser, language and operating-system information;
- cookie identifiers and online identifiers;
- pages visited, click behaviour and duration of use;
- referring website or advertisement;
- technical logs and security data;
- data needed for fraud prevention and payment checks.
Article 4 – Confidentiality of orders and intimate preferences
Order details at IntiemComfort may contain information about personal and intimate preferences. We therefore treat these details with heightened care and confidentiality.
IntiemComfort does not ask customers for information about their sexual orientation, sexual behaviour, medical diagnosis or health, unless a customer voluntarily provides such information in connection with a specific question or complaint.
We do not use the contents of an order to draw conclusions about a customer's sexual orientation, health or personal identity.
Detailed information about intimate purchases is not used for personalised advertising or shared with third parties for their own independent marketing purposes without a valid legal basis.
Customers are asked not to send unnecessary medical details, identity documents or photographs of intimate body parts by email, contact form or WhatsApp. If additional information is necessary to handle a complaint, IntiemComfort will explain the minimum information required.
Article 5 – How do we obtain personal data?
We obtain personal data, among other ways:
- directly from the customer when ordering;
- when an account is created or used;
- through a contact form, email or WhatsApp;
- when a return, withdrawal or complaint is reported;
- from payment providers following a payment or payment check;
- from warehouses and carriers about order fulfilment;
- through cookies and similar technologies;
- through advertising, analytics and security services;
- through review platforms and other external services used by the customer.
Article 6 – Purposes and legal bases
We process personal data only where there is a valid legal basis.
Performance of the contract
Data is processed to:
- register an order;
- process a payment;
- prepare an invoice;
- pick, pack and dispatch products;
- provide tracking information;
- process a return or refund;
- handle a complaint or guarantee claim;
- manage a customer account and wishlist;
- communicate with the customer about the order.
Legal obligation
We process and retain data where necessary for matters including:
- tax and accounting obligations;
- invoicing and VAT records;
- consumer-law obligations;
- product safety and recalls;
- responding to requests from competent authorities;
- compliance with statutory retention requirements.
Legitimate interest
We may process data for legitimate interests, including:
- prevention of fraud, misuse and chargebacks;
- security of accounts, payments and the website;
- preventing fraudulent orders;
- investigating technical errors;
- improving customer service and business processes;
- protecting and substantiating legal claims;
- sending a service or review request after a purchase;
- internal statistics that do not unnecessarily intrude on privacy.
Consent
Where consent is legally required, we request it for matters including:
- sending newsletters;
- marketing communications;
- tracking and advertising cookies;
- personalised advertisements;
- loading certain external media;
- processing voluntarily provided special-category personal data where explicit consent is necessary.
Consent can be withdrawn at any time. Withdrawal does not retrospectively affect processing carried out lawfully before consent was withdrawn.
Article 7 – Orders and invoicing
To process an order, we need details such as name, address, contact information, products ordered, payment status and shipping choice.
Customers are responsible for entering delivery, business and billing details correctly. These details are used to perform the contract, issue invoices, keep accounts, provide customer service and maintain statutory records.
IntiemComfort processes orders placed with an account or as a guest.
Article 8 – Customer account and wishlist
When an account is created, we process the information needed to manage it. Within the account, customers can view personal details, addresses, orders, credit slips, notifications and wishlists, among other things.
Passwords are not stored as readable text. Customers are responsible for keeping their login details confidential.
If misuse or unauthorised access is suspected, IntiemComfort may temporarily block an account and request additional verification.
Article 9 – Payments and payment service providers
Payments may be processed by providers including Mollie and PayPal, and through payment methods offered by these or other payment modules.
Depending on the country and order, available methods may include iDEAL, Bancontact, PayPal, credit and debit cards, Apple Pay, Google Pay, Klarna, in3, Billie, BLIK, Przelewy24, KBC/CBC Payment Button, Belfius Direct Net, EPS, Pay by Bank, Satispay and Multibanco.
IntiemComfort generally does not receive full card details. Sensitive payment information is processed directly by the payment service provider concerned.
Payment service providers may process data for:
- carrying out the payment;
- identity and address checks;
- fraud prevention;
- creditworthiness assessment;
- compliance with financial legislation;
- handling chargebacks and payment disputes.
A payment service provider may act as an independent data controller for certain processing activities. In that case, its own privacy policy also applies.
Article 10 – Automated checks and decision-making
Payment service providers such as Klarna, in3, Billie, PayPal, Mollie or card issuers may carry out automated fraud, risk or credit checks.
These external service providers may independently decide not to make a payment method available or to reject a payment.
Kiljano generally does not make solely automated decisions that have significant legal consequences for a customer without human intervention.
If Kiljano uses automated indicators for fraud prevention, an employee may review an order where there is doubt.
Article 11 – Warehouses, fulfilment and suppliers
To fulfil orders, necessary details may be shared with warehouses, fulfilment partners, suppliers and parties that pick, pack, inspect or process products.
These parties receive only data that is reasonably needed, such as:
- name and delivery address;
- contact details where necessary for delivery;
- order number;
- products and quantities;
- shipping method;
- return or complaint information.
An order may be processed from different available warehouses. Data is not shared with a warehouse uninvolved in fulfilling the order unless necessary for return processing, stock checks or a complaint.
Article 12 – Carriers and delivery
For delivery, data may be shared with DPD, UPS, DHL, Correos Express and other available logistics partners, among others.
Carriers may use name, address, email address and telephone number for:
- creating a shipping label;
- delivering the shipment;
- sending tracking information;
- offering delivery options;
- contacting customers about delivery problems;
- investigating a missing or damaged shipment.
A carrier may be independently responsible for certain personal data used in its own logistics processes.
Article 13 – Customer service, email and WhatsApp
When someone contacts us, we process the contact details provided and the contents of the communication to answer the question, record agreements and provide the service.
WhatsApp customer service is offered through WhatsApp Business, a service that is part of Meta. When WhatsApp is used, WhatsApp and Meta may process the telephone number, profile information, metadata and message contents, among other things, under their own terms.
Using WhatsApp is voluntary. For communications involving sensitive personal information, customers can also use info@intiemcomfort.nl.
IntiemComfort asks customers always to quote the order number in messages, but not to include unnecessary copies of identity documents or payment cards, or highly sensitive medical information.
Article 14 – Newsletter
The newsletter is managed through PrestaShop's newsletter and customer functionality.
We use an email address for newsletters only where consent has been given or another valid legal basis applies.
The newsletter may contain information about:
- new products;
- adult wellness and intimate care;
- offers and promotions;
- news about IntiemComfort;
- personal lifestyle and inspiration for adults.
Every newsletter includes an unsubscribe option. You can also unsubscribe via info@intiemcomfort.nl.
Withdrawing consent does not affect necessary service messages about an existing order, payment, return or complaint.
Article 15 – Reviews and Trustpilot
After an order, IntiemComfort may invite the customer to leave a review.
To send or verify an invitation, necessary details such as name, email address, order number and purchase date may be shared with Trustpilot or another review service used.
A review may be publicly visible under the name chosen by the customer. Customers should avoid including personal data, medical information or other sensitive information they do not wish to make public.
Review platforms may act as independent data controllers for their own services.
Article 16 – Website analytics
IntiemComfort may use Google Analytics 4 and Microsoft Clarity to understand how the website functions and is used.
Depending on cookie preferences, data may be processed about:
- pages visited;
- click and navigation behaviour;
- device and browser;
- approximate location;
- duration of the visit;
- technical errors;
- interaction with page elements.
Where possible, analytics data is minimised, aggregated or pseudonymised.
Non-essential analytics or tracking technologies are activated only after valid consent has been given, insofar as legally required.
Article 17 – Online advertising and marketing pixels
IntiemComfort may use:
- Google Ads;
- Meta Pixel;
- TikTok Pixel;
- Microsoft advertising services;
- other similar advertising and measurement services.
These technologies may be used to:
- measure advertising performance;
- prevent advertisements being shown unnecessarily often;
- create audiences;
- show visitors relevant advertisements with their consent;
- analyse conversions and technical errors.
Marketing and tracking technologies are placed or activated only after the visitor has consented, unless a specific technology is legally permitted without consent.
Consent can be withdrawn at any time through the website's cookie settings.
Article 18 – Google reCAPTCHA
IntiemComfort may use Google reCAPTCHA to protect forms, accounts and the website against spam, bots and automated misuse.
For this purpose, Google may process technical data such as IP address, device characteristics, mouse movements, usage behaviour and other security signals.
Use of reCAPTCHA is based on IntiemComfort's legitimate interest in protecting the website and customers against misuse, insofar as permitted by law.
Article 19 – Google Maps and YouTube
The website may include features or content from Google Maps and YouTube.
When this external content is loaded or used, Google and YouTube may process technical data, cookie data and information about the website visit.
Non-essential external content that enables tracking is loaded only after consent has been given, where legally required.
Article 20 – Cookies and similar technologies
IntiemComfort uses cookies and similar technologies for:
- operation of the basket;
- remembering a session or language choice;
- account security;
- fraud prevention;
- website analytics;
- personalisation;
- advertising measurement and marketing.
Functional and strictly necessary cookies may be placed without consent where necessary for the website's operation or security.
Prior consent is requested for tracking, advertising and other non-essential cookies.
Further information about cookie types, providers, purposes and retention periods is available in IntiemComfort's separate cookie policy.
Article 21 – Age verification
IntiemComfort is intended exclusively for people aged 18 and over.
As standard, we ask visitors or customers to confirm they are 18 or older. We do not routinely collect a date of birth or a copy of an identity document.
If there is reasonable doubt about age, we may request additional verification. We process no more information than necessary.
If an identity document is exceptionally necessary, the customer may be asked to conceal irrelevant details such as the photograph and document number where these are not needed for verification.
Verification details are deleted once no longer necessary, unless a legal obligation or legitimate legal reason requires longer retention.
Article 22 – With whom do we share personal data?
We may share personal data with:
- PrestaShop and technical module providers;
- Hostinger and other hosting or infrastructure providers;
- payment service providers such as Mollie and PayPal;
- providers of specific payment methods;
- warehouses, fulfilment partners and suppliers;
- carriers such as DPD, UPS, DHL and Correos Express;
- Google, Meta, Microsoft and TikTok for permitted analytics and marketing services;
- WhatsApp Business and Meta;
- Trustpilot and other review services;
- IT, security, administration and customer service providers;
- accountants, lawyers, insurers and professional advisers;
- government bodies, regulators and law enforcement agencies where legally required or necessary.
We do not sell or rent personal data to third parties as a standalone commercial product.
Where necessary, appropriate agreements are made with processors on security, confidentiality, purposes and retention periods.
Article 23 – Transfers outside the European Economic Area
Some service providers, including certain companies within Google, Meta, Microsoft, TikTok, PayPal and Trustpilot, may process data or make it accessible outside the European Economic Area.
Transfers outside the European Economic Area take place only where a legally permitted basis and appropriate safeguards exist.
These may include:
- an adequacy decision by the European Commission;
- the EU–US Data Privacy Framework, where applicable;
- standard contractual clauses approved by the European Commission;
- additional technical and organisational safeguards;
- another legally recognised transfer mechanism.
Article 24 – Retention periods
Personal data is retained no longer than necessary for the purpose for which it was collected, unless a statutory retention obligation, ongoing dispute, fraud investigation or other legitimate reason requires longer retention.
We generally apply the following retention periods or criteria:
- orders, invoices and financial records: at least 7 years insofar as required by tax retention obligations;
- records under the Union scheme or another OSS scheme: up to 10 years where this longer statutory retention obligation applies;
- account details: while the account remains active or until deletion is requested, except for data we must retain by law;
- contact and customer service details: generally up to 2 years after the question or complaint has been closed;
- guarantee and complaint files: for as long as necessary to resolve the matter and substantiate statutory rights;
- newsletter details: until consent is withdrawn or the subscription ends;
- reviews: for as long as the review is published and for a reasonable period afterwards for evidence and misuse prevention;
- security and technical logs: generally no longer than 12 months, unless longer retention is needed to investigate an incident;
- fraud and misuse data: for as long as necessary and proportionate for fraud prevention, legal proceedings or protection against repeated misuse;
- cookie data: according to the retention periods stated in the cookie policy or cookie settings.
When data is no longer needed, it is deleted, anonymised or removed from normal operational use.
Article 25 – Security
Kiljano takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised alteration and disclosure.
These measures may include:
- encrypted connections;
- restricted access to personal data;
- individual accounts and access security;
- secure hosting and backups;
- software and security updates;
- logging and monitoring suspicious activity;
- fraud and misuse prevention;
- confidentiality agreements with the parties involved;
- periodic reviews of access rights.
No system can guarantee absolute security. IntiemComfort therefore reviews security measures periodically and adjusts them where reasonably necessary.
Article 26 – Data breaches
If a security incident involving personal data occurs, Kiljano investigates it and takes appropriate measures to limit its consequences.
Where required by law, the data breach is reported to the Dutch Data Protection Authority and the people affected are informed.
Article 27 – Privacy rights
Where the legal conditions are met, a data subject may exercise the following rights:
- the right to information;
- the right of access;
- the right to correct inaccurate data;
- the right to erasure;
- the right to restriction of processing;
- the right to data portability;
- the right to object;
- the right to withdraw consent;
- the right to human review of certain automated decisions;
- the right to lodge a complaint with a supervisory authority.
A request can be sent to info@intiemcomfort.nl.
Clearly state which right your request concerns and which data or processing it relates to.
IntiemComfort generally responds within one month. For a complex request or a large number of simultaneous requests, this period may legally be extended by up to two months. The data subject will be informed in good time.
Article 28 – Identity verification
To prevent personal data being disclosed to the wrong person, IntiemComfort may request reasonable additional information to establish the requester's identity.
We request no more information than necessary. A complete, unredacted copy of an identity document is requested only where a less intrusive verification method is insufficient.
Article 29 – Limits to privacy rights
A request for erasure does not mean that all data can be deleted immediately.
We may retain data where necessary for:
- statutory tax or administrative obligations;
- performing or substantiating a contract;
- an ongoing complaint or guarantee procedure;
- fraud or security checks;
- establishing, exercising or defending a legal claim;
- other legally permitted interests.
Where complete erasure is not possible, data may be restricted or protected against other uses.
Article 30 – Objection to direct marketing
Everyone has the right to object at any time to the use of personal data for direct marketing.
Following a valid objection, the data is no longer used for direct marketing. Necessary service messages about orders, payments, returns, safety or complaints may still be sent.
Article 31 – Complaint to the supervisory authority
If someone believes Kiljano is processing personal data incorrectly, we ask them to contact info@intiemcomfort.nl first so we can investigate the matter.
There is also a right to lodge a complaint with the Dutch Data Protection Authority or the competent privacy regulator in the country of residence.
Article 32 – Minors
IntiemComfort is not intended for minors. We do not knowingly collect personal data from people under 18 for placing orders.
If we establish that a minor has provided personal data or placed an order without valid consent, we may block the account and order and delete the data insofar as no statutory retention obligation applies.
Article 33 – Links to external websites
The website may contain links to websites of carriers, payment service providers, manufacturers, review platforms or other third parties.
IntiemComfort is not responsible for the privacy policy or security of an external website. We advise users to read the privacy policy of the external party concerned.
Article 34 – Changes to this privacy policy
Kiljano may amend this privacy policy where necessary due to changes in legislation, systems, services, suppliers, payment methods, cookies or business processes.
The latest version is published on the website. For material changes, we may also inform customers where reasonably necessary or legally required.
Article 35 – Contact
For questions, requests or complaints about privacy and personal data, you can contact:
Kiljano / IntiemComfort
Geurdeland 17G
6673 DR Andelst
Netherlands
Email: info@intiemcomfort.nl
WhatsApp: +31 6 82574808
For questions about a specific order, always quote the order number. Do not send unnecessary copies of payment cards, identity documents, medical records or other sensitive information.
Last updated: 21 July 2026