Legal
Privacy Policy
Last updated: 20 August 2026
Transparency is the point of DRUP, so this page explains in plain language what personal data we handle and why.
The controller for this data is DRUP Foods, Tuinlaan 5C, 6703 HE Wageningen, Netherlands. You can reach us at lennart@justdrup.com.
01What we collect
- Order data: your name, email address, shipping and billing address, order contents and payment status. This is needed to sell and ship a bottle to you.
- Reviews: the name and review text you choose to submit, plus the time of submission.
- Questionnaire answers: the multiple-choice answers you give. These are used in aggregate to shape Batch 002.
- Emails you send us, so we can reply.
- Basic technical data your browser sends when loading the site, such as IP address and browser type, used to serve the site and keep it secure.
02Why we use it (lawful basis)
- Performance of a contract: processing and shipping your order, and handling returns.
- Consent: submitting a review or the questionnaire is voluntary, and you can ask us to remove your submission at any time.
- Legal obligation: we keep invoices and order records for as long as Dutch tax law requires.
- Legitimate interest: keeping the website working, preventing abuse and spam.
03Who we share it with
We do not sell your data. We share it only with the service providers we need to run the shop:
- Shopify, which hosts our checkout and processes orders and payments.
- Our hosting and database provider, which stores reviews and questionnaire answers and serves this website.
- The carrier that delivers your parcel, which receives your name and address.
04How long we keep it
Order and invoice records are kept for the retention period required by Dutch tax law. Reviews stay published until you ask us to remove them. Questionnaire answers are kept while they are still useful for developing the next batch, and then deleted or anonymised.
05Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. You can also withdraw a consent you previously gave.
Email us and we will handle your request. If you are not satisfied, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority where you live.
06Cookies
Our cookie use is described separately on the cookie policy page.