Privacy Policy
1. Introduction
This Privacy Policy explains how Supps by Science BV (“we”, “us”, “our”), operator of the Oraguard website and webshop, collects, uses, and protects your personal data when you visit our website, create an account, place an order, or otherwise interact with us, including through our dental professional (B2B) ordering portal.
By using our website you agree to the collection and use of information as described in this policy. This policy is issued in accordance with the EU General Data Protection Regulation (GDPR) and applicable Belgian data protection law.
2. Data Controller
The data controller responsible for the processing of your personal data is:
Supps by Science BV Mechelse steenweg 5 2220 Heist op den Berg Belgium Company number: BE1000.464.136 Email: support@oraguard.com
3. What Personal Data We Collect
We collect the following categories of personal data:
- Account and order data: name, email address, phone number, billing and shipping address, order history, and payment status (payment card details are processed directly by our payment provider and are not stored by us).
- Professional/B2B data: for dental professionals using our B2B portal, we additionally collect practice name, professional registration details, and approval status where relevant.
- Browsing and technical data: IP address, browser type, device information, pages visited, and referral source, collected via Shopify and Google Analytics.
- Marketing data: email address and engagement data if you subscribe to our newsletter or interact with our advertising campaigns.
- Communications: any information you provide when contacting customer support.
4. Purposes and Legal Bases for Processing
|
Purpose |
Legal basis (GDPR) |
|---|---|
|
Processing and fulfilling your order, including B2B approval flows |
Performance of a contract (Art. 6(1)(b)) |
|
Managing your account |
Performance of a contract (Art. 6(1)(b)) |
|
Accounting, invoicing, and tax compliance |
Legal obligation (Art. 6(1)(c)) |
|
Sending newsletters and marketing communications |
Consent (Art. 6(1)(a)) |
|
Running advertising campaigns via Google Ads and Meta Ads |
Consent (Art. 6(1)(a)) |
|
Website analytics via Google Analytics |
Consent (Art. 6(1)(a)) |
|
Preventing fraud and ensuring website security |
Legitimate interest (Art. 6(1)(f)) |
|
Responding to customer support requests |
Performance of a contract / Legitimate interest |
Where processing relies on consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Cookies
Our website uses cookies and similar technologies:
- Necessary/functional cookies: required for the website and webshop to function (e.g. Shopify session and cart cookies). These do not require consent.
- Analytics cookies: Google Analytics, used to understand how visitors use our website. Set only with your consent.
- Advertising cookies: Google Ads and Meta (Facebook/Instagram) Ads, used to measure and optimize our advertising campaigns and show you relevant ads. Set only with your consent.
You can manage or withdraw your cookie consent at any time through our cookie banner or your browser settings. Disabling non-essential cookies will not affect your ability to browse and order on our website.
6. Third Parties and Processors
We share personal data with the following categories of third parties, who process it on our behalf or as independent controllers:
|
Party |
Role |
Purpose |
|---|---|---|
|
Shopify |
Processor |
Webshop platform, hosting, order and payment processing |
|
Google Analytics (Google Ireland Ltd.) |
Processor |
Website analytics |
|
Google Ads (Google Ireland Ltd.) |
Processor / Controller |
Advertising and conversion tracking |
|
Meta Platforms Ireland Ltd. |
Processor / Controller |
Advertising via Facebook/Instagram |
|
Payment providers (via Shopify Payments) |
Processor |
Secure payment processing |
|
Shipping and logistics partners |
Processor |
Delivery of orders |
|
Accounting/bookkeeping provider |
Processor |
Invoicing and tax compliance |
We do not sell your personal data to third parties. Data is only shared where necessary to provide our services, to comply with legal obligations, or with your consent.
7. Data Retention
We do not retain personal data longer than necessary for the purpose for which it was collected.
- Customer and order data: retained for as long as needed to process and follow up on your order. Data forming part of our accounting or invoicing is retained for 10 years, in accordance with legal requirements.
- Newsletter data: retained for as long as you remain subscribed to our newsletter. You can unsubscribe at any time via the link at the bottom of our emails.
- Other personal data is deleted as soon as it is no longer needed, unless we are legally required to retain it for a longer period.
8. International Data Transfers
Some of our processors (including Google and Meta) may transfer personal data outside the European Economic Area (EEA), including to the United States. Where this occurs, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or an adequacy decision, to protect your data in line with GDPR requirements.
9. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your personal data, where legally possible.
- Restriction of processing under certain conditions.
- Data portability, receiving your data in a structured, machine-readable format.
- Object to processing based on legitimate interest or for direct marketing purposes.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at support@oraguard.com. We will respond within one month, as required by law.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) if you believe your data has been processed unlawfully.
10. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration, including secure hosting through Shopify, restricted internal access to personal data, and the use of reputable, GDPR-compliant service providers.
11. Children’s Privacy
Our website and products are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised effective date. We encourage you to review this policy periodically.
13. Contact
For questions or requests regarding your personal data, contact us at:
Supps by Science BV Mechelse steenweg 5 2220 Heist op den Berg Belgium Email: support@oraguard.com