Privacy policy

1. Who we are

Blueapple BV, trading as Blue Apple, is the controller for the personal data described in this policy.

Visiting and postal address: Rijnstraat 76-H, 1079 HK Amsterdam. Chamber of Commerce (KvK) number: 93217587. VAT identification number: NL005006384V87. Email: [email protected]. Telephone: 020 239 11 93.

2. What data we process

Repair booking: your name, email address, telephone number, the device and repair you choose, the date and time, and any notes you add yourself.

Order in the parts shop: your name, email address, telephone number, delivery address, what you ordered and the status of your payment. We never see your full bank or card details; those are handled by our payment provider.

Contact form and WhatsApp: whatever you put in the message yourself.

Website visits: the address requested, the date and time, your browser and operating system, the referring page, and your IP address. We use the IP address to work out which country you are visiting from, so we can show the right language, and to prevent abuse.

We do not process special categories of personal data, and we do not use automated decision-making or profiling that affects you.

3. What we use data for, and on what legal basis

To carry out your booking or order, keep you informed of its status and reach you with questions about it. Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).

To issue an invoice and keep our accounts. Legal basis: legal obligation (Article 6(1)(c) GDPR); Dutch tax law requires us to keep these records for seven years.

To honour the warranty on a part we fitted. Legal basis: performance of the contract, and our legitimate interest in being able to verify a warranty claim (Article 6(1)(b) and (f) GDPR).

To secure the website, investigate faults and prevent spam and abuse. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

To ask you once, after a completed repair or order, to leave a review. Legal basis: legitimate interest (Article 6(1)(f) GDPR). You can object to this; let us know at [email protected] and you will not receive such a message again.

To measure how our advertising performs and to be able to show advertisements. Legal basis: your consent (Article 6(1)(a) GDPR), given through the cookie notice and withdrawable at any time.

4. Cookies and advertising tags

Necessary and functional cookies are always set. They keep your session alive, remember your language choice and your basket, protect forms against abuse, and record the choice you made in the cookie notice. No consent is required for these, because the site does not work without them.

Advertising and measurement cookies are only set after you have consented in the cookie notice. Specifically, this means Google Ads: only after you agree do we load Google's tag, which lets us measure whether an advertisement led to a booking or an order. If you choose Reject, that tag is never requested and those cookies are not set.

We use no other analytics or tracking software, we do not sell your data, and we do not share it with advertising networks beyond the above.

Your choice is stored on your own device, not with us. The button below clears it, after which the cookie notice appears again and you can choose afresh.

Your choice has been cleared. The cookie notice will appear again.

5. Who we share data with

We share data only with parties we need in order to provide our service, and only for that purpose. We have a processor agreement in place with each of them.

Mollie B.V. (Amsterdam) processes your online payment. Your payment details go directly to Mollie and never reach us.

Mailgun (EU region) sends our email, such as your booking confirmation and the status updates about your repair.

Cloudflare, Inc. provides the security and acceleration layer in front of our website. All traffic to the site passes through Cloudflare.

GreenCloud hosts our web server; the server is located in Amsterdam.

Google Ireland Limited receives data through the Google Ads tag, but only if you have consented to it.

We may also disclose data where we are legally required to, for instance to the Dutch tax authority or at the demand of a competent authority.

6. How long we keep data

Invoices and the associated accounts are kept for seven years. That is not our choice but a statutory tax retention obligation.

We keep the repair record longer than you might expect, and there is a reason for it: we give a lifetime warranty on the functioning of the part we fitted, and without the record we cannot verify a claim against that warranty. If you would rather we deleted it, we will, but you will no longer be able to claim under the warranty afterwards. We would rather say that beforehand than after.

Messages sent through the contact form are kept until your question is resolved and then for a maximum of two years, so that we can find an earlier conversation.

Website visit logs are kept for a maximum of twelve months.

Your choice in the cookie notice sits on your own device and stays there until you clear it or clean out your browser data.

7. Your rights

You have the right to see what data we hold about you, to have it corrected or erased, to have the processing restricted, and to object to processing we base on legitimate interest.

You also have the right to portability: on request we will provide the data you supplied yourself in a common file format, so you can take it with you.

If you have given us consent, you can withdraw it at any time. That takes effect from the moment you withdraw it and does not undo what happened before.

Send your request to [email protected]. We respond within one month. To avoid handing data to the wrong person we may ask you to clarify your request or make your identity plausible; we will never ask you for a copy of your identity document.

8. Making a complaint

If you are unhappy with how we handle your data, tell us first at [email protected] and we will put it right.

You also always have the right to lodge a complaint with the supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl. You do not have to come to us first in order to do so.

9. Security

The site is served entirely over https, access to our administration is limited to the staff who need it, and that access is protected by a password and two-step verification.

If you think something is wrong with the security of our site or with customer data, report it to [email protected]. We take such reports seriously and we appreciate you telling us before telling anyone else.

10. Changes to this policy

If our service changes, or the way we process data changes, we will update this policy. The date at the top of this page shows when the text was last changed; that date is maintained by hand and is not automatically set to today.