Privacy Policy Next Level Smart
Next Level Smart respects your privacy and handles your personal data with care. This privacy policy explains what data we collect, why we collect it, how we use it, and what rights you have. This statement complies with the requirements of the General Data Protection Regulation (GDPR).
Last updated: December 2025
Data Controller: Next Level Smart, Telfordstraat 35A, 8013RL Zwolle, Netherlands
1. What data do we collect?
We only collect personal data that is necessary for our services:
When placing an order:
- First and last name
- Address details (street, house number, postal code, city, country)
- Email address
- Phone number
- Date of birth (if legally required for age verification)
- Payment information (via our secure payment providers)
- Order history and order information
When using our website:
- IP address and browser information
- Browsing behavior via cookies (see cookie policy)
- Device and system information
When contacting customer service:
- Correspondence (emails, chat, phone calls)
- Complaints and feedback
2. Why do we process your data?
We process your personal data for the following purposes, with the following legal bases:
Performance of contract (processing your order):
- Processing and shipping your order
- Communication about your order
- Payment processing
- Handling returns
- Customer service and support
Legal obligation:
- Retaining invoices and accounting records (tax retention obligation)
- Age verification for age-restricted products
Legitimate interest:
- Fraud prevention and security
- Improving our website and services
- Analyzing website usage
Consent:
- Sending newsletters and marketing communications
- Placing non-essential cookies
You can withdraw your consent at any time via the unsubscribe link in every newsletter or by contacting us.
3. Who do we share your data with?
We only share your data with parties that help us deliver our services. These parties are contractually obligated to confidentiality and may not use your data for their own purposes.
Webshop and hosting
Prestashop - Our webshop software with which we process orders and manage customer data. Prestashop has implemented appropriate security measures including SSL encryption.
Combell - Our hosting provider that manages our website and email services. Combell has implemented technical and organizational measures to protect your data and processes it solely on our behalf.
Payment services
For processing payments, we use recognized payment service providers. Your payment data is processed directly and securely by these parties according to the highest security standards (PCI-DSS). We do not have access to your complete payment details such as credit card numbers or bank account details.
Available payment methods: Revolut (including iDEAL), Bank Transfer, Bancontact, EPS, and credit card payments. All these payment methods comply with European security standards.
Shipping and logistics
UPS and DPD - To deliver your order, we share your name, address, and contact details with our shipping partners. They use this data solely for executing the delivery.
Sendcloud - Our shipping platform that helps us manage and process shipments. Sendcloud processes your shipping data solely on our behalf.
Email marketing
Omnisend - For sending newsletters (only with your consent). Omnisend processes your name and email address and uses cookies to measure whether emails are opened. You can always unsubscribe via the link at the bottom of every newsletter.
Customer service
Freshdesk - Our customer service platform where we manage your questions and correspondence. Freshdesk has implemented appropriate security measures.
WhatsApp Business - For direct communication via WhatsApp. WhatsApp (Meta) processes your messages according to their own privacy policy. We only use WhatsApp for customer service and with your consent.
Reviews
WebwinkelKeur - For collecting and displaying customer reviews. If you post a review, WebwinkelKeur shares your name and email address with us. WebwinkelKeur publishes your name (or initials) with your review. You have the right to request removal of your review.
Website security and performance
Cloudflare - For securing and accelerating our website. Cloudflare processes your IP address and technical data. Cloudflare has European data centers and complies with GDPR.
Website analytics
Google Analytics - For analyzing website traffic and user behavior. We have concluded a data processing agreement with Google and enabled IP anonymization. You can block the use of Google Analytics via your cookie settings.
4. How long do we retain your data?
We do not retain your personal data longer than necessary:
- Customer data: As long as you are a customer and use our services. After your last order, we retain your basic data for a reasonable period in case you return as a customer.
- Order history: As long as necessary for customer service and warranty obligations.
- Invoices and accounting records: 7 years (tax retention obligation).
- Newsletter subscriptions: Until you unsubscribe.
- Correspondence: As long as relevant for handling your question or complaint.
- Cookies and analytical data: According to our cookie policy (maximum 24 months).
If you submit a deletion request, we will delete your data within 30 days, except for data we are legally required to retain (such as invoices).
5. How do we secure your data?
We take the protection of your data seriously and have implemented appropriate technical and organizational measures:
- SSL encryption for all data transfer on our website
- Secure servers with regular updates and patches
- Access restriction to personal data (authorized personnel only)
- Strong password protection and two-factor authentication where possible
- Regular data backups
- Data processing agreements with all external parties
- Monitoring and logging of system access
6. Your rights under GDPR
You have the following rights at all times regarding your personal data:
Right of access
You can request which personal data we process about you.
Right to rectification
You can request correction of incorrect or incomplete data.
Right to erasure ('right to be forgotten')
You can request deletion of your data, unless we have a legal retention obligation.
Right to restriction of processing
You can request temporary restriction of the processing of your data.
Right to data portability
You can request to receive your data in a structured, machine-readable format.
Right to object
You can object to processing based on legitimate interest.
Right to withdraw consent
If processing is based on consent, you can always withdraw it.
How do you exercise your rights?
Contact our privacy contact person (see bottom of this page). We respond to your request within 30 days. To prevent abuse, we may ask you to verify your identity.
Filing a complaint
Are you dissatisfied with how we handle your data? You have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl
7. Cookies
Our website uses cookies. A cookie is a small text file that is stored in your browser when you first visit this website.
Which cookies do we use?
Functional cookies - These cookies are necessary for the website to function and cannot be disabled. They remember, for example, your shopping cart and language preferences.
Analytical cookies - We use Google Analytics to understand how visitors use our website. This information is anonymized and helps us improve the website. You can refuse these cookies via our cookie banner.
Marketing cookies - Only with your consent. These cookies are used for sending relevant communications. You can refuse these cookies via our cookie banner.
Managing cookies
You can manage cookies via your browser settings. Please note that disabling cookies may limit the functionality of the website.
8. Changes to this privacy policy
We reserve the right to make changes to this privacy policy. You will always find the most recent version on this page. Check regularly for changes. In case of significant changes, we will actively inform you by email.
9. Questions and contact
Data Controller
Next Level Smart
Telfordstraat 35A
8013 RL Zwolle
Netherlands
Phone: +31 (0)38 200-1004
Email: info@nextlevelsmart.nl
Privacy contact person: Remon Konjanan
For questions about privacy or to exercise your GDPR rights, you can contact us using the details above.







