Privacy Policy
Last updated: 24 August 2026
This policy explains what personal data Gstar Boost collects when you order NFC review products through this website, why we collect it, and what rights you have. We are the controller of this data under the General Data Protection Regulation (GDPR).
1. Who we are
Gstar Boost — a trading name of Pure CBD4U
Graaf Florisplein 2, 2691 ZW ’s-Gravenzande, Netherlands
Chamber of Commerce (KvK): 77960718 · VAT (BTW): NL003264895B34
Email: ronaldb041071@hotmail.com
2. What we collect and why
We only collect what we need to make and deliver your order. We do not use tracking cookies, analytics or advertising pixels on this website.
| Data | Why we need it | Legal basis |
|---|---|---|
| Name, business name | To identify your order and program your product | Performance of a contract |
| Email address | To send your order confirmation, payment link and delivery updates | Performance of a contract |
| Address, postcode, city | To deliver your order, and to look up your public Google business listing | Performance of a contract |
| Phone number (optional) | To contact you about your delivery | Performance of a contract |
| Order details and amount | To fulfil your order and meet our accounting obligations | Contract / legal obligation |
| Payment data | To take payment (processed by Viva Wallet — see below) | Performance of a contract |
Looking up your Google listing
You do not need to give us your Google review link. Using the business name and address you provide, we look up your publicly listed Google Business Profile and program your NFC products with the review link. We only use publicly available information for this, and only for your order.
3. Payments
Card payments are processed by Viva Wallet, a licensed European payment institution acting as an independent controller for payment data. Your full card number is entered on Viva Wallet's secure payment page and is never received or stored by us. We receive only confirmation of whether the payment succeeded, the amount, and a transaction reference. Viva Wallet's own privacy policy applies to their processing of your payment data.
4. Who else sees your data
We do not sell your personal data and we do not share it for marketing. We share it only with parties who help us deliver your order:
- Viva Wallet — payment processing
- Our email provider — to send and receive order correspondence
- Our website host — to serve this website
- Delivery/postal services — where your order is shipped rather than delivered in person
- Our accountant and the Dutch tax authority — where required by law
These parties are located in the EU/EEA, or where data is transferred outside it, this is covered by an adequacy decision or Standard Contractual Clauses.
5. How long we keep it
- Order and invoice records: 7 years — the retention period Dutch tax law requires.
- Order correspondence (email): up to 2 years after your order, for support and warranty questions.
- Anything else: deleted once it is no longer needed for the purpose above.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased, where we are not legally required to keep it
- restrict or object to our processing
- receive your data in a portable format
- withdraw consent, where processing is based on consent
To exercise any of these, email us at the address above. We will respond within one month. If you are not satisfied, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl.
7. Cookies
This website does not set tracking, analytics or advertising cookies. Only strictly necessary technical storage is used to keep your shopping basket working while you browse. If we add analytics later, we will ask for your consent first and update this policy.
8. Security
This website is served over an encrypted HTTPS connection. We limit access to order data to those who need it to fulfil your order. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
9. Changes
If we change this policy we will update the date at the top of this page.