Privacy Policy
Document version: 2.1 (NL/EU adaptation) Effective date: 2026-06-18 Last reviewed: 2026-06-18
Mojo Nutrition BV ("Mojo", "we"), trading as evolve®, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect personal data when you use youevolve.life (the "Site"), join our waiting list, or buy our products.
This policy is issued under EU Regulation 2016/679 (GDPR) and the Dutch implementation act UAVG (Uitvoeringswet AVG).
1. Who we are (the data controller)
The controller of your personal data is:
- Legal entity: Mojo Nutrition BV
- Trade name: evolve®
- Registered office: Arnhemseweg 55 A, 7331 BB Apeldoorn, Netherlands
- KvK number: 67258700
- BTW number: NL856899859B01
- Data privacy contact: hello@youevolve.life
We have not appointed a Data Protection Officer, which is not mandatory at our scale. Privacy questions are handled by our privacy lead, reachable at hello@youevolve.life.
2. What personal data we collect
| Category | Examples | Source |
|---|---|---|
| Identity data | Name, date of birth (if supplied), gender (if supplied) | You |
| Contact data | Email address, billing address, delivery address, phone number | You |
| Account data | Username, password (hashed), preferences, wish list | You |
| Transaction data | Items purchased, order value, payment method type, billing history | You and our payment processor |
| Marketing data | Waiting-list and email subscription status, preferences, engagement with our emails | You and our email platform |
| Technical data | IP address, browser type, device, OS, referrer URL, pages viewed, session ID | Automatically via cookies and analytics |
| Behavioural data | Site interaction, products viewed, cart contents, purchase history | Automatically and via account |
| Communications data | Customer service messages, reviews, photos submitted, survey responses | You |
| Inferred data | Customer segment, propensity scores | Derived |
| Health-adjacent data | Goals (e.g. "morning focus"), self-reported context if you fill in a quiz | You |
We do not intentionally collect special category data (Art. 9 GDPR) beyond the self-reported lifestyle goals above. If you share health information when contacting support, we will handle it under Art. 9(2)(a) GDPR (explicit consent) and limit retention to what is necessary to resolve your query.
3. How we collect personal data
- Directly from you (waiting-list signup, orders, account, contact forms, reviews, quizzes, surveys).
- Automatically as you use the Site (cookies, server logs, analytics, see Cookie Policy).
- From third parties: payment processor, delivery carrier, fraud-prevention provider, marketing partners, social-login providers (if used).
4. Lawful bases for processing
We rely on the following lawful bases under Article 6 GDPR:
| Purpose | Lawful basis |
|---|---|
| Processing orders, delivering goods, providing customer service | Contract (Art. 6(1)(b)) |
| Managing your account | Contract |
| Fraud prevention, security, IT integrity | Legitimate interests (Art. 6(1)(f)) |
| Compliance with tax, accounting, and consumer-law obligations | Legal obligation (Art. 6(1)(c)) |
| Waiting-list and direct marketing by email to existing customers about similar products | Legitimate interests (soft opt-in under Dutch Telecommunicatiewet art. 11.7 lid 3) |
| Direct marketing to prospects | Consent (Art. 6(1)(a)) |
| Non-essential cookies and analytics | Consent (Telecommunicatiewet art. 11.7a) |
| Product reviews, testimonials, UGC | Consent |
| Quiz / health-adjacent data | Consent (Art. 9(2)(a) where relevant) |
You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
5. What we use personal data for
- Manage the founders' waiting list and tell you when products and offers become available.
- Take and fulfil orders, including payment processing, dispatch, delivery, returns, and refunds.
- Operate your account: log-in, order history, subscription management, saved preferences.
- Provide customer service and respond to enquiries.
- Send transactional emails (order confirmation, dispatch, delivery, returns, account changes).
- Send marketing emails about evolve® products, content, and offers, where you have consented or qualify under the soft opt-in.
- Personalise the Site experience (product recommendations, content).
- Improve our products, Site, and service through analytics and aggregated insight.
- Prevent fraud, abuse, and unauthorised use of the Site.
- Comply with our legal and regulatory obligations.
We do not sell personal data. We do not use personal data for automated decision-making with legal or similarly significant effects (Art. 22 GDPR).
6. Who we share personal data with
We share personal data with the following categories of recipient acting as processors or independent controllers, under appropriate Article 28 GDPR data-processing agreements. We name recipients by category here; a current list of named sub-processors is available on request at hello@youevolve.life.
| Recipient | Purpose | Location |
|---|---|---|
| Ecommerce platform (Shopify International Ltd.) | Hosting, Site operation, order management | EEA / Canada |
| Payment processor | Card and iDEAL payment processing | EEA |
| Subscription management provider | Managing subscription orders | EEA |
| Email marketing platform | Waiting-list, marketing, and transactional email | EEA / US |
| Review platform | Customer reviews and UGC | EEA / EU |
| Shipping platform (Sendcloud, Eindhoven NL) routing PostNL / DHL / DPD | Delivery and tracking | NL / EU |
| Fulfilment partner | Order fulfilment and dispatch | EU |
| Website analytics (Google Analytics) | Traffic and performance measurement, subject to your cookie consent | EEA / US |
| Belastingdienst (Dutch tax authority), courts, regulators (NVWA, ACM, AP) | Tax, accounting, legal obligations | NL |
| Professional advisers (lawyers, accountants, auditors) | Legal and financial advice | NL / EU |
7. International transfers
Some recipients are based outside the EEA. Where personal data is transferred outside the EEA, we rely on one of the following safeguards under Chapter V GDPR:
- An EU adequacy decision (e.g. the EU-US Data Privacy Framework for certified US recipients).
- The EU Standard Contractual Clauses (Implementing Decision 2021/914) with supplementary measures where required.
- Binding Corporate Rules.
A copy of the safeguards in place for each transfer is available on request.
8. How long we keep personal data
| Data | Retention |
|---|---|
| Order and transaction records | 7 years from end of financial year (Dutch tax law: BW art. 2:10 / AWR art. 52, 7-year bewaarplicht) |
| Account data | Until account closure plus 24 months for support, then deleted or anonymised |
| Waiting-list and marketing data | Until you unsubscribe, plus 24 months for suppression |
| Customer service records | 24 months after case closure |
| Cookie and analytics data | See Cookie Policy |
| Health-adjacent / quiz data | 12 months unless tied to an active subscription |
After the retention period we delete or anonymise the data.
9. Your rights (GDPR Chapter III)
You have the following rights, free of charge in most cases:
- Right of access (Art. 15): a copy of the personal data we hold about you.
- Right to rectification (Art. 16): correct inaccurate or incomplete data.
- Right to erasure (Art. 17): have your data deleted in certain circumstances.
- Right to restriction (Art. 18): limit how we use your data in certain circumstances.
- Right to data portability (Art. 20): receive certain data in a structured machine-readable format.
- Right to object (Art. 21): including the absolute right to object to direct marketing.
- Right to withdraw consent (Art. 7(3)): where consent is the lawful basis.
- Right not to be subject to solely automated decisions (Art. 22).
To exercise any right contact hello@youevolve.life. We will respond within one month (Art. 12(3) GDPR). We may need to verify your identity.
10. Marketing and your choices
- You can unsubscribe from the waiting list or marketing emails at any time using the link in any marketing email or by emailing hello@youevolve.life.
- We do not engage in unsolicited postal or telephone marketing.
- You will still receive transactional emails relating to your orders even if you opt out of marketing.
11. Security
We use appropriate technical and organisational measures (Art. 32 GDPR) to protect personal data: encryption in transit (TLS), encrypted storage where supported, access controls, vetted processors under written DPAs, and regular review of our security posture. If you become aware of a possible vulnerability or breach involving your data please contact us immediately.
12. Children
The Site is not directed to children under 18 and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data to us, please contact hello@youevolve.life and we will delete it.
13. Right to complain to the supervisory authority
If you are not satisfied with how we handle your personal data you have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (AP) Hoge Nieuwstraat 8, 2514 EL Den Haag Tel: 088 - 1805 250 Web: autoriteitpersoonsgegevens.nl
You also have the right to lodge a complaint with the supervisory authority of your country of habitual residence (Art. 77 GDPR).
14. Changes to this Privacy Policy
We may update this policy from time to time. The "Last reviewed" date at the top shows the most recent revision. Material changes will be notified to account holders by email at least 30 days before they take effect.
15. Contact
Mojo Nutrition BV Email: hello@youevolve.life Post: Arnhemseweg 55 A, 7331 BB Apeldoorn, Netherlands