Privacy policy
Effective 30 October 2026 · RC Fairtrade B.V.
Who is responsible
RC Collective is operated by RC Fairtrade B.V., Techniekweg 13a, 3481 MK Harmelen, Netherlands. Contact info@rcfairtradebv.com for app support, privacy questions and deletion requests. This policy covers the app and its account service, including its connections to RC Peptides, RCP Cosmetics and RC Affiliates. Each selling shop also provides information about its purchase, delivery and payment processing.
Accounts and Google sign-in
An account is required to shop in the app. When you use a shop email and password, the app service checks them with RC Peptides and RCP Cosmetics. The password is processed for authentication and is not stored in the app account database. We store your name, email address, verified account identifiers and encrypted shop access credentials. Google sign-in requests your basic profile and verified email address. It does not request access to your inbox, contacts or files. We verify Google’s identity token and store the Google account identifier, name and email; Google access tokens are not kept. A matching email alone does not connect a shop account. You must prove ownership before accessing its orders or affiliate information.
Registration, recovery and terms
Shop registration sends your name, email, password and optional newsletter choice to the selected shop, which manages the account and verification email. We record the terms version, timestamp, account provider and a hash of your email when registration or Google sign-in records agreement. A hashed email can still relate to you. Password recovery sends your email to both shops; each matching shop sends its own reset email. The app does not receive your reset link or new password.
Shopping, payments and delivery
Cart and saved-product identifiers are stored on your device. Checkout sends your selected items, name, email, telephone number and delivery address to the selling shop to quote delivery and prepare its order. Mixed carts create separate shop orders, payments, shipping charges and packages. The app stores encrypted checkout progress, addresses, order references and payment status to resume interrupted payments and avoid duplicate orders. Order summaries, order details and shipment tracking are retrieved from connected shops and from purchases made through your app profile. Payment information is entered on the selling shop’s payment-provider page. The app does not collect full card numbers or card security codes. Providers can include Stripe for Cosmetics, GoBank24/Ninjas Pay and Plisio, depending on the method offered. Carriers such as FedEx receive delivery information through the selling shop. Provider and carrier notices apply to their processing.
RCpoints rewards
We use verified order identifiers, qualifying product amounts, payment and refund states, and your selected rewards to maintain a shared RCpoints balance. The service records earning adjustments, point reservations and redemptions, and sends signed reward instructions to the selling shop. Your points balance is not a cash balance. App-profile deletion removes the link between your profile and its points ledger. Limited order identifiers and unlinked ledger entries remain to prevent an order earning rewards again through account recreation and to resolve reward transactions. Contact us about access, correction or deletion of these records.
Address suggestions
You can select Enter address manually before typing. Otherwise, typing at least three characters in the street field sends your search text, country and a scoped session identifier through our service to Google Maps Platform (Places). Selecting a suggestion retrieves its address components. Searches do not include your name, email or phone number and do not use device GPS. The app service does not persist search text or suggestion lists. Your selected address is retained in checkout. Google processes these requests under its own privacy information at https://policies.google.com/privacy and applicable Maps terms.
Affiliate features
For an active affiliate, connected shop credentials are used to verify membership with RC Affiliates and retrieve referral codes, commission totals and payout summaries. The app does not display referred customers’ names or contact details and does not initiate payouts. The affiliate service retains its own membership, payment and contractual records.
Optional marketing
The newsletter checkbox starts unchecked. You can register without subscribing. Selecting it asks the chosen shop to subscribe you to news and offers. You may withdraw your choice through the unsubscribe link in its emails or by contacting us. Existing-account login and Google sign-in do not subscribe you to marketing. Required Terms acceptance is separate. Verification, password recovery and order/security messages are service communications.
Device storage and technical information
Native session tokens and short-lived Google sign-in proofs use secure device storage. The web preview uses an HTTP-only session cookie and per-tab sign-in proof. Cart, favorites and completed-checkout identifiers are stored locally. Signing out or deleting your app profile clears these local shopping preferences. Network services receive information such as your IP address when handling requests. The app service uses request metadata for rate limiting and security; app API access logging is disabled and its error logs do not include request bodies or credentials. Shop, media, Google, payment and carrier services can process their own technical information. The app does not include an advertising network, general-purpose analytics SDK or crash-reporting SDK. It does not request contacts, photos, microphone, calendar or device-location access.
Purposes, legal grounds and recipients
We use information needed to provide the account and shopping services you request, administer orders and respond to support/deletion requests. Necessary transaction records are processed to meet legal obligations. Security and abuse prevention serve our legitimate interests in protecting the service, subject to your rights. Optional marketing based on consent requires your affirmative choice and can be withdrawn. Recipients include the connected shops and affiliate service, hosting and technical support providers, Google identity and Maps services, selected payment and delivery providers, and the shops’ transactional or marketing-email providers. We may disclose information where legally required. Some providers operate outside the European Economic Area. Contact info@rcfairtradebv.com for details of relevant processing locations and applicable transfer arrangements; this policy does not represent that all processing stays in the Netherlands or Europe.
Retention
App profiles and connected identities remain until deletion. App sessions expire after 24 hours. Google handoffs expire within minutes and are removed after use or expiry. Terms-submission records are kept for up to 90 days, and matching records are removed with a connected app profile. Unstarted and fully paid checkout progress records are removed after 30 days without updates. Encrypted order references and the ownership proofs used to retrieve your app purchases remain until app-profile deletion, so your order history remains available. Partly paid or uncertain checkouts remain until resolved or app-account deletion to avoid duplicate orders. Deletion requests remain while being handled; resolved request records are removed from the app service after 90 days. Local preferences remain until cleared, sign-out or app-profile deletion. Shop transaction, accounting, support and affiliate records have separate retention requirements depending on legal obligations, unresolved orders and disputes. We explain records that must remain when handling a deletion request. The app service keeps encrypted daily backups on the server for up to 28 days. They are separate from active records. Deletions must be reapplied after a restoration so an older backup does not reinstate a deleted account.
Your choices and account deletion
You may request access, correction, erasure, restriction or portability of your personal data and object to relevant processing, subject to applicable law. You can withdraw consent without losing access to the shopping service. Contact info@rcfairtradebv.com or use the account-deletion request page. Requests can be submitted without installing or signing into the app. We verify ownership before deleting accounts; do not send passwords or full card details. Account > Delete app account immediately removes the app profile, linked credentials, sessions, stored app checkouts, order-history access proofs and matching terms records. It does not automatically close the independently held shop or affiliate accounts. Request deletion across RC to include those accounts, or select app-only to retain them. Account deletion does not cancel orders, payments or shipments. Records required by law or unresolved transactions may remain; we explain applicable exceptions. You may complain to a competent data-protection authority, including the Dutch Autoriteit Persoonsgegevens at https://autoriteitpersoonsgegevens.nl/.
Age and changes
RC Collective is intended for adults aged 18 or older. Contact us if you believe we hold an underage user’s information. Stating an adult audience does not verify research eligibility. We update this notice when the service or its data use changes and show the effective date.