Privacy Notice

Last updated: July 2026

Quick Guide to Our Privacy Notice

Welcome to BunzlOne. Your trust and privacy are important to us. This short summary provides an overview of how we handle personal data. More details can be found in the full Privacy Notice below.

Who handles your data?
Bunzl Verpakkingen Arnhem B.V., trading as BunzlOne, is responsible for the processing of personal data as described in this Privacy Notice.

What data do we process?
We process, among other things, company account information, user information, order and transaction information, communication data, return information, invoice information, and website and usage data.

Why do we process data?
We process personal data to provide the BunzlOne marketplace platform, manage company accounts, validate business customers, process orders, handle payments and invoicing, provide customer service, process returns, enable integrations and comply with legal obligations.

With whom do we share data?
We only share personal data where necessary, for example with Marketplace Sellers, payment providers, marketplace and integration platforms, hosting and technology partners, financial systems, analytics and optimisation services, and public authorities where legally required.

International data transfers
Some service providers may process personal data outside the European Economic Area. Where this happens, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or other legally permitted protection measures.

Your rights
You have, among other things, the right of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent.

Contact
For privacy-related questions, you can contact us via support@bunzlone.com.

1. Introduction

BunzlOne is a B2B marketplace platform operated by Bunzl Verpakkingen Arnhem B.V. Through BunzlOne, business customers can order products offered via BunzlOne and connected Marketplace Sellers.

In this Privacy Notice, we explain what personal data we process, why we process it, with whom we share it, how we protect it and what rights you have.

BunzlOne is intended exclusively for business customers. The platform is not intended for consumers.

2. Who is responsible for your personal data?

Bunzl Verpakkingen Arnhem B.V.
Trading name: BunzlOne
Chamber of Commerce number: 09094090
Delta 57
6825 ML Arnhem
The Netherlands

Bunzl Verpakkingen Arnhem B.V. is the data controller responsible for the processing of personal data as described in this Privacy Notice. This means that we determine the purposes for which and the manner in which personal data is processed.

For privacy-related questions, you can contact us via:

Email: support@bunzlone.com
Phone: +31 (0)26 384 38 38

3. When does this Privacy Notice apply?

This Privacy Notice applies when you use BunzlOne.com, use a company account or user account, place orders, contact us or use BunzlOne services and functionalities.

This Privacy Notice applies to:

visitors of BunzlOne.com;
business customers of BunzlOne;
administrators and users of company accounts;
customer contact persons;
users of connected procurement platforms;
individuals who contact BunzlOne;
individuals who conduct order-related communication with BunzlOne or a Marketplace Seller through the platform.

This Privacy Notice should be read together with any other privacy information that we may provide on specific occasions.

4. What personal data do we process?

4.1 Company account information

For the creation, validation and management of a company account, we may process the following data:

company name;
legal company name;
general company email address;
VAT number;
Chamber of Commerce number or registration number;
address details;
telephone number.

4.2 User information

For user accounts within a company account, we may process the following data:

first name;
last name;
email address;
account role, such as Company Admin or User.

In some cases, a user account may be functionally linked to a branch, location or operational unit of an organisation.

4.3 Order and transaction information

When an order is placed, we may process, among other things, the following data:

order number;
purchase order number or procurement reference;
customer reference;
billing address;
shipping address;
contact person;
telephone number;
GLN, meaning Global Location Number;
External Address ID;
ordered products, quantities and prices;
order status;
delivery information;
invoice information;
return information.

4.4 Communication data

When you contact us or use communication functionalities within BunzlOne, we may process the following data:

name;
email address;
telephone number;
message content;
subject of the request;
order-related communication;
attachments sent through the platform.

4.5 Website and usage data

When you use BunzlOne, technical and analytical data may be processed, such as:

IP address;
browser information;
device information;
cookie information;
use of the platform;
statistical data about website performance.

5. Why do we process personal data and on what legal basis?

For each processing activity, we only use personal data where there is an appropriate purpose and a valid legal basis. The main legal bases are performance of a contract, legal obligation, legitimate interest and consent.

Purpose	Data categories	Legal basis
Account management Creating, managing and making available company accounts and user accounts within BunzlOne.	Company account information, user information, account role, account information.	Performance of a contract and legitimate interest.
Validation of business customers Checking whether an organisation can be granted access to BunzlOne. At this time, accounts are created exclusively by BunzlOne.	Company name, legal company name, Chamber of Commerce number, VAT number, address details, contact details.	Preparation or performance of a contract and legitimate interest.
Order processing and delivery Processing orders, displaying order statuses, making invoices and packing slips available, organising delivery and handling returns.	User information, order information, shipping address, billing address, contact details, order status, return information.	Performance of a contract.
Marketplace operations Enabling Marketplace Sellers to accept orders, deliver products, handle questions and support returns.	Company information, order information, delivery information, contact details, communication data, return information.	Performance of a contract and legitimate interest.
Mirakl OneCreditor model Processing marketplace transactions where customers purchase through BunzlOne, are invoiced by BunzlOne and Marketplace Sellers invoice BunzlOne.	Order information, invoice information, company information, payment status, marketplace transaction information.	Performance of a contract and legal obligation.
Payments and financial administration Processing payments via Mollie, invoicing through Mirakl and financial administration in Microsoft Dynamics 365 Business Central.	Order information, invoice information, payment information, company information, contact details.	Performance of a contract and legal obligation.
TradeCentric and eProcurement integrations Facilitating PunchOut and eProcurement integrations with systems such as SAP, Ariba, Coupa and other procurement systems for customers who choose to use this option.	Account information, company information, procurement information, order information, delivery information, procurement references.	Performance of a contract.
Alumio integrations with sellers Facilitating integrated data exchange with sellers who wish to work through their own systems.	Order information, company information, delivery information, order statuses, marketplace information.	Performance of a contract and legitimate interest.
Customer service and contact form Answering questions and handling requests via email, telephone or contact form.	Name, email address, telephone number, question or message, order information, communication data.	Performance of a contract and legitimate interest.
Marketplace communication Enabling customers to communicate from an order with BunzlOne, a Marketplace Seller or both parties.	Message content, order information, contact details, attachments, communication history.	Performance of a contract and legitimate interest.
Returns Processing and following up return requests via BunzlOne and Mirakl.	Order information, return information, contact details, communication data, attachments.	Performance of a contract.
Fraud prevention and abuse prevention Preventing and investigating misuse, fraudulent activity or unauthorised use of BunzlOne.	Account information, company information, order information, payment information, usage data, communication data.	Legitimate interest.
Analytics and optimisation Improving the performance, security, usability and operation of BunzlOne.	Website and usage data, cookie information, statistical data, technical data.	Consent where required and legitimate interest for necessary technical or aggregated analyses.
Legal obligations and legal claims Complying with legal obligations, tax retention obligations, audits, dispute handling and establishing or defending legal claims.	Company information, user information, order information, invoice information, payment information, communication data, usage data.	Legal obligation and legitimate interest.

6. Marketplace Sellers and data sharing

BunzlOne is a marketplace platform on which products may be offered by connected Marketplace Sellers. Marketplace Sellers only receive the data that is necessary for:

order acceptance;
delivery of products;
handling questions and complaints;
return processing;
performance of the agreement.

Marketplace Sellers manage their own product information within Mirakl. Contact details of Marketplace Sellers are used only for marketplace operations and are not publicly shown to customers.

7. Mirakl OneCreditor model

BunzlOne uses the Mirakl OneCreditor model. This means that customers purchase products through BunzlOne, are invoiced by BunzlOne and pay BunzlOne.

Marketplace Sellers invoice BunzlOne and do not have a direct invoicing relationship with customers.

8. TradeCentric and eProcurement

For customers who choose to use this option, BunzlOne offers integrations via TradeCentric. This enables data exchange with systems such as SAP, Ariba, Coupa and other eProcurement platforms.

9. Alumio integrations

Marketplace Sellers have access to Mirakl. For sellers that wish to work through integrations, information may additionally be exchanged with their own systems via Alumio.

10. With whom do we share personal data?

We only share personal data where this is necessary for our services, the performance of agreements, legal obligations or legitimate business purposes.

We may share personal data with:

Marketplace Sellers involved in fulfilling an order;
payment service providers;
marketplace and integration platforms;
hosting and technology partners;
financial and administrative systems;
analytics and optimisation services;
financial, legal, tax and accounting advisors;
IT and security service providers;
parties involved in a possible business change, merger, acquisition or sale of activities;
public authorities where we are legally required to do so.

We do not sell personal data.

11. Processors and Business Partners

We work with various external service providers for hosting, marketplace operations, payments, integrations, communication, analytics, website functionality and financial administration.

Name	Purpose of processing
Adobe Commerce Cloud	Webshop platform, company accounts, user accounts, catalogue and transactional functionality.
SendGrid	Transactional emails sent from Adobe Commerce.
Mirakl	Marketplace platform, seller management, order processing, marketplace transactions, invoicing and return processes.
Mollie	Payment processing.
Microsoft Dynamics 365 Business Central	Financial administration.
Alumio	Integration platform for data exchange with sellers.
TradeCentric	PunchOut and eProcurement integrations with customer procurement systems.
Usercentrics	Consent Management Platform for cookie and consent management.
Google Analytics 4	Web analytics and statistics.
Google Tag Manager	Tag management.
VWO	A/B testing and website optimisation.

Additional and current information about web services used may be displayed through Usercentrics.

12. International data transfers

Due to the international nature of Bunzl and the use of external service providers, personal data may be processed or accessed outside the European Economic Area. Where this happens, we ensure that appropriate safeguards are applied.

These measures may include:

adequacy decisions of the European Commission;
Standard Contractual Clauses;
other legally permitted safeguards.

13. Retention periods

We retain personal data for as long as necessary for the purposes described in this Privacy Notice, in particular for the performance of agreements and legal obligations.

We apply statutory retention periods for, among other things:

order data;
invoices;
financial administration;
tax obligations.

Where statutory retention periods apply, data may be retained longer than the period during which an account is active. If complete deletion is not possible or not permitted, data may be blocked or made accessible only on a restricted basis.

14. How do we protect personal data?

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

Access to personal data is limited to employees, Marketplace Sellers and service providers who need this data to perform their work.

No system is completely free from risk. We therefore encourage users to take appropriate precautions themselves when using online services.

15. Your rights

Under the GDPR, you have, among other things, the right to:

access your personal data;
rectify inaccurate personal data;
erase personal data;
restrict processing;
object to processing;
data portability;
withdraw consent.

If personal data is used for solely automated decision-making that has legal or similarly significant effects, you have the right to request human intervention. BunzlOne does not use personal data for solely automated decision-making that has legal or similarly significant effects on you.

We respond to requests within the statutory period. Where a request is complex or where we receive multiple requests, this period may be extended as permitted under the GDPR. Some rights are not absolute and may be subject to conditions or exceptions.

Requests can be submitted via support@bunzlone.com. We may ask for additional information to verify your identity before processing a request.

16. Cookies and similar technologies

BunzlOne uses cookies and similar technologies. We use Usercentrics to manage consent.

More information about the cookies used, categories, services, trackers and preferences can be found in our Cookie Policy.

17. Complaints

If you are not satisfied with the way we handle personal data, you can contact us via support@bunzlone.com.

You also have the right to lodge a complaint with the Dutch Data Protection Authority.

Dutch Data Protection Authority
Website: autoriteitpersoonsgegevens.nl

18. Changes

We may update this Privacy Notice from time to time to ensure that it reflects our current services, systems, marketplace processes and legal obligations.

The most recent version will always be published on BunzlOne.com.

19. Contact details