I. Data we collect
1. Personal information provided directly
Order information: name, delivery address, email, phone number, invoice information
Account data: username, password (encrypted storage)
Payment information: processed by PCI-DSS certified service providers such as Stripe/PayPal, we do not store full bank card numbers
2. Non-personal data collected automatically
Device information: IP address (anonymized), browser type, operating system
Cookie data: used for website functions (such as shopping cart) and analysis (user explicit consent required)
II. Legal basis and purpose of data processing
According to Article 6 of the GDPR, we only process data in the following circumstances:
Legal basis Example of purpose
Performance of contract (Art.6(1)(b)) Order processing, logistics and delivery
Legal obligations (Art.6(1)(c)) Invoicing, tax compliance
User consent (Art.6(1)(a)) Marketing emails, cookie tracking
Legitimate interests (Art.6(1)(f)) Fraud prevention, website optimization
Ⅲ. Data retention period
Order data: retained for 10 years in accordance with Belgian tax law
Account information: until the user actively deletes it
Marketing data: until the user withdraws consent
Ⅳ. Your GDPR rights
You have the right to:
Access/correct your personal data
Delete data (“right to be forgotten”)
Restrict or object to data processing
Right to data portability (obtain data in a structured commonly used format)
Withdraw consent (without affecting the processing that has been carried out)
How to exercise rights:
Self-service operation through account settings, send an email to [email protected]
Complain to the Belgian Data Protection Authority (APD)
Ⅴ. International data transfer
All data is stored on servers within the EU. If cross-border transmission is required (such as using US cloud services), GDPR-recognized protection mechanisms (such as standard contractual clauses SCCs) will be ensured.
Ⅵ. Cookie policy
We use:
Necessary cookies (no consent required): shopping cart function, user login, etc.
Ⅶ. Children’s privacy protection
We will not intentionally collect data from children under the age of 16. If you find such a situation, please contact us immediately to delete it.
Ⅷ. Policy Updates
Major changes will be notified in a prominent location on the website and consent will be sought again (if changes in legal basis are involved).
