Privacy policy

Who is responsible?

The data controller is:

Questions about this policy or about your data? E-mail [email protected].

What data do we collect?

When you order, we ask only for what we need to deliver and invoice it:

• Name and e-mail address — to confirm your order and to be able to reach you.
• Phone number — optional, only if you fill it in; useful if delivery goes wrong.
• Delivery and billing address — to ship your parcel and calculate shipping costs.
• Company name and VAT number — only for business orders.
• Your order contents — products, quantities, amount and the delivery method you chose (home delivery or pickup).
• Payment reference — to match your bank transfer to your order.

We do not ask for your date of birth, national registry number or any health data. If you only use the contact form, we keep just your name, e-mail address and your message.

Why do we process it?

• To fulfil your order — confirmation, shipping, follow-up and customer service. Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR).
• To meet our accounting obligations — in Belgium invoices must be kept for seven years. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To answer your question when you use the contact form. Legal basis: our legitimate interest in replying to enquiries (Art. 6(1)(f) GDPR).

We do not use your data for advertising and we do not send a newsletter unless you explicitly ask for one.

Payments

You pay by ordinary SEPA bank transfer, or by scanning the QR code in your confirmation e-mail with your banking app. We never receive or store your card details — the payment happens entirely within your own bank. All we see is whether a transfer with the right reference has arrived.

If we add an online payment provider later, we will update this policy before that service goes into use.

Who do we share it with?

We do not sell your data and we do not share it with third parties for marketing. We do rely on:

• Cloudflare — for hosting, database, storage and sending e-mail, under a data processing agreement.
• The carrier (DPD) — only the name and address needed to deliver your parcel.
• Our accountant — only the invoice data required by law.

How long do we keep it?

• Order and invoice data: seven years, as Belgian accounting law requires. After that it is deleted or anonymised.
• Contact form messages: until your question is resolved, and at most one year after that.
• Account data, if you have an account in the agility application: for as long as that account exists.

Your rights

At any time you have the right to:

• access your data and receive a copy of it;
• have inaccurate data corrected;
• have your data erased, insofar as we are not legally required to keep it;
• restrict the processing or object to it;
• receive your data in a readable format (portability);
• withdraw your consent, where the processing was based on it.

Send your request to [email protected]. We reply within thirty days. We may ask you for proof of identity so that we do not hand your data to someone else.

If you are not satisfied with our answer, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels — www.dataprotectionauthority.be.

Changes

We update this policy when our processing changes — for example when we add an online payment provider or visitor statistics. The date at the top shows when we last did so.