Privacy policy
Privacy policy
Last updated: [TBC-P7]
This Privacy policy describes how [TBC-P1] ("we", "us", "our") collects, uses and discloses your personal information when you visit, use or make a purchase from this site, or otherwise communicate with us (collectively, the "Services"). In this policy, "you" refers to you as a user of the Services, whether you are a customer, a website visitor, or another individual whose information we have collected.
Please read this policy carefully.
Who is responsible for your data
The data controller is:
[TBC-P1]
Anthonis De Jonghestraat 50
9100 Sint-Niklaas
Belgium
VAT BE0867414778
[TBC-P12]
Changes to this policy
We may update this policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the updated policy on this site, revise the "Last updated" date, and take any further steps required by applicable law.
What personal information we collect
Information you give us directly:
- Contact details — your name, address, telephone number and email address.
- Order information — your name, billing address, delivery address, payment confirmation, email address and telephone number.
- Account information — your username, password, and other information used for account security.
- Business and trade account information — your company name, VAT number, company registration number, and the details of the individuals authorised to order on the account.
- Enquiry and support information — anything you send us through the enquiry, quotation, contact or returns forms, including project details, measurements and photographs.
Some features of the Services require this information. You may choose not to provide it, but you may then be unable to use those features.
Information we collect automatically: information about your interaction with the Services ("Usage Data"), collected using cookies and similar technologies. This may include device information, browser information, network connection information, your IP address, and information about how you browse and use the site.
Information we receive from third parties: from vendors and service providers who collect information on our behalf, including Shopify, which supports our site and Services, and our payment processors, which collect payment details in order to process your payment and fulfil your order.
How we use your personal information, and on what legal basis
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| Processing your order, taking payment, arranging delivery, handling returns and exchanges, and managing your account | Performance of a contract — Art. 6(1)(b) |
| Responding to enquiries, quotations and technical questions | Performance of a contract, or steps prior to entering one — Art. 6(1)(b) |
| Keeping accounting and tax records, and meeting other legal obligations | Legal obligation — Art. 6(1)(c) |
| Detecting, investigating and preventing fraud, and keeping the site secure | Legitimate interests — Art. 6(1)(f) |
| Improving the Services, and understanding how they are used | Legitimate interests — Art. 6(1)(f) |
| Assessing and administering trade account applications, including credit checks where applicable | Steps prior to a contract, and legitimate interests — Art. 6(1)(b) and (f) |
| Sending marketing communications | Consent — Art. 6(1)(a). You may withdraw consent at any time |
| Non-promotional cookies necessary for the site to function | Legitimate interests — Art. 6(1)(f) |
| Analytics and advertising cookies | Consent — Art. 6(1)(a) |
Who we share it with
We disclose personal information to the following categories of recipient, in each case only so far as is necessary:
- Shopify Inc. — our e-commerce platform, which hosts the store and processes orders and account data.
- Payment processors — to take and reconcile payment.
- [TBC-P13] — our ERP system, which receives order data for fulfilment.
- [TBC-P14] — our quotation and price list system.
- Carriers and logistics providers — to deliver your order.
- The manufacturer — where an order is fulfilled directly, or where a warranty claim requires assessment.
- Professional advisers, auditors and insurers — where required.
- Public authorities — where we are legally required to disclose, or to establish, exercise or defend legal claims.
We do not sell your personal information.
International transfers
Some of our service providers, including Shopify, process data outside the European Economic Area. Where personal information is transferred outside the EEA, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses to ensure an equivalent level of protection. [TBC-P15]
Cookies
We use cookies on this site to support and improve it, to remember your actions and preferences, and to carry out analytics. Information about the cookies used in connection with the Shopify platform is available at shopify.com/legal/cookies.
Non-essential cookies are set only with your consent, which you give through our cookie banner and can change at any time. Most browsers accept cookies by default, and you can also delete or refuse them in your browser settings. Blocking cookies may affect your experience of the site and may cause some features to stop working.
Our fonts are self-hosted rather than loaded from a third-party font service, so visiting this site does not transmit your IP address to a font provider.
[TBC-P16]
How long we keep it
| Data | Retention period |
|---|---|
| Order and invoice records | [TBC-P17] |
| Customer account data | [TBC-P18] |
| Enquiry and quotation correspondence | [TBC-P19] |
| Marketing consent records | [TBC-P20] |
| Website analytics data | [TBC-P21] |
Where we no longer need personal information, we delete it or anonymise it.
Security
No security measure is perfect or impenetrable, and we cannot guarantee "perfect security". Information you send us may not be secure in transit. We recommend that you do not use insecure channels to send us sensitive or confidential information.
Your rights
Under the GDPR you have the following rights in respect of your personal information. These rights are not absolute and may apply only in certain circumstances.
- Access — to ask for a copy of the personal information we hold about you, and details of how we use and share it.
- Rectification — to ask us to correct inaccurate information.
- Erasure — to ask us to delete information we hold about you.
- Portability — to receive a copy of your information in a portable format and to ask us to transfer it to a third party.
- Restriction — to ask us to stop or restrict our processing.
- Objection — to object to processing carried out on the basis of our legitimate interests, and to object at any time to processing for direct marketing.
- Withdrawal of consent — where we rely on your consent, to withdraw it at any time. This does not affect processing carried out before withdrawal.
You can exercise these rights by contacting us using the details below. We may need to verify your identity before responding substantively. We will respond within one month, as required by law. We will not discriminate against you for exercising any of these rights.
You may also authorise an agent to make a request on your behalf, in which case we will require evidence of that authorisation.
Marketing preferences
We may send you promotional emails where you have consented. You can unsubscribe at any time using the link in any such email, or by contacting us. If you unsubscribe, we may still send you non-promotional messages about your account or orders.
Third-party websites and links
This site may contain links to third-party websites. We are not responsible for the privacy or security of those sites, or for the accuracy, completeness or reliability of information on them. The inclusion of a link does not imply endorsement.
Children
The Services are not intended for use by children and we do not knowingly collect personal information from them. If you are the parent or guardian of a child who has provided us with personal information, contact us using the details below to request its deletion.
Complaints
If you have a complaint about how we handle your personal information, please contact us first using the details below.
You also have the right to lodge a complaint with the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données
Drukpersstraat 35, 1000 Brussels, Belgium
www.gegevensbeschermingsautoriteit.be
If you are resident in another EU member state, you may lodge a complaint with your local supervisory authority instead.
Contact
[TBC-P1]
Anthonis De Jonghestraat 50
9100 Sint-Niklaas
Belgium
[TBC-P12]