Privacy Policy

This policy explains what personal data we collect, why, and how you can exercise your rights. It complies with the GDPR (Regulation (EU) 2016/679).

Data controller

The controller of your personal data is:

Carla Dirickx

Rue de la station 88, 7090 Braine-Le-Comte, Belgique

E-mail : [email protected]

Data collected

We only collect strictly necessary data:

  • Contact form: name, e-mail, phone (optional), message.
  • Order page: name, e-mail, phone, delivery address, mobile composition.
  • Payment (future, via Stripe): Stripe handles card data alone, we never see it. We only receive the payment status.

Purposes

Your data is used exclusively to:

  • Reply to your contact request.
  • Process and ship your order.
  • Keep you informed about your order (e-mail).
  • Meet our legal obligations (accounting, taxes).

Legal basis

Processing is based on: • Performance of a contract (order placed with us) • Your consent (contact form) • Our legal obligations (invoice retention for 7 years in BE)

Retention period

• Contact requests: 1 year after the last exchange • Orders and invoices: 7 years (Belgian accounting obligation) • Stripe payment data: see their policy (Stripe is PCI DSS level 1 certified)

Recipients

Your data is only shared with strictly necessary providers:

  • Stripe (payment) — Ireland, PCI DSS certified
  • Resend or SMTP provider (transactional e-mails)
  • Carrier (Bpost or other, for delivery)
  • Site host (private server)

No data is ever sold, shared for marketing or used for profiling.

Your rights

You have the following rights regarding your data at any time:

  • Right of access — know what data we hold on you
  • Right to rectification — correct erroneous information
  • Right to erasure — delete your data (subject to legal obligations)
  • Right to portability — retrieve your data in a reusable format
  • Right to object — refuse certain processing
  • Right to restriction — temporarily freeze processing

To exercise any of these rights, contact us by e-mail. We reply within one month.

Complaint

If you believe your rights are not respected, you can file a complaint with the Belgian Data Protection Authority: autoriteprotectiondonnees.be.

Cookies

The site only uses strictly necessary technical cookies (language selection, cart). No tracking or advertising cookie is set. No consent is therefore required for these essential cookies.

Updates to this policy

This policy may be updated to reflect changes to the site or regulations. The latest update date is shown below.

Last updated: May 10, 2026