Privacy Policy

Introduction

At Shavys, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or contact us.

This Privacy Policy explains how we process personal data when you visit our website, place an order, contact us, create an account, subscribe to marketing communications, or otherwise interact with Shavys.

Business Information

Data Controller

Shavys is the data controller responsible for the personal data described in this Privacy Policy.

Business name: Shavys
Registered address: August Vermeylenstraat 147, 9000 Gent Belgium
Email: shavys@shavys.be
VAT number: BE1033476503

Information We Collect

We may collect the following information:

Personal Information

Full name
Billing address
Shipping address
Email address
Telephone number

Order Information

Products purchased
Order history
Payment status

Technical Information

IP address
Browser type
Device information
Website usage data
Cookies and similar technologies

How We Use Your Information

We use your information to:

Process and deliver orders
Provide customer support
Communicate regarding orders and enquiries
Improve our website and services
Prevent fraud and unauthorized activities
Comply with legal obligations

Legal Bases for Processing

We process personal data only where permitted by applicable law. Depending on the purpose, we rely on one or more of the following legal bases:

Performance of a contract: to process orders, take payment, arrange delivery, handle returns, and provide customer support.

Legal obligations: to maintain tax, accounting, transaction, and compliance records.

Legitimate interests: to prevent fraud, secure our website, improve our services, and manage ordinary business operations, where these interests do not override your rights.

Consent: where required, including for optional cookies and certain marketing communications. You may withdraw consent at any time.

Marketing Communications

Where you have consented to receive marketing communications, we may use your email address to send product news, offers, and other updates from Shavys.

You may withdraw your consent at any time by using the unsubscribe link in the email or contacting us at shavys@shavys.be. Withdrawing consent does not affect processing carried out before withdrawal.

Payment Processing

Payments are processed by Shopify Payments and/or other payment service providers made available during checkout.

We do not ordinarily receive or store complete payment-card details. Payment providers process payment information according to their own privacy notices and security requirements.

Sharing of Personal Data

We may share your data to service providers and other recipients where necessary for the purposes described in this policy.

Shipping and delivery providers
Payment service providers
Website hosting providers
Legal or regulatory authorities where required by law
Shopify and website-hosting providers
analytics providers
email-marketing providers
fraud-prevention and security providers
professional advisers, accountants, or insurers
review providers such as Judge.me
payment providers and delivery companies

We do not sell or rent your personal data to third parties.

Cookies

Our website uses cookies and similar technologies to improve user experience and website functionality.

Cookies may be used for:

Website performance
Shopping cart functionality
Analytics and website improvement
Security purposes

Where required by law, optional analytics, advertising, and similar cookies will not be placed until you provide consent through our cookie banner. Strictly necessary cookies may be used without consent because they are required for essential website functions. You can review or change your preferences through the cookie-settings tool available on our website.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing support, complying with legal, accounting, and tax requirements, resolving disputes, preventing fraud, and enforcing agreements.

Retention periods vary depending on the type of information and the applicable legal obligation. When personal data is no longer required, it will be deleted, anonymised, or securely restricted, unless continued retention is required by law.

Fulfil orders
Provide customer support
Meet legal, accounting, and tax obligations
Resolve disputes and enforce agreements

Your Rights Under GDPR

If you are located within the European Economic Area (EEA), you have the right to:

Access your personal data
Correct inaccurate information
Request deletion of your personal data
Restrict processing of your personal data
Object to certain processing activities
Request data portability
Withdraw consent where processing is based on consent
data portability;
the right to lodge a complaint with a supervisory authority;
rights concerning automated decision-making, where applicable.

These rights are subject to conditions and exceptions under applicable law. We may request information necessary to verify your identity before responding.

You also have the right to lodge a complaint with the Belgian Data Protection Authority if you believe that your personal data has been processed unlawfully.

To exercise any of these rights, please contact us using the details provided below.

Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, disclosure, or alteration.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Some service providers may process personal data outside Belgium or the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, appropriate safeguards may be used, such as European Commission standard contractual clauses, together with any supplementary measures required by law.

Third-Party Services

Our store is hosted through Shopify, and we may use third-party services for payments, delivery, analytics, marketing, reviews, fraud prevention, and customer support. These providers may process personal data on our behalf or, in some cases, as independent data controllers. Their processing is governed by applicable law and their own privacy notices.

Children's Privacy

Our website and products are not directed at children under 16, and we do not knowingly collect personal data directly from children for marketing or account purposes. If you believe a child has provided personal data to us, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, legal obligations, or data-processing practices. The updated version will be published on this page with a revised effective date.