Draft — to be completed with the company details and checked by a lawyer before launch.
Privacy policy
Last updated: 8 November 2026
1. Who is responsible
For your own account data, [company name] is the controller. For the data you enter about your customers and staff, your business is the controller and we process it on your behalf; the data-processing terms are part of our terms of service.
2. What we collect
Your name, e-mail address and a hashed password; your store details; technical data such as IP address, browser and login times; and, when you pay, the payment confirmation from our payment provider. We never see or store your card number.
3. Why we use it
To provide the service, to keep accounts safe (login codes, locking after wrong passwords, change log), to bill the subscription, to help you when you ask, and to meet our legal duties.
4. Legal basis
Our contract with you, our legitimate interest in security and preventing misuse, and our legal obligations (for example keeping invoices).
5. Where the data is
On servers in the European Union. We use a small number of service providers (hosting, e-mail sending, payments); the current list is available on request.
6. How long we keep it
As long as your account exists and 90 days after. Invoices are kept for seven years as Belgian law requires. The change log is kept as long as the account exists.
7. Your rights
You can ask to see, correct, export or delete your data, and object to some uses. Write to [privacy e-mail]. You can also complain to the Belgian Data Protection Authority.
8. Cookies
We only use cookies that the service needs: your login session and, if you choose it, "remember this computer" for 30 days. Your language and theme are kept in your browser. No advertising or tracking cookies.
9. Security
Connections are encrypted, passwords and codes are stored only as hashes, every change is logged, and data is backed up every day.
10. Changes and contact
We announce important changes by e-mail. Questions: [privacy e-mail].