VANPAUL BV (hereinafter "VANPAUL", "we", "us" or "our") cares deeply about protecting your personal data. This privacy policy explains what personal data we collect, why we collect it, how we use it, and what rights you have.

This privacy policy applies to our online store, our services, and all interactions you have with us (for example via email, customer service, or our website).

1. Who is responsible for your data?

The data controller responsible for your personal data is:

VANPAUL BV Email: info@vanpaulantwerp.com

For any questions about this privacy policy or the processing of your personal data, please contact us at the email address above.

2. What personal data do we collect?

Depending on how you interact with our online store, we may collect the following data:

• Identification data: first and last name
• Contact details: email address, phone number, billing address, delivery address
• Order data: details of your orders (products, sizes, amounts, order history)
• Payment data: processed via our payment provider (Shopify Payments and/or other connected payment services); we do not store your full card details ourselves
• Account data: if you create a customer account on our online store
• Communication data: messages you send us via email, contact form, or customer service
• Browsing data: IP address, browser and device type, pages visited, time and duration of your visit, collected via cookies and similar technologies (see section 6)
• Marketing preferences: if you subscribe to our newsletter

3. How do we collect your data?

We collect your personal data when you:

• place an order in our online store;
• create an account;
• subscribe to our newsletter;
• contact us (via email or contact form);
• visit our website (via cookies and analytics tools).

4. Why do we process your data, and on what legal basis?

Purpose	Legal basis
Processing and following up on your order, delivery, and invoicing	Performance of the contract
Customer service and answering your questions	Performance of the contract / legitimate interest
Managing your customer account	Performance of the contract
Sending newsletters and marketing communications	Your consent (opt-in)
Analyzing and improving our website (Google Analytics)	Your consent via cookie banner
Targeted advertising (Meta/Facebook and Instagram Pixel)	Your consent via cookie banner
Fraud prevention and compliance with legal obligations (accounting, VAT)	Legal obligation / legitimate interest

You can withdraw your consent for marketing communications and non-essential cookies at any time (see section 9).

5. Who do we share your data with?

We never sell your personal data to third parties. We may share your data with carefully selected partners who support our business, including:

• Shopify Inc., our e-commerce platform provider, which hosts and technically operates our online store;
• Payment providers (e.g. Shopify Payments), to securely process payments;
• Carriers/shipping companies, to deliver your order;
• Google (Google Analytics), for website statistics and analysis;
• Meta Platforms (Facebook/Instagram Pixel), for targeted advertising and measuring the effectiveness of our campaigns;
• IT and accounting service providers, where necessary for our business operations.

These parties may only use your data for the purposes for which we engage them, and are contractually required to handle your data confidentially and securely.

Some of these partners (such as Google and Meta) may process data outside the European Economic Area (EEA), including in the United States. In such cases, we and our partners ensure appropriate safeguards, such as the EU Standard Contractual Clauses, to guarantee an adequate level of protection for your data.

6. Shipping

We currently ship exclusively within the European Union. Your delivery information is therefore not transferred outside the EU for shipping purposes.

7. Cookies and similar technologies

Our online store uses cookies to:

• ensure the website functions properly (essential cookies);
• analyze the use of our website via Google Analytics;
• show personalized advertisements via the Meta (Facebook/Instagram) Pixel.

Non-essential cookies are only placed after your explicit consent via our cookie banner. You can adjust your preferences at any time via your browser's cookie settings or our cookie banner.

8. Retention period

We do not retain your personal data longer than necessary for the purposes for which it was collected:

• Customer account and order data: for the duration of your customer relationship and up to 7 years after your last order, in accordance with our legal accounting obligations;
• Marketing and newsletter data: until you unsubscribe or withdraw your consent;
• Data collected via cookies: according to the retention periods of the relevant cookie (see cookie banner for details).

After these periods expire, your data will be securely deleted or anonymized, unless a longer retention period is legally required.

9. Your rights

Under applicable privacy legislation (including the General Data Protection Regulation - GDPR), you have the right to:

• request access to the personal data we process about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data;
• restrict the processing of your data;
• object to the processing of your data (for example, for direct marketing purposes);
• request the transfer of your data to another controller (data portability);
• withdraw your consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal;
• lodge a complaint with the competent supervisory authority — in Belgium, this is the Data Protection Authority (www.gegevensbeschermingsautoriteit.be).

You can exercise these rights free of charge by contacting us at info@vanpaulantwerp.com.

You can unsubscribe from our newsletter at any time via the "unsubscribe" link at the bottom of every marketing email.

10. Data security

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, alteration, or destruction.

11. Minors

Our online store is not directed at individuals under the age of 16. If you are under 16, you must have the consent of a parent or legal guardian to provide us with personal data.

12. Changes to this privacy policy

We may update this privacy policy from time to time. The most recent version will always be available on our website. Where relevant, we will actively communicate significant changes to you.

13. Contact

For any questions, requests, or complaints regarding this privacy policy or the processing of your personal data, please contact us at:

VANPAUL BV Email: info@vanpaulantwerp.com

Last updated: August 11, 2026