Privacy Policy
Last updated: March 2026
We take the protection of your personal data seriously. This policy explains what data we collect, why, and what your rights are.
Data controller
GANTOISE vzwNoorderlaan 25, 9000 GhentVAT: BE0409025343secretariaat@gantoise.be
Data we collect
Account
- Name
- Phone
- Password (hashed)
Orders
- Address
- Order history
- Payment references
Technical
- IP address
- Browser
- Language preference
Purposes
Order processing & delivery
Order communication
Account management
Legal obligations (accounting, VAT)
Recipients
StripePayment processing (PCI DSS)
ResendEmail delivery
BpostPackage shipping
We never sell your data to third parties.
Retention
- Order data: 7 years (legal requirement)
- Account data: duration of account + 30 days
Your rights (GDPR)
Access
Rectification
Erasure ("right to be forgotten")
Restriction
Portability
Objection
Contact: secretariaat@gantoise.be
Belgian Data Protection Authority: www.dataprotectionauthority.be
Security
Passwords hashed (bcrypt)
HTTPS everywhere
Stripe PCI DSS Level 1
Role-based access control