Privacy policy

This Privacy Policy explains how Blue Mees collects and processes your personal data when you visit our website, create an account, place an order, contact us or otherwise use our online store.

1. Who Is Responsible for Your Personal Data?

Blue Mees is the data controller responsible for the processing of your personal data through shopify admin services and limitations.

For questions about your personal data or to exercise your privacy rights, please contact us using the email address info@bluemees.be.

2. Personal Data We Process

Depending on how you use our website and services, we may process:

  • your name;
  • email address and telephone number;
  • billing and delivery address;
  • order and transaction information;
  • payment status and payment-related information;
  • customer account information;
  • communications you send to us;
  • IP address, browser, device and website usage information;
  • cookie and consent preferences.

Payment information is processed through our payment service providers. We do not generally receive or store your complete payment card details.

We receive personal data directly from you when you place an order, create an account, contact us or otherwise provide information to us. Certain technical and transaction information may also be provided through Shopify and other service providers used to operate our store.

3. Why We Process Your Personal Data

We process personal data only where we have a valid legal basis.

Orders and Payments

We process your contact, delivery, order and payment information because it is necessary to enter into and perform our contract with you.

This includes:

  • processing your order;
  • processing payments;
  • arranging delivery;
  • providing order updates;
  • processing returns and refunds;
  • managing your customer account.

Customer Service

We process information contained in your communications with us in order to respond to questions, requests, complaints and issues relating to your order.

Depending on the request, this processing is necessary for the performance of our contract with you or for our legitimate interest in providing customer service.

Legal and Accounting Obligations

We process and retain certain order, transaction and invoice information where necessary to comply with Belgian and European tax, accounting and other legal obligations.

Security and Fraud Prevention

We may process account, transaction and technical information where necessary for our legitimate interest in protecting our website, customers and business against fraud, misuse and security threats.

Marketing

Where consent is required, we send marketing communications only after you have provided your consent.

You can withdraw your consent or unsubscribe from marketing communications at any time.

Where applicable law permits us to contact existing customers without separate consent, we may process the relevant information on the basis of our legitimate interests, subject to your right to object.

Cookies, Analytics and Advertising

Cookies and similar technologies that are strictly necessary for the operation of our website may be used without consent where permitted by law.

Non-essential cookies or similar technologies used for analytics, advertising or other optional purposes are used only after obtaining your consent where required by law.

You can change or withdraw your cookie consent through the cookie preference settings available on our website.

4. Information Required to Place an Order

Certain personal information, such as your name, contact details, delivery address and payment information, is necessary for us to process and fulfil your order.

If you do not provide the required information, we may not be able to enter into or perform the purchase contract with you.

5. Who We Share Personal Data With

We share personal data only where necessary for the operation of our store, fulfillment of your order or compliance with legal obligations.

This may include:

  • Shopify, which provides our ecommerce platform;
  • payment service providers;
  • shipping and delivery providers;
  • IT and technical service providers;
  • accounting and professional service providers;
  • marketing or analytics providers where the required consent has been obtained;
  • government authorities or other parties where disclosure is required by law.

These parties receive only the personal information necessary for the relevant purpose.

6. Shopify

Our online store is hosted by Shopify.

Shopify processes personal data in connection with your use of our store in order to provide the ecommerce infrastructure and services necessary to operate the website, checkout, customer accounts and order processing.

For further information about Shopify's processing of personal data, please refer to the Shopify Consumer Privacy Policy.

7. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the EEA that has not been recognised by the European Commission as providing an adequate level of data protection, appropriate safeguards will be used as required by applicable data protection law.

These safeguards may include the European Commission's Standard Contractual Clauses.

You may contact us if you would like further information about safeguards relating to international transfers of your personal data.

8. How Long We Keep Your Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected and for as long as required by applicable law.

Order, transaction, invoice and accounting information is retained for the period required under Belgian tax and accounting legislation.

Customer service information is retained for as long as reasonably necessary to resolve the relevant request or dispute and to protect our legal rights.

Account information may be retained for as long as your customer account remains active, subject to applicable legal retention requirements.

Where processing is based on consent, we process the relevant information until you withdraw your consent, unless another legal basis requires or permits us to retain it.

9. Your Privacy Rights

Under the General Data Protection Regulation (GDPR), you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • object at any time to processing for direct marketing purposes;
  • receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another organisation;
  • withdraw your consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights may be subject to conditions or exceptions under applicable law.

To exercise your rights, please contact us using the email address listed at the beginning of this Privacy Policy.

We may request information necessary to verify your identity before responding to your request.

10. Complaints

If you believe that we have processed your personal data in violation of applicable data protection law, please contact us so that we can investigate your concern.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

For Blue Mees in Belgium, the supervisory authority is:

Belgian Data Protection Authority
Gegevensbeschermingsautoriteit / Autorité de protection des données

You may also contact the competent supervisory authority in another EU or EEA country where applicable.