Privacy & Cookie Policy
This policy explains how personal data is handled when you visit the Woeste Wortel website, place an order, contact us, request a commission or subscribe to communications.
1. Who is responsible for your data?
For the Woeste Wortel activity and webshop, the responsible seller/data controller for the processing it determines is Starterslabo Limburg & Vlaams-Brabant cv so - Starterslabo Limburg, in connection with the Woeste Wortel activity operated by Robin Vandersteen as candidate entrepreneur during the stated Starterslabo period.
Address: Windekestraat 1, 3600 Genk, Belgium. VAT: BE 0876.478.439. Privacy/customer contact: info@woestewortel.com. Telephone: +32 (0) 496061243.
External service providers such as Shopify, payment providers, carriers, production/fulfilment partners and other technical providers may act as processors and/or independent controllers for their own processing, depending on the service.
2. Personal data we may collect
Depending on how you use the website or shop, we may process identification and contact details such as your name, billing and delivery address, email address and telephone number; order and transaction information; correspondence and customer-service information; commission-related information you choose to provide; newsletter or marketing preferences; and technical information such as IP address, browser/device information and website activity where permitted.
Payment information is processed through the payment services available at checkout. We do not normally receive or store your complete payment card number.
3. Why we use personal data and legal bases
We process personal data to perform contracts and take steps requested before a contract, including processing orders, arranging payment, producing or fulfilling products, shipping orders, handling returns and communicating about commissions.
We process information where necessary to comply with legal obligations, including accounting, tax, fraud-prevention and consumer-law obligations.
Where appropriate, we may process data based on legitimate interests, such as securing the website, preventing abuse, keeping necessary business records and improving customer service, provided those interests are not overridden by your rights.
Where consent is legally required, for example for certain marketing communications or non-essential cookies, we rely on consent. You can withdraw consent at any time without affecting processing that was lawful before withdrawal.
4. Who may receive your data?
We share personal data only where reasonably necessary for the purposes described above. Recipients may include Shopify and website hosting/e-commerce service providers; payment service providers; printing, apparel production and fulfilment partners; postal, courier, specialist art transport and delivery providers; professional framers where framing has been ordered; accountants, professional advisers or Starterslabo administration where necessary; email/newsletter service providers if used; and public authorities where disclosure is legally required.
We do not sell personal data to advertisers.
5. International data transfers
Some service providers may process data outside the European Economic Area. Where personal data is transferred internationally, the relevant controller or processor is expected to use a lawful transfer mechanism and appropriate safeguards where required by the GDPR.
For details about a specific platform’s international processing, please refer to that provider’s privacy information in addition to this policy.
6. How long we keep data
Personal data is kept only for as long as necessary for the purpose for which it was collected and for any period required by applicable accounting, tax, consumer or other legal obligations.
Order and invoice records may therefore be retained for the legally required record-keeping period. Customer-service and commission correspondence is retained for as long as reasonably necessary to handle the relationship, resolve disputes and protect legal rights. Marketing data is retained until you unsubscribe, withdraw consent or it is no longer reasonably needed, subject to limited suppression records needed to respect an opt-out.
7. Your data protection rights
Subject to the conditions in applicable data-protection law, you may have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and to object to certain processing. Where processing is based on consent, you may withdraw that consent.
To exercise a privacy right, contact info@woestewortel.com. We may ask for information reasonably necessary to verify your identity before acting on a request.
8. Complaints
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection authority. In Belgium, this is the Belgian Data Protection Authority / Gegevensbeschermingsautoriteit (GBA/APD).
9. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction or damage. No online system can be guaranteed to be completely risk-free.
10. Cookies and similar technologies
The website may use essential cookies required for functions such as security, checkout, shopping-cart operation and preference storage. Essential cookies may be used where legally permitted without optional consent.
Analytics, advertising, social-media or other non-essential cookies and similar technologies will be used only in accordance with applicable consent requirements. The website should provide a cookie consent mechanism that allows visitors to accept or reject relevant non-essential categories and to change their preferences later.
The exact cookies used can change when website apps or integrations change. The live cookie banner and cookie settings should therefore be kept aligned with the actual Shopify configuration.
11. Newsletter and marketing
If you choose to subscribe to a newsletter or other marketing communications, we may use your contact details to send those communications in accordance with the consent or other lawful basis that applies. You can unsubscribe at any time using the unsubscribe option in the communication or by contacting info@woestewortel.com.
Unsubscribing from marketing does not prevent us from sending service messages that are necessary to process an order or answer a request.
12. Third-party links and embedded services
The website may link to social-media platforms, external websites or third-party services. Those third parties process data under their own privacy policies. Woeste Wortel is not responsible for independent third-party websites or services outside its control.
13. Children
The Woeste Wortel webshop is not intentionally designed to collect personal data from children who cannot legally provide the relevant consent or enter into the transaction independently. If you believe a child has provided personal data inappropriately, please contact us so the situation can be assessed.
14. Updates to this policy
This privacy policy may be updated when website functionality, service providers or legal requirements change. The latest version and update date should be published on the website.
