Data controller
BODYSUN SRL (Bodywash), Avenue Georges Henri 188, 1200 Woluwe-Saint-Lambert, Belgium. Contact: contact@bodywash.be.
Data we collect
When you order: your name, email address, optionally your phone number, and for businesses the company name, VAT number and billing address. Through the contact form: your name, email address, optionally your phone number and your message.
Purposes and legal basis
We use this data to fulfil your order, issue and send your invoice and answer your questions (performance of the contract, article 6.1.b GDPR). We keep invoices because accounting law requires it (article 6.1.c GDPR).
We don’t send advertising and never sell your data.
Recipients
Your data is only shared with the service providers we need, acting as processors:
- Stripe, for secure payment;
- Hostinger, for hosting the website in the European Union;
- Recommand, for sending invoices to businesses via the Peppol network;
- CBE API, to look up company details in the Crossroads Bank for Enterprises based on the VAT number;
- our accountant.
Retention
Invoices and the related order data are kept for 10 years, as accounting law requires. Contact form messages are kept for up to 1 year.
Cookies
The site only uses technical cookies needed for the security of forms and payment. Stripe may set its own cookies during payment to prevent fraud.
Your rights
You can ask at any time to access, correct or delete your data, or object to its processing, at contact@bodywash.be. Invoices must however be kept by law.
You can also file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).