← Back to the shop

Privacy policy

Last updated: TODO_LEGAL_LAST_UPDATED

TEMPLATE: must be reviewed before going live This text is a starting point, not legal advice. Check it against the services you really use (hosting, email, carrier, accountant), fill in every highlighted value in config.js, then delete this yellow box.

We respect your privacy. This policy explains which personal data we process when you visit this website or buy from us, why, and what your rights are under the EU General Data Protection Regulation (GDPR).

1. Who is responsible?

The controller of your personal data is:

2. The short version

• This website uses no cookies, no analytics, no tracking pixels and no advertising tools.
• Fonts and images are served from our own website, so no data is sent to Google or other third parties when you browse.
• If you join our waitlist, your email address is stored with our email service Brevo, only to tell you about the launch, send your discount code and share our news. You can unsubscribe at any time.
• Payments are handled entirely by Stripe. We never see or store your card details.
• We only use your data to deliver your order, answer your questions and meet our legal obligations. We never sell it.

3. What we process and why

a) Visiting the website

When you open this website, our hosting provider (TODO_HOSTING_PROVIDER) automatically processes technical data that your browser sends, such as your IP address, the date and time, the page requested and your browser type. This is necessary to deliver the website and protect it against abuse.

Legal basis: our legitimate interest in a secure, working website (art. 6(1)(f) GDPR). Retention: server logs are kept by the hosting provider for a short period only, according to its own policy.

b) Placing an order

When you click “Buy now”, you are taken to a secure checkout page operated by Stripe. There you enter your name, email address, shipping address, (if requested) phone number and payment details. Stripe processes the payment and shares the order details with us (name, email, shipping address, product and amount, but not your full card number).

We use this data to process and ship your order, send you order and shipping updates, handle returns and refunds, and keep the accounting records required by law.

Legal basis: performance of the contract with you (art. 6(1)(b) GDPR) and our legal obligations under Belgian accounting and tax law (art. 6(1)(c) GDPR).

c) Payment processing by Stripe

Payments are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe acts partly on our behalf and partly as an independent controller (for example for fraud prevention and its own legal obligations, which may include automated fraud screening). On its checkout pages Stripe uses cookies that are needed to process the payment securely. More information: stripe.com/privacy.

d) Shipping

To deliver your parcel, we pass your name, shipping address and (where the carrier needs it for delivery notifications) your email address or phone number to our shipping carrier (TODO_CARRIER). Legal basis: performance of the contract (art. 6(1)(b) GDPR).

e) Contacting us

If you email us, we process your email address, name and the content of your message to answer you. Legal basis: performance of the contract or pre-contractual steps (art. 6(1)(b) GDPR) or our legitimate interest in answering questions (art. 6(1)(f) GDPR).

f) Customer reviews

If you send us a review and agree that we publish it, we show your first name and initial, country, the date, your rating, your text and, if you sent one, your photo. Legal basis: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time by emailing us; we will then remove the review.

g) Joining the waitlist

If you join the waitlist for our product, we process your email address, the option you prefer (only if you choose one), and the date, time and IP address of your sign-up and confirmation, so that we can prove your consent. We use this to email you when the product launches (including your waitlist discount code) and to send you occasional news from Ravens Accessories.

When you submit the form, your browser sends this data directly to our email service provider Brevo (Brevo SAS, France), which stores it on our behalf as a processor. You only join the list after clicking the link in the confirmation email we send you (double opt-in). Every email we send contains an unsubscribe link.

Legal basis: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time by unsubscribing or by emailing us. Retention: until you unsubscribe or withdraw your consent; after that we keep only what is needed to prove your earlier consent and to respect your opt-out. More information about Brevo: brevo.com/legal/privacypolicy.

4. Cookies and similar technologies

This website does not set any cookies and does not store anything in your browser's storage. That is why you do not see a cookie banner. Submitting the waitlist form sends your data to Brevo but does not place cookies. When you continue to Stripe's checkout page, Stripe's own cookie policy applies there.

5. Who receives your data?

Only the parties needed to run our shop: Stripe (payments), Brevo (waitlist emails), our hosting provider, our shipping carrier, our email provider (TODO_EMAIL_PROVIDER) and our accountant. They may only use your data for these purposes. We disclose data to authorities only when we are legally required to.

6. Transfers outside the EU

Some of these providers (for example Stripe or the hosting provider) may process data outside the European Economic Area, in particular in the United States. In that case the transfer is protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) and/or the European Commission's Standard Contractual Clauses.

7. How long do we keep your data?

• Order and invoice data: TODO_RETENTION_PERIOD, as required by Belgian accounting and tax law.
• Emails with questions: up to 2 years after our last contact, unless they relate to an order (then as above).
• Waitlist sign-ups: until you unsubscribe or withdraw your consent.
• Published reviews: until you withdraw your consent.

8. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability and to withdraw consent at any time (without affecting processing before the withdrawal). To exercise these rights, email TODO_SUPPORT_EMAIL. We reply within one month.

You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données): www.dataprotectionauthority.be, or with the supervisory authority in the EU country where you live.

9. Security

This website is only served over an encrypted connection (HTTPS). Payment data is processed exclusively by Stripe, which is certified to the PCI DSS Level 1 security standard.

10. Changes

We may update this policy when our services or the law change. The date at the top shows the latest version.