Privacy Policy

Updated on: September 7, 2025

Introduction
Cre8Magnets (hereinafter referred to as “we,” “us,” or “our”) places great importance on the protection of your personal data. In this Privacy Policy, we explain which personal data we collect, for what purposes, how we protect it, and what rights you have. This policy has been drafted in accordance with the General Data Protection Regulation (GDPR) and Belgian law.

1. Data Controller
   Cre8Magnets,
   Cre8Magnets/Kristof Van Rijckeghem
   Gaverlandstraat 56, 9031 Drongen
   Company Registration Number: BE0860154725
   E-mailadress: info@cre8magnets.com
2. What Data Do We Collect and Why?
   We only collect and process the personal data that is strictly necessary for the provision and proper execution of our services.

Types of Data	Purpose of Processing	Legal Basis
Name, address, email	Fulfillment of the purchase agreement: delivery of products, invoicing, communication regarding your order	Performance of the agreement
Phone Number	Ability to contact you in case of delivery issues	Performance of the agreement
IP- address, browser data	Website security, analysis of visitor behavior (anonymized where possible), and improvement of our services.	Legitimate interest
Payment information	Processing of payment. We do not store this data directly; it is handled by our payment provider.	Performance of the agreement
Photos/designs uploaded by you	Production of you personalized product	Performance of the agreement

Remark: For marketing emails (newsletter), we ask for your explicit consent (opt-in) before we send them.

3. With whom do we share your data?
   Your data will never be sold outright. We only share your data with third parties that are essential for the performance of our service, and only with the necessary security contracts (data processing agreements) in place:

• WooCommerce: Our online store is hosted on WooCommerce. They store your data on secure servers. WooCommerce's processing complies with the GDPR.
• Payment providers (such as Mollie). These parties process the payment. We only receive a confirmation, not your card details.
• Shipping partners (such as Bpost, GLS). We only share your name and address for the purpose of delivering your package.
• Email marketing tools: (if applicable). Only if you have subscribed to the newsletter.

Some of these parties (such as WooCommerce) may process data outside of the EEA (in the US). They do so based on the Standard Contractual Clauses (SCCs) approved by the European Commission, which is a valid mechanism for data transfer.

4. Data retention periods
   We do not retain your data for longer than is strictly necessary:

• Personal data in invoices: 10 years (legal obligation).
• Order-related data: 2 years after the last interaction (based on warranty obligations).
• Your uploaded designs: 6 months after delivery (to facilitate potential reorders, unless you request for them to be deleted sooner).
• Newsletter data: until you unsubscribe.

5. Your rights
   You have extensive rights over your data:

• Right of Access: You may ask at any time what data we have about you.
• Right to Rectification: You can have incorrect data corrected.
• Right to Erasure ("Right to be Forgotten"): You can request to have your personal data deleted. Please note: we are legally required to retain invoices for 10 years. Please note: we are legally required to retain invoices for 10 years.
• Right to Restriction of Processing: You can ask to temporarily stop the processing (e.g., during a dispute).
• Right to Data Portability: You can request your data in a machine-readable format.
• Right to Object: You can object to processing based on legitimate interest (such as direct marketing).

To exercise one of these rights, please contact us at the email address in article 1. We will respond within one month.

6. Cookies
   Our website uses cookies: small files that are stored on your device.

• Functional cookies: necessary for the operation of the shopping cart and the checkout process.
• Analytical cookies: (Google Analytics) We use these anonymously to see how visitors use the site so that we can improve it.
• Marketing cookies: used to display relevant advertisements (e.g., on social media).

On your first visit, we ask for your consent for the use of non-essential cookies. You can always adjust your consent later via the cookie settings in your browser.

7. Security
   We take appropriate technical and organizational measures to protect your data against loss, misuse, or unauthorized access. This includes encryption (SSL), restricted access to data, and careful selection of processors.
8. Automated decision-making
   Our business operations do not involve automated decisions or profiling that could have a significant impact on our customers (such as the automatic refusal of an order).
9. Changes to this policy
   We reserve the right to amend this privacy policy. The most recent version can always be found on our website. In the event of substantial changes, we will actively inform you about them.
10. Contact & Complaints
    If you have questions about this privacy policy or how we handle your data, please contact:
    E-mail: info@cre8magnets.com

If you are not satisfied with our response, you have the right to file a complaint with the Belgian Data Protection Authority (DPA):
Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussel
+32 (0)2 274 48 00
contact@apd-gba.be