Privacy Policy (GDPR)

1. Data Controller

The controller responsible for the processing of personal data is:

Untold SRL
Rue Rioul 36
4500 Huy, Belgium
hello@untoldsway.com

2. Data Collected

We may collect the following data:

First and last name
Billing address
Delivery address
Email address
Phone number
Order-related information
IP address
Purchase history

Payment data is processed by our secure payment service providers. We do not store complete bank card details.

3. Purposes of Processing

The data is used to:

Manage orders and deliveries
Provide customer service
Issue invoices
Comply with our legal obligations
Prevent fraud
Manage contact requests
Send commercial communications when the customer has given consent

4. Legal Basis

The processing is based on:

The performance of the sales contract
Compliance with legal obligations
The customer’s consent for marketing communications
Our legitimate interest in ensuring the security and improvement of the website

5. Data Recipients

The data may be shared with:

Payment service providers
Hosting providers
Carriers responsible for deliveries
Accounting or tax advisors
Competent authorities where required by law

6. Data Transfers

Some technical service providers may be located outside the European Union. Where this is the case, appropriate safeguards are implemented in accordance with the GDPR.

7. Data Retention Period

Data is retained for the period necessary to fulfil the purposes described above and in accordance with applicable legal obligations.

Accounting and tax documents are retained according to the applicable legal retention periods.

8. Your Rights

You have the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
Right to data portability
Right to withdraw your consent

Any request may be sent to: hello@untoldsway.com

9. Complaints

You may submit a complaint to the Data Protection Authority if you believe that your rights have not been respected.