Privacy · the way it should be

Your data. Your business.

We only collect what is needed to deliver your order, we never sell anything on, and you can always view or erase everything. Below you can read exactly how that works, with each part in plain language too.

Last updated: 23 October 2026Reading time: ± 5 minutesGDPR-compliant
In short
✓
Only what is neededName, address and email: what we need to deliver your order. We do not ask for more.
🚫
Never sold, to anyoneYour data only goes to bpost (delivery), the payment provider and Shopify. Never to advertisers or data brokers.
🗑
Erasure is always possibleOne email and we delete your data, except what we are legally required to keep for accounting.
🔒
Secured with SSLEverything you enter with us is sent encrypted and stored with appropriate security.
📬
Newsletter? Only with your yesWe only send marketing if you explicitly opted in yourself. Unsubscribing is always one click away.
⚖
Complaints welcome, officially tooNot happy with how we handle your data? Email us, or file a complaint with the Data Protection Authority.

This summary is a reading aid. The full policy below is leading.

1Controller

This privacy policy describes how Goedkoopverzenden BV collects, uses and protects your personal data when you visit goedkopecosmetica.be or place an order.

Data controller
Goedkoopverzenden BV
Address
Provincieweg 360, 9550 Herzele, Belgium
Company number
BE 1021.672.591
Contact
arnejmalfait@gmail.com
In plain language: we, Goedkoopverzenden BV, are responsible for your data on this site, and you can contact us about it directly.

2What data do we collect?

When you place an order or contact us, we collect:

  • First name and surname
  • Email address and delivery address
  • Phone number (only if you provide it yourself)
  • Company name and VAT number (only for business orders)
  • Order history
  • Payment details: these are processed by our payment provider and never stored by us

In addition, we automatically collect limited technical data: IP address, browser type and page visits (via cookies, see our cookie policy). When you place an order, we also record which page and which website or search engine brought you to us.

In plain language: we know what is needed to deliver your parcel, and nothing more. We literally do not know your card number, only the payment provider sees that.

3What do we use your data for?

  • Processing and delivering your order
  • Sending an order confirmation, shipping information and invoice
  • Customer service and handling questions, complaints or returns
  • Complying with legal obligations (accounting, and the traceability of cosmetic products required by the European Cosmetics Regulation, based on quantities and batches sold, without personal data)
  • Improving our website and service, including by checking through which pages and channels orders come in
  • Sending newsletters and offers, only with your explicit consent

The legal bases for this are the performance of the contract, our legal obligations, our legitimate interest (improving the website, preventing fraud) and your consent (newsletter, non-essential cookies).

In plain language: delivering, keeping you informed about your order and helping you if something comes up. Advertising only if you said "yes" to it yourself.

4Do we share your data with third parties?

Your personal data is never sold. We only share it with parties needed to fulfil your order:

  • bpost: delivery of your order; receives only name and delivery address.
  • Payment providers (Shopify Payments, Bancontact and others): secure processing of your payment.
  • Shopify: our hosting and e-commerce platform, on which this webshop runs.
  • Our accountant: only the invoice details required by law.

All these parties are bound by data processing agreements in accordance with the GDPR. Where data is processed outside the European Economic Area (for example by Shopify), this is done on the basis of the European Commission's standard contractual clauses.

In plain language: a handful of parties, each with a clear task, each contractually bound by privacy law. Data brokers and advertisers get nothing.

5How long do we keep your data?

  • Order and invoice data: 7 years (legal accounting retention obligation)
  • Account data: as long as your account is active
  • Messages via the contact form: at most 2 years after handling
  • Newsletter data: until you unsubscribe
In plain language: the tax authorities require us to keep invoices for 7 years, which applies to every Belgian shop. The rest disappears as soon as it is no longer needed.

6Your rights (GDPR)

AccessRequest which data we hold about you.
RectificationHave incorrect data corrected.
ErasureHave your data deleted ("right to be forgotten").
RestrictionHave the processing of your data restricted.
PortabilityReceive your data in a readable format.
ObjectionObject to direct marketing, always possible.

To exercise your rights, send an email to arnejmalfait@gmail.com. To protect your data, we may ask for additional verification of your identity. We respond within 30 days, in practice much faster.

In plain language: want to view, correct or erase everything? One email. No forms, no hassle.

7Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or theft. Our website uses SSL encryption for a secure connection, and access to order data is limited to the people who need it to process your order.

In plain language: the padlock in your browser is not for show: everything you enter is sent encrypted.

8Cookies

Our website uses cookies. In our cookie policy you can read exactly which cookies we use, what for, and how to manage your preferences.

In plain language: the short version is on one separate, equally clear page.

9Changes

We reserve the right to change this privacy policy. Changes are published on this page, with an updated date. In case of major changes, we inform active customers by email.

In plain language: if something important changes, you will hear it from us. You do not need to keep an eye on this page yourself.

10Complaints

If you have a complaint about the processing of your personal data, please contact us via arnejmalfait@gmail.com. You also always have the right to file a complaint with the Belgian Data Protection Authority (GBA), Drukpersstraat 35, 1000 Brussels.

In plain language: feel free to come to us first, we will solve it. And if that does not work, the official route via the GBA is always open.
Question about your data?Access, correction or erasure: one message is enough and we sort it out in no time.
Get in touch