Privacy policy
PRIVACY POLICY
Last updated: 10 October 2026
1. Introduction
Fialoré respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit our website, browse our online store, place an order, contact us or otherwise interact with our services.
This Privacy Policy applies to the Fialoré website and online store and is intended to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Belgian data protection legislation.
2. Data Controller and Contact Information
Fialoré is responsible for the processing of personal data in connection with the operation of our website and online store, in accordance with applicable data protection legislation.
Business name: Fialoré
Email: fialore.be@gmail.com
Website: https://fialore.be
Business address: Provided in the Legal Notice on our website.
For questions concerning this Privacy Policy or the processing of your personal data, you may contact us using the email address above.
3. Personal Data We Collect
Depending on how you interact with our website and services, we may collect the following categories of personal data:
• Identification and contact details: name, email address, telephone number and postal address.
• Order and transaction details: products purchased, order number, order history, billing and delivery addresses, returns, refunds and related transaction records.
• Payment-related information: payment status, transaction references and other information necessary to process or verify payments. Full payment card details are generally processed by the relevant payment provider rather than stored directly by Fialoré.
• Customer communications: information contained in emails, enquiries, complaints and other communications you send to us.
• Technical and usage data: IP address, browser type, device information, approximate location derived from technical information, website activity and security-related logs, where collected.
• Cookie and tracking information: information collected through cookies and similar technologies, subject to applicable legal requirements and your consent where required.
We do not intentionally request special categories of personal data, such as health information, for ordinary purchases.
4. How We Collect Personal Data
We collect personal data through the following means, where applicable:
• Directly from you when you place an order, complete a form, contact us or provide information through our website.
• Automatically when you browse or use our website, including through necessary technical technologies and, where applicable, analytics or other cookies.
• From service providers involved in processing payments, fulfilling orders, operating our website or providing customer support.
• From other parties involved in a transaction, where disclosure is lawful and necessary to provide our services.
5. Purposes and Legal Bases for Processing
We process personal data only where a lawful basis applies under the GDPR.
5.1. Processing and Delivering Orders
We use your personal data to accept and manage orders, process payments, arrange shipping, provide order confirmations and updates, manage returns and refunds, and provide customer support.
Legal basis: Performance of a contract with you and compliance with applicable legal obligations.
5.2. Customer Service and Communication
We use your contact details and correspondence to respond to questions, requests, complaints and enquiries concerning our products and services.
Legal basis: Performance of a contract, our legitimate interests in managing customer relationships, or another applicable legal basis, depending on the circumstances.
5.3. Legal, Tax and Accounting Obligations
We process and retain relevant information to comply with applicable Belgian and EU tax, accounting, consumer protection and other legal requirements, and to establish, exercise or defend legal claims where necessary.
Legal basis: Compliance with a legal obligation and, where applicable, our legitimate interests.
5.4. Website Operation, Maintenance and Security
We may use technical information to maintain the functionality of our website, protect our systems, identify technical errors, prevent fraudulent transactions and investigate security incidents.
Legal basis: Our legitimate interests in operating and securing our online store, where those interests are not overridden by your rights and freedoms, or consent where legally required.
5.5. Marketing and Promotional Communications
Where permitted by applicable law, we may use your contact details to send information about Fialoré products, promotions and news.
Where prior consent is required, we will obtain it before sending marketing communications. You may unsubscribe from marketing emails using the unsubscribe link, where available, or by contacting us.
You may object to the processing of your personal data for direct marketing at any time.
Legal basis: Consent where required by law, or another lawful basis where permitted.
5.6. Analytics, Advertising and Personalisation
If analytics, advertising or personalisation technologies are enabled on our website, they may process technical information and information about website usage for the purposes disclosed in the relevant cookie notice and consent settings.
Non-essential cookies and similar technologies will be used only where the required consent has been obtained.
Legal basis: Consent where required by applicable law, or another lawful basis where legally permitted.
6. Whether You Must Provide Personal Data
Some personal data is necessary for us to accept and fulfil an order, process payment, arrange delivery or comply with legal obligations.
If you do not provide the information necessary for these purposes, we may be unable to accept or fulfil your order or respond fully to your request.
Providing personal data for optional marketing activities is not a condition of purchasing our products.
7. Sharing Personal Data
We may disclose personal data to third parties where necessary for the purposes described in this Privacy Policy. These recipients may include:
• Shopify: the e-commerce platform used to operate our online store.
• Payment providers: services that process or facilitate payments.
• Delivery and logistics providers: services that deliver orders and manage shipments.
• IT, hosting and security providers: services that support the operation, maintenance and protection of our website and business systems.
• Analytics and advertising providers: where such services are actually used and their use is permitted by law.
• Professional advisers: such as accountants, auditors and lawyers, where necessary.
• Public authorities and legal bodies: where disclosure is required by law or necessary to establish, exercise or defend legal claims.
Service providers that process personal data on our behalf must be subject to appropriate contractual and legal safeguards.
Where a third party processes personal data for its own purposes, its own privacy policy and legal responsibilities may also apply.
We do not sell your personal data.
8. Shopify and E-Commerce Services
Our online store is hosted on and operated through Shopify. Shopify and its relevant service providers may process personal data to provide e-commerce functionality, manage orders, support payments, maintain security and deliver related services.
The processing carried out by Shopify may depend on the features and services enabled in our store and on the respective roles of Shopify and Fialoré under applicable data protection law.
For further information, please consult Shopify’s official privacy information:
https://www.shopify.com/legal/privacy
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies to provide essential website functionality, remember preferences, maintain shopping cart functionality, improve security and, where enabled, measure website usage or support advertising.
Strictly necessary cookies may be used where required to provide a service you have requested or to ensure the technical operation of the website.
We will request your prior consent before using non-essential cookies or similar technologies where required by Belgian and EU law. Continuing to browse the website does not, by itself, constitute valid consent.
You can manage or withdraw your cookie consent through the cookie preference settings made available on our website. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.
The specific cookies, their purposes, providers and retention periods should be described in the applicable cookie notice or cookie settings.
10. International Data Transfers
Some service providers involved in operating our online store may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we will ensure that the transfer complies with the GDPR and applicable law. Depending on the destination and circumstances, this may involve an applicable European Commission adequacy decision, standard contractual clauses or another lawful transfer mechanism.
Information about relevant safeguards may be requested by contacting us, subject to applicable legal requirements.
11. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable legal requirements, the nature of the data and the circumstances of the processing.
In particular:
• Order and transaction records: retained for the periods required by applicable Belgian tax, accounting and other legislation.
• Customer communications: retained for as long as necessary to respond to the enquiry, manage the customer relationship and address any related disputes or legal claims.
• Marketing information: retained while it is lawfully needed for the relevant marketing purpose, until you withdraw consent or object where applicable, subject to any necessary suppression records.
• Technical and security logs: retained for a period appropriate to the relevant operational or security purpose and applicable legal requirements.
• Cookie-related information: retained in accordance with the purposes, settings and retention periods applicable to the relevant cookies and technologies.
Where a precise retention period depends on the type of record or applicable legal requirements, we determine the appropriate period using these criteria.
When personal data is no longer required and there is no lawful reason to retain it, we delete it or irreversibly anonymise it.
12. Your Data Protection Rights
Subject to the conditions and limitations established by the GDPR and applicable Belgian law, you may have the following rights:
• Right of access: to obtain confirmation as to whether we process your personal data and access that data.
• Right to rectification: to correct inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data where the legal conditions are met.
• Right to restriction: to request that certain processing be restricted.
• Right to data portability: to receive certain personal data in a structured, commonly used and machine-readable format, where the legal conditions are met.
• Right to object: to object to processing based on legitimate interests and to direct marketing.
• Right to withdraw consent: where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Rights relating to automated decision-making: to benefit from the protections provided by the GDPR where decisions are made solely by automated means and produce legal or similarly significant effects.
These rights are not absolute and may be subject to legal exceptions.
13. How to Exercise Your Rights
To exercise your rights or ask questions about how your personal data is processed, contact us at;
Email: fialore.be@gmail.com
Please describe your request clearly so that we can understand and process it. We may ask for information reasonably necessary to verify your identity where this is required to protect your personal data.
We generally respond to requests within one month of receipt. Where permitted by the GDPR, this period may be extended by up to two further months because of the complexity or number of requests. If an extension is necessary, we will inform you within the initial one-month period and explain the reasons.
Requests will be handled in accordance with applicable data protection law.
14. Complaints to the Belgian Data Protection Authority
If you believe that we have processed your personal data unlawfully or have not respected your data protection rights, you may contact us first so that we can attempt to resolve your concern.
You also have the right to lodge a complaint with the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données (GBA/APD)
Drukpersstraat 35
1000 Brussels
Belgium
Website: https://www.dataprotectionauthority.be/
The Authority’s official website provides current contact details and information on how to submit a complaint.
15. Children’s Privacy
Our online store is intended for individuals who are legally able to make purchases under applicable law. We do not knowingly collect children’s personal data for marketing purposes.
If you believe that a child has provided us with personal data in circumstances where it should not have been collected, please contact us so that we can assess the matter and take appropriate action where required by law.
16. External Websites
Our website may contain links to websites or services operated by third parties. Those websites operate independently of Fialoré, and we are not responsible for their privacy practices or content.
We recommend reading the privacy policies of third-party websites before providing them with personal data.
17. Data Security
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure.
Access to personal data is limited where appropriate, and we rely on relevant service providers to maintain suitable security measures for the services they provide.
However, no method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.
18. Automated Decision-Making and Profiling
We do not intend to make decisions based solely on automated processing of personal data that produce legal effects or similarly significant effects on individuals.
If such processing is introduced and the GDPR requires additional information or safeguards, we will provide the information and protections required by applicable law.
19. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, website functionality, service providers, data processing practices or applicable legislation.
The date at the beginning of the policy indicates when it was most recently updated. Where required by law, we will provide additional information or notice of material changes.
20. Contact
If you have questions about this Privacy Policy or the processing of your personal data, please contact us:
Fialoré
Email: fialore.be@gmail.com
Website: https://fialore.be
Our business address and any additional legally required business details are provided in the Legal Notice on our website.