Privacy policy

This policy explains which personal data Stays collects, why, how long we keep it and what rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy law.

1. Who is responsible?

Stays BV, Tramstraat 18, 9070 Heusden, Belgium, company number BE 0672.875.637, is the controller of your personal data. For privacy questions, contact hello@stays.green.

2. What data do we process, why and on what basis?

Data

Purpose

Legal basis

Name, address, email, phone, order details

Processing, delivering and invoicing your order or subscription

Performance of the contract

Payment data (via the payment provider)

Processing your payment

Performance of the contract

Customer account (name, email, password, order history)

Managing your account

Performance of the contract

Invoicing data

Accounting and tax obligations

Legal obligation

Correspondence and photos with questions, complaints or returns

Handling your question, complaint or return

Performance of the contract and legitimate interest

Data for custom projects (location, dimensions, photos of the space)

Preparing a quote and carrying out the project

Pre-contractual measures and performance of the contract

Email address and newsletter preferences

Sending newsletters and promotions

Consent

Email address of existing customers

Sending information about similar products, with the option to unsubscribe at any time

Legitimate interest

Browsing behaviour, IP address, device data (cookies)

Running the website, statistics, measuring advertising

Necessary for operation, or consent (see section 6)

You are not obliged to provide data. Without certain data, however, we cannot process your order.

3. How long do we keep your data?

  • Invoices and accounting records: 10 years, as required by law.
  • Customer and order data: up to 3 years after your last order or contact, unless a longer period is needed for an ongoing dispute.
  • Newsletter data: until you unsubscribe.
  • Cookies: according to the periods stated in our cookie banner.

4. Who do we share your data with?

We never sell your data. We only share it with parties that help us deliver our services, and only as far as necessary:

  • Shopify (webshop platform and payments);
  • payment providers, such as PayPal and card issuers;
  • carriers and couriers for delivery;
  • Google Analytics (website statistics);
  • Hotjar (analysis of website use);
  • Meta (Facebook and Instagram advertising via the Meta pixel);
  • Wistia (video player);
  • our accountant and IT service providers;
  • our ceramic vase partners, only where needed to fulfil your order.

We make agreements with these parties on the protection of your data. We also disclose data where required by law or a court decision. In case of a takeover or restructuring of Stays, your data may be transferred to the new company, which will continue to apply this policy.

5. Transfers outside the European Economic Area

Some of these service providers are established outside the EEA, for example in the United States or Canada. In that case we ensure appropriate safeguards, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

6. Cookies

Our website uses cookies. Necessary cookies make the website and your shopping basket work; no consent is needed for these. We only place analytics and marketing cookies with your consent.

On your first visit you choose which cookies you accept via the cookie banner. You can change your choice at any time via the "Cookie settings" link at the bottom of the website, or block cookies in your browser settings. Some website functions may then no longer work.

7. Your rights

You have the right to:

  • access your data and obtain a copy;
  • have incorrect data corrected;
  • have your data erased, unless we are legally required to keep it;
  • restrict the processing;
  • object to processing based on legitimate interest, and always to direct marketing;
  • receive your data in a structured, readable format or have it transferred;
  • withdraw your consent at any time, without affecting the lawfulness of earlier processing.

Send your request to hello@stays.green. We may ask you to prove your identity. We respond within 1 month. You can also unsubscribe from the newsletter at any time via the link at the bottom of every email.

We do not make decisions about you based solely on automated processing or profiling.

8. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Payments are made over a secure, encrypted connection. Please keep your password confidential.

9. Filing a complaint

Are you unhappy with how we handle your data? Please let us know first at hello@stays.green. You can also file a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, +32 2 274 48 00, contact@apd-gba.be, www.dataprotectionauthority.be.

10. Changes

We may update this privacy policy. The most recent version is always available on our website. We will inform you of significant changes.