Affublements
Cart 0

Privacy Policy

Last updated — February 2026

1. Data Controller

The data controller for affublements.com is the operator of Affublements, based in Brussels, Belgium. For any question regarding your personal data: contact@affublements.com.

2. What We Collect & Why

We only collect what is strictly necessary. For each type of data, here is the purpose and legal basis under the GDPR (Article 6):

Order data

Name, email, shipping address — collected at checkout to fulfil your order.
Legal basis: performance of a contract (Art. 6.1.b).

Payment data

Card details are processed entirely by Stripe. We never see or store your payment information.
Legal basis: performance of a contract (Art. 6.1.b).

Cart session

A unique session identifier is stored in your browser (localStorage) to maintain your shopping cart. No personal data is involved.
Legal basis: legitimate interest (Art. 6.1.f).

Technical data

IP address, browser type, pages visited — collected automatically via server logs for security and fraud prevention.
Legal basis: legitimate interest (Art. 6.1.f).

We do not send newsletters or promotional emails without your explicit consent.

3. Service Providers & Data Sharing

Your data is shared only with the providers essential to running the site:

  • — Stripe (United States) — payment processing. Privacy policy.
  • — Convex (United States) — database and backend infrastructure.
  • — Vercel (United States) — website hosting and anonymous analytics.
  • — Shipping carriers — name and address for delivery.

We do not sell, rent, or share your data with any third party for commercial purposes.

4. International Transfers

Some of our service providers (Stripe, Convex, Vercel) are based in the United States. These transfers are protected by the EU–US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Articles 44 to 49 of the GDPR.

5. Cookies & Local Storage

The site uses a session identifier stored in your browser's localStorage to manage your shopping cart. This is strictly necessary for the site to function and does not require your consent.

We use Vercel Analytics to understand how the site is used. Vercel Analytics is privacy-friendly: it does not use cookies, does not collect personal data, and does not track individual users across sites. We do not use any advertising or tracking cookies.

6. Data Retention

  • — Order data (name, address, email): 10 years, as required by Belgian accounting law.
  • — Cart session data: deleted after 30 days of inactivity.
  • — Server logs and technical data: maximum 13 months.
  • — Payment data: retained by Stripe according to their own retention policy. We do not store it.

You can request early deletion of your personal data at any time (see Your Rights below), except where retention is required by law.

7. Security

All communications with the site are encrypted (SSL/TLS). Payment data is handled by Stripe, which is PCI-DSS certified. We take appropriate technical measures to protect your data, though no transmission over the Internet can be guaranteed 100% secure.

8. Your Rights

Under the GDPR, you can access, correct, delete, or request portability of your data by writing to contact@affublements.com. We respond within one month. You may also contact the Belgian Data Protection Authority: www.autoriteprotectiondonnees.be.

9. Changes to This Policy

This policy may be updated to reflect changes in our practices or legal requirements. The current version is always the one published on this page, with the date of last update indicated above.

10. Contact

For any questions about your data or this policy, write to us at contact@affublements.com.