Datenschutzerklärung
Privacy Policy
Ride 'n Style ("we", "us", "our") is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
1. Data Controller
Ride 'n Style
Vinkenlaan 36, B-3078 Everberg, Belgium
Email: info@ridenstyle.be
VAT: BE1008.352.018
2. Personal Data We Collect
Data you provide:
- Full name, email address, postal address, phone number (via order forms or account registration)
- Payment information — processed securely by our payment providers; we do not store card details
Data collected automatically:
- IP address, browser type and version, pages visited
- Device type and operating system
- Cookie identifiers and analytics data (see Section 4)
Automatically collected data is used solely for technical operation of the website and is not stored in cookies without your consent.
3. Purposes and Legal Basis for Processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and fulfilling your order | Contract performance (Art. 6(1)(b)) |
| Sending order confirmations & delivery updates | Contract performance (Art. 6(1)(b)) |
| Sending marketing emails / newsletters | Explicit consent (Art. 6(1)(a)) |
| Advertising via Meta Ads & Google Shopping | Explicit consent (Art. 6(1)(a)) |
| Fraud prevention and website security | Legitimate interest (Art. 6(1)(f)) |
| Anonymised website statistics | Legitimate interest (Art. 6(1)(f)) |
| Tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Responding to legal/judicial requests | Legal obligation (Art. 6(1)(c)) |
Withdrawing consent: where processing is based on your consent, you may withdraw it at any time by emailing info@ridenstyle.be. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (including pixels and server-side tracking) on ridenstyle.be.
- Essential cookies (required for cart, checkout, session) are placed on the basis of legitimate interest — no consent required.
- All other cookies (analytics, marketing, advertising) require your explicit prior consent via our cookie banner.
Cookie banner — requirements we follow:
- Accept and Reject options are displayed with equal prominence on the first layer
- No "cookie walls" — you can access the website even if you decline non-essential cookies
- Consent is specific per cookie category; you can accept or reject each separately
- You can withdraw or update consent at any time via the cookie settings link in our website footer
Third-party services that may set cookies (subject to your consent):
- Meta Pixel & Conversions API (CAPI) — advertising attribution and remarketing on Facebook/Instagram
- Google Analytics & Google Shopping — website analytics and product advertising
- Shopify — platform-essential and analytics cookies
Cookie data is retained for a maximum of 13 months from your last visit. For more information on managing cookies, visit www.aboutcookies.org.
5. Direct Marketing
We send marketing emails and newsletters only with your explicit prior opt-in consent, in accordance with the Belgian Code of Economic Law (Book XII) implementing the ePrivacy Directive.
As an exception, we may contact existing customers about similar products or services without fresh consent ("soft opt-in"), provided:
- You were given a clear opportunity to opt out at the time of purchase, and
- Every subsequent email includes a prominent, functional unsubscribe link.
You can unsubscribe at any time, free of charge, by clicking the unsubscribe link in any email or emailing info@ridenstyle.be. Opt-out requests are processed without delay.
Note: The APD/GBA's draft Recommendation 01/2025 (updated March 2025) significantly raised the compliance bar for direct marketing. We maintain records of all marketing consents.
6. Data Retention
We retain personal data only as long as necessary for the purpose for which it was collected (Art. 5(1)(e) GDPR):
- Order data: 7 years (Belgian accounting and tax law)
- Customer account data: 3 years from last login or purchase, then deleted or anonymised
- Marketing consent records: duration of the marketing relationship + 1 year as proof of consent
- Analytics data: up to 26 months (or as configured in cookie consent settings)
- Cookie data: maximum 13 months from last visit
7. Your Rights Under the GDPR
You have the following rights under Chapter III GDPR:
- Right of access (Art. 15) — request a copy of your data
- Right to rectification (Art. 16) — correct inaccurate or incomplete data
- Right to erasure (Art. 17) — request deletion ("right to be forgotten") where no legal basis for retention exists
- Right to restriction (Art. 18) — limit how we use your data in certain circumstances
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest or direct marketing
- Right to withdraw consent (Art. 7(3)) — at any time, without affecting prior processing
To exercise any of these rights, email info@ridenstyle.be with a copy of your identity document. We will respond within 30 days free of charge (extendable by 60 days in complex cases with prior notification).
8. Data Sharing
We do not sell or share your personal data with third parties for their own marketing purposes. Data may be shared with:
- Shipping carriers (e.g. bpost, DPD) — for order fulfilment
- Payment processors (e.g. Klarna, Bancontact/Worldline) — for secure payment handling
- Shopify Inc. — our e-commerce platform, acting as data processor under a Data Processing Agreement
- Meta Platforms & Google — advertising and analytics services, subject to your cookie consent
- Legal/judicial authorities — where required by Belgian or EU law, or by court order
All processors are bound by GDPR-compliant Data Processing Agreements.
9. International Data Transfers
Where personal data is transferred outside the EEA (e.g. to Shopify in the US, Meta or Google servers), we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions.
10. Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, falsification or disclosure, in compliance with Article 32 GDPR. These include SSL/TLS encryption, access controls, and regular security reviews.
In the event of a personal data breach likely to result in high risk to your rights, we will notify you without undue delay (Art. 34 GDPR).
11. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us at info@ridenstyle.be and we will delete it promptly.
12. Complaints
If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données (APD/GBA)
www.dataprotectionauthority.be
contact@apd-gba.be | +32 (0)2 274 48 00
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in law, our services, or business practices. Significant changes will be notified by email (if you have an account) or via a prominent notice on our website. The date at the top of this page indicates the last revision.
14. Applicable Law and Jurisdiction
This Privacy Policy is governed by Belgian law and the EU GDPR. Any disputes fall under the exclusive jurisdiction of the courts of the judicial district of Leuven, without prejudice to your right to lodge a complaint with the APD/GBA.