Privacy Policy

Data privacy is of great importance to Sienna Goodies and we want to be open and transparent with our processing of your personal data. We want to create an environment where you can share your information without worrying about how secure it is.

That is why we have a privacy policy that determines how your personal data is processed and secured and explains your rights when managing that information. By means of this privacy policy, Sienna Goodies complies with the relevant privacy legislation, including the European Regulation 2016/679 of 27 April 2016 on the protection of personal data (GDPR), as well as the anti-spam provisions of Book XII of the Code of Economic Law (WER).

Who is the controller of your personal data?

Sienna Goodies is the controller of the personal data you submit to us and responsible for your personal data under applicable data protection law.

Sienna Goodies bv
Everdijstraat 41
2000 Antwerp, Belgium
VAT number: BE0890.955.985
info@siennagoodies.com

Since the cases mentioned in Article 37 GDPR do not apply, Sienna Goodies is not obliged to appoint a data protection officer.

Who has access to your data?

Your data may be shared within the Sienna group; that is Sienna Goodies and its boutique stores Sienna Antwerp and Sienna Ghent. In this context, the transfer of your data remains limited to companies within the European Economic Area.

Your personal data that is passed on to third parties is only used to provide you with our services: companies to validate your address (e.g. Google), companies to send you an order confirmation (e.g. Shopify, Klaviyo), warehouse and distribution suppliers in connection with the delivery of your order (e.g. SendCloud, PostNL), payment service providers for your payment (e.g. Mollie). Please note that many of these receiving companies have an independent right or obligation to process your personal data.

In the context of its activities, Sienna Goodies uses cookies from Google. This may result in (part of) your personal data being transferred to Google, whose headquarters are located in the United States. Google is certified under the Data Protection Framework, which means that no additional measures such as Standard Contractual Clauses (SCCs) are required to transfer data to Google.
In rare cases, Sienna Goodies may be required to disclose your personal information pursuant to a court order or to comply with other mandatory laws or regulations. Sienna Goodies will make reasonable efforts to inform you in advance of this, unless this is legally restricted.

Under no circumstances will Sienna Goodies share and/or sell your personal information to third parties that are not part of our production process, for example to send you advertising.

Why do we use your personal data?

We will use your personal information to manage your online purchase at Sienna Goodies by processing your orders and returns through our online services and sending you notifications of delivery status or any issues with the delivery of your items.

We will use your personal information to manage your payments.

We use your data to handle complaints and warranty issues for products.

Your personal data will be used to identify you and to validate your legal age to shop online and to confirm your address with third party partners.

Sienna Goodies may use your data to optimize its website.

Your personal data can be used to send you commercial information or to make suitable offers. We only do this when you have given permission for this by subscribing to the newsletter. As previously stated, Sienna Goodies will under no circumstances share and/or sell your personal information to third parties who are not part of our production process, for example to send you advertising.

What types of personal data do we process?

In order to offer you a good and personal service, Sienna Goodies needs data from you. Sienna Goodies processes three types of data: identity, payment and traffic data. This data all comes directly from you as a customer.

• Identity and contact details such as name, address, email address and telephone number: Sienna Goodies uses this identity data to process your order and send it to you as carefully and quickly as possible.
• Payment details: Sienna Goodies registers the payment details to check whether the payment has been made correctly. We only note your payment method. Of course, bank details are not stored and every payment option is secured (for more information about this, see "payment" under customer service).
• Traffic (or Behavioural) data: Sienna Goodies registers your IP address, surfing and clicking behaviour, navigation usage, search history, visited pages, visited articles etc. so that Sienna Goodies can optimise the user-friendliness, functionality and content of the website.
  
  

What is the legal basis for processing your personal data?

The processing of your identity and contact details, as well as your payment details, is necessary to enable Sienna Goodies to manage and administer the order and deliver it to you, as well as to confirm your address to our external partners who are essential for the execution of your order. The legal basis here is therefore the execution of the agreement.

The processing of your identity and contact details in the context of handling complaints and warranty issues has as its legal basis the performance of the agreement, namely the handling of the complaint or issue submitted by you.

The processing of your identity and contact details, as well as your payment details, for the purpose of managing your payments, has as its legal basis the performance of the agreement, as well as the legitimate interest of Sienna Goodies to prevent fraud, etc.

The processing of your identity data in the context of identification and age verification has as legal basis our legal obligation to check whether you have reached the minimum age. Your personal data is used to identify you and to validate your legal minimum age for online shopping and to confirm your address with external partners.

The processing of your identity and contact details for direct marketing purposes has your consent as its legal basis.

The processing of your payment details in the context of ordering has the legal basis to check whether the payment has been made correctly.

The processing of your traffic (behavioral) data takes place within the framework of the legitimate interest of Sienna Goodies to optimize the user-friendliness, functionality and content of its website.

How long do we keep your data?

We retain your personal data for as long as necessary to achieve the purposes set out above.

The personal data will be retained for the period necessary to comply with legal requirements (including those relating to accounting).

Contact details may be retained for a longer period as long as there is a contractual relationship with you, or even after it has ended, for the sake of continuity of our services and our marketing interests.

The following examples clarify what types of personal and contact data there are and how long they are retained:

1. Personal Data of Customers
   Retention period: 5 years after the last purchase
   Example: Name, address, email address and phone number of customers. This information is stored to facilitate future purchases and provide customer service.
2. Order details
   Retention period: 7 years
   Example: Information about orders, such as products, prices and delivery information. This is necessary for accounting purposes and to comply with tax obligations.
3. Payment information
   Retention period: 5 years
   Example: Payment method data (e.g. credit card information). This is stored for payment processing and possible disputes.
4. Communication with Customers
   Retention period: 3 years
   Example: Emails or messages between the customer and customer service. These are stored to follow up on questions and to ensure good customer service.
5. Marketing data
   Retention period: Until the customer unsubscribes
   Example: Subscriptions to newsletters or promotional emails. This data is retained for as long as the customer has given consent to receive marketing communications.
6. Return information
   Retention period: 2 years
   Example: Data on returned items, including reasons for returns. This helps to improve products and services.
7. Cookies and Tracking Data
   Retention period: Maximum 13 months
   Example: Information collected via cookies on the website for analytical purposes. This data is used to analyze and improve the use of the webshop.
8. Feedback and Reviews
   Retention period: 5 years
   Example: Customer reviews and feedback on products. This information is used for quality improvement and marketing purposes.
9. Account information
   Retention period: Until the account is deleted
   Example: Username, password (in anonymized form) and account settings. This data is stored as long as the account is active.
10. Documentation for Legal Purposes
    Retention period: 10 years
    Example: Documents needed for legal disputes or claims. These must be kept for 10 years as per legal requirements.
    
    

What are your rights?

In accordance with the GDPR regulation, you can exercise rights over your personal data:

Right of access:
You have the right to request information about the personal data we hold about you, as well as the use we make of your personal data, at any time. You can contact Sienna Goodies and we will inform you about this by email.

Right to correction:
You have the right to request correction of your personal data if it is incorrect, including the right to have incomplete personal data completed.

Right to erasure:
You have the right to erase personal data processed by Sienna Goodies at any time, except in the following situations:

• You have an ongoing case with Customer Service
• You have an open order that has not yet been shipped or has only been partially shipped
• You have an outstanding debt with Sienna Goodies, regardless of the payment method
• If you have abused our services in the past four years or are suspected of having done so
• If you have made a purchase, we will retain your personal information related to your transaction for accounting purposes.

Right to restriction:
You have the right to request that Sienna Goodies restrict the processing of your personal data under the following circumstances:

• If you object to processing based on Sienna Goodies' legitimate interest, Sienna Goodies will restrict all processing of such data pending the verification of legitimate interest.
• If you claim that your personal data is inaccurate, Sienna Goodies must restrict all processing of such data pending the verification of the accuracy of the personal data.
• If the processing is unlawful, you can oppose the erasure of your personal data and instead request the restriction of the use of your personal data.
• If Sienna Goodies no longer needs the personal data, but it is necessary for your defense against legal claims.

Right to data portability:
When Sienna Goodies processes your personal data by automated means based on your consent or on a contract, you have the right to have a copy of your data transferred to you or to another party in a structured, commonly used and machine-readable format. This only applies to the personal data you have submitted to us.

Right to object:
You have the right to object to the processing of your personal data based on a legitimate interest of Sienna Goodies. Sienna Goodies will not continue to process the personal data unless we can demonstrate a legitimate reason for the processing which overrides your interests and rights or due to legal claims.

Right to object to direct marketing:
You have the right to object to direct marketing, including profiling for direct marketing purposes. You can opt out of direct marketing in the following ways:

• By following the instructions in each marketing email
• By editing your Sienna Goodies account settings

Right to withdraw your consent:
To the extent that processing is based on your prior consent, you always have the right to withdraw that consent.

How can you exercise your rights?
We take data protection very seriously and therefore you can always contact us by email (info@siennagoodies.com) to handle your requests regarding your rights mentioned above.

Automated individual decision-making:
The processing of your personal data does not include profiling and you will not be subject to automated decisions by us.

Right to lodge a complaint with a supervisory authority:
If you believe that Sienna Goodies is processing your personal data incorrectly, you can contact us. You also have the right to lodge a complaint with a supervisory authority.

For Belgium you can file a complaint with the Data Protection Authority (GBA):
Drukpersstraat 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
Fax : +32 (0)2 274 48 35
e-mail: contact@apd-gba.be.

For the Netherlands, you can file a complaint with the Dutch Data Protection Authority (AP):
PO Box 93374, 2509 AI The Hague
Tel: +31 088-1805250
Fax: +31 088 - 071 21 40
online: https://autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap

Security and confidentiality

We have developed security measures that are adapted at technical and organizational level to prevent the destruction, loss, falsification, modification, unauthorized access or accidental notification to third parties of personal data collected, as well as any other unauthorized processing of these data.

Under no circumstances can Sienna Goodies be held liable for any direct or indirect damage resulting from incorrect or unlawful use of the personal data by a third party.

You must comply with the security regulations at all times, including by preventing any unauthorized access to your login and code. You are therefore solely responsible for the use made from the website of your computer, IP address and your identification data, as well as for the confidentiality thereof.

Children's Privacy

Our website is not directed to persons under the age of 13. We do not knowingly collect personal information from persons under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we discover that we have collected personal information from persons under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.
If we need to rely on consent as a legal basis for processing your information and your country requires parental consent, we may obtain parental consent before collecting and using that information.

Links to third party websites

Our website may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third party sites or services. We strongly advise you to review the privacy policy of every site you visit.

Applicable law and disputes

The validity, interpretation and execution of the terms and conditions set out in this privacy policy are governed exclusively by Belgian law.
Any dispute concerning the validity, interpretation and execution of these terms and conditions shall be settled exclusively by the competent court in Antwerp.
However, before resorting to the court, negotiations are conducted in good faith to settle the dispute amicably.

Changes

We may need to update our Privacy Statement. The latest version of the Privacy Statement is always available on our website. You are therefore requested to consult the Privacy Policy regularly to be aware of any changes.

To ask?

If you have any questions after reading our privacy policy, you can send them to us at info@siennagoodies.com.


This privacy policy was last modified on October 16, 2024.