1. Who?
This privacy statement applies to the personal data processed through the website and within the framework of the main activities of the Data Controller. The Data Controller is The Lifestyle Company BV, located at Naamsestraat 37, 3000 Leuven, Belgium, with company number VAT BE 0800.578.414. The contact person is Ms. Dominique Van Etterijk (hello@delugeofficial.com) (hereinafter “The Lifestyle Company”, “We”, or the “Data Controller”).
The Data Controller is committed to respecting your privacy rights and complies with European Regulation 2016/679 of April 27, 2016, concerning the protection of personal data (the “GDPR”) and any future or additional applicable legislation.
This Privacy Policy does not apply to third-party websites linked from our website or applications. When clicking on such links or using such applications, third parties may collect personal data. We advise you to review the privacy policy of these third parties before interacting with them.
2. What are personal data?
Personal data refers to any information that can identify or make a natural person identifiable. This includes contact details such as name and email address, as well as usage data from social media accounts, IP address, preferences, financial data, and sensitive data.
3. What personal data do we process?
We may process the following personal data:
· Individuals who visit our website, place orders, receive our newsletters, or interact with us on social media:
- Name and first name
- Email address
- Phone number/mobile number
- Address details
- Date of birth
- Language preferences
- Messages via contact form
- Order details (payment details, purchase history, returned orders)
- Billing information
- Geolocation and browser data (including IP address, open rate, click rate, etc.), interests, and preferences
- Data from hair quizzes
For more details on processing related to cookies, please refer to our cookie policy.
4. For what purposes are personal data used?
4.1 Legal Grounds
We may process your personal data for the following purposes:
- To comply with legal and administrative obligations.
- To meet tax and accounting requirements.
- To manage your registration and access to website features, products, and services.
- To execute and comply with purchase agreements, including:
- Providing and/or requesting information
- Drafting agreements
- Conducting quality surveys
- Customer and supplier management
- Handling deliveries and returns
- To activate mechanisms in case of unauthorized or illegal website use.
- To improve service quality and analyze data and statistics related to our activities.
- To retain and use evidence for liability, procedures, disputes, or archiving.
- To contact existing customers for commercial purposes, send newsletters, promotions, contests, etc. You can unsubscribe from these communications at any time.
- To use Custom Audience targeting on social media platforms (e.g., Google Ads, Facebook, TikTok, Pinterest) and targeting functionalities. This involves uploading certain information (e.g., cookie IDs) to these platforms for targeted advertising. You can opt out by contacting us at hello@delugeofficial.com.
We process your personal data:
- When necessary for the performance of an agreement to which you are a party or for the performance of pre-contractual actions at your request, for example, when we need to process your information to handle your order;
- When necessary to comply with a legal obligation;
- When necessary to promote our legitimate interests or the interests of a third party, for example, to manage our relationship with you;
- With your consent, for example, when you sign up for our newsletter.
If we process your personal data based on your consent, we will ask for your consent separately. You can withdraw your consent at any time. Please note that withdrawing your consent does not affect the lawfulness of the processing of your personal data before the withdrawal of your consent.
If you have specific questions about the legal grounds on which certain personal data are processed, we will be happy to provide you with additional information, and you can always contact us at hello@delugeofficial.com.
4.2 Method of processing – Duration of processing
Your data is handled confidentially and is not sold, rented, or shared outside the contractual relationship or specific assignment.
We may use select processors to provide services, and necessary guarantees are obtained from them in accordance with the GDPR. Data is stored within the EU.
In rare cases, we may disclose your personal data in response to a court order or legal requirements. We will inform you of such disclosures unless restricted by law.
Data is retained:
- For as long as you are a registered user of the website.
- For the duration necessary to handle purchases, returns, and related complaints or claims.
- For marketing purposes until you unsubscribe from newsletters or de-register from the website.
5. Sharing of Data with Third Parties
We share personal data with third parties only as necessary for the services outlined in this privacy policy:
· Financial institutions
· Fraud detection and prevention agencies
· Logistics and delivery service providers
· Marketing and advertising service providers
· Software and hosting providers
· Business partners for cooperation agreements or restructurings
Data is stored within the European Economic Area or in countries with adequate data protection as determined by the European Commission.
6. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, destruction, loss, falsification, modification, or any other unauthorized processing. We cannot be held liable for damages resulting from incorrect or unlawful use of your personal data by third parties.
7. Rights of Data Subjects
7.1 Right of Access
You have the right to access your personal data we process about you at any time free of charge.
7.2 Right to Rectification, Erasure, and Restriction
You can request correction, supplementation, or deletion of your personal data. Please note that refusing to provide or requesting deletion of data may impact the delivery of certain services. You may also request restriction of processing.
7.3 Right to Object
You can object to the processing of your personal data for legitimate reasons or for direct marketing purposes without providing reasons.
7.4 Right to Data Portability
You can request to receive your personal data in a structured, commonly used, and machine-readable format or have it transferred to other controllers.
7.5 Right to Withdraw Consent
You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.
7.6 Exercising Your Rights
To exercise your rights, contact us by email at hello@delugeofficial.com or by post at our registered office, including a copy of your ID for verification. These details are used solely for identification purposes and are deleted afterward.
7.7 Right to Lodge a Complaint
You have the right to lodge a complaint with the Belgian Data Protection Authority (GBA), Drukpersstraat 35, 1000 Brussels, Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35, email: contact@apd-gba.be.
This does not affect your right to take legal action.
8. Processing of Data from Third Parties or Provided by Third Parties
If you provide us with personal data of third parties, you confirm that you have informed them about the processing purposes and methods. If a third party provides us with your data, we use it only for the relevant function or service within the limits outlined in this privacy policy.
9. Changes
We reserve the right to modify this privacy statement at any time by notifying users on this page. We encourage you to review this page regularly for any updates. The date of the last change is indicated at the bottom of the page. If you object to changes, cease using the website and/or collaborating with us, and request deletion of your personal data. The privacy statement in effect at the time applies to all personal data held by the Data Controller.