Privacy policy
We only ask for what we need to get your order to you, and we don't track you. This page explains exactly what we keep, why, for how long, and who else sees it.
Last updated
Who is responsible
Min-S BV, Doornstraat 39, 8200 Brugge, Belgium, enterprise number 1023.657.034, is responsible for your personal data on this website. For anything about your data, email info@honey-z.com.
In short
- You order without an account. We ask for your email address, your name and a delivery address, nothing more.
- We don't use analytics, advertising or social media trackers, and we have no cookie banner because there is nothing to consent to.
- We never sell your data or use it for anything other than what is on this page.
What we collect and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| Your email address, name and delivery address, the products you order and your language | To handle and deliver your order and send you emails about it | Performing our contract with you (GDPR art. 6(1)(b)) | Orders that were never paid: deleted after 30 days. Paid orders: 10 years, as Belgian accounting law requires |
| Amounts, payment status and the payment method you chose (never your card or account number) | To take payment, refund you and keep our books | Contract, and our legal obligation to keep accounts (art. 6(1)(b) and (c)) | 10 years |
| The promo code or creator code you used, if any | To apply your discount and pay the creator their commission. The creator does not get your name or address | Contract, and our legitimate interest in paying our partners correctly (art. 6(1)(f)) | With the order |
| Your emails to us | To answer your question | Our legitimate interest in helping you, or the contract if it is about an order | Until your question is settled, and at most 2 years after our last contact, unless it belongs with an order |
| Technical logs: IP address, time and the page requested | To keep the shop secure and find errors | Our legitimate interest in a safe, working shop (art. 6(1)(f)) | Overwritten automatically after a short time |
Your email address, name and delivery address are needed to conclude and carry out the contract: without them we cannot deliver your order or confirm it to you. You don't have to give us anything else.
Your cart is kept in a cookie on your own device and holds only product codes and quantities, nothing about you. The cookie policy lists every cookie.
What we don't do
- No analytics or statistics tools, no advertising, no social media buttons or embedded videos.
- No profiling and no automated decisions about you.
- Our fonts and product photos are served by our own server, so your browser does not contact Google or any other outside party when you visit.
Who else sees your data
Only the companies we need to run the shop, each for its own task and bound by an agreement with us:
| Who | What for | What they receive |
|---|---|---|
| Hostinger International Ltd. (Cyprus) | The servers the shop runs on, in a data centre in the EU, and our mailbox | Everything the shop stores, and the emails you send us |
| Mollie B.V. (Netherlands) | Payments. Mollie also processes payment data as a controller under its own privacy statement, as payment law requires | From us: the amount and your order number. Mollie collects your payment details itself |
| Sendinblue SAS, trading as Brevo (France) | Sending our order emails | Your name, email address and the content of the email |
| bpost NV (Belgium) | Delivering your parcel and sending you delivery updates | Your name, delivery address and email address |
| Our accountant | Bookkeeping | Invoice and payment data |
All of them are in the European Union. We don't transfer your data outside the European Economic Area ourselves; where one of these companies uses a subcontractor outside it, that is covered by an EU adequacy decision or the EU's standard contractual clauses. We only give data to authorities when the law obliges us to.
Your rights
You can ask us to:
- show you the data we have about you, and give you a copy (access and portability);
- correct data that is wrong (rectification);
- delete your data (erasure). For paid orders we have to keep what accounting law requires, but nothing more;
- use your data less while a question about it is being settled (restriction).
Your right to object. Where we use your data on the basis of our legitimate interest (creator codes, your emails to us, technical logs), you can object at any time, for reasons relating to your situation. We then stop, unless we have compelling legitimate grounds or need the data to establish or defend a legal claim.
Email info@honey-z.com, preferably from the address you ordered with, so we know the request is really yours. We answer within one month.
If you think we handle your data wrongly, you can complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, dataprotectionauthority.be. We would appreciate hearing from you first.
Security
The whole shop runs over an encrypted connection. Your order page can only be opened with the private link in your emails, so don't forward those emails to anyone you wouldn't show your order to.
Changes
When we change how we handle data, we update this page first. The date at the top shows when it last changed.