Account

Privacy Policy

Last updated: May 12, 2026.

 

Who we are

This website, bynecessities.be (the “Website”), is operated by Necessities — BV Bouquets (“we,” “us,” “our”), with registered offices at Steenhouwersvest 28, 2000 Antwerp, Belgium.

  • Company registration number: BE 0427 390 116
  • VAT number: BE 0427 390 116
  • Email: info@necessities-antwerp.be
  • Phone: +32 (0)3 231 86 24
  • Contact person: Maxime Bocxtaele

We act as the data controller for personal data collected through this Website, in accordance with the EU General Data Protection Regulation (GDPR) and Belgian privacy law.

What data we collect

We collect personal data when you:

  • Place an order: name, billing and shipping address, email address, phone number, VAT number (if provided), and order details
  • Create an account: email address, password (stored encrypted), and any optional profile information you provide
  • Contact us: any information you include in your message, including your email address
  • Use the Website: technical data such as IP address, browser type, device information, pages visited, and time spent — collected via cookies and similar technologies (see our Cookie Policy)
  • Subscribe to our newsletter: email address and any preferences you indicate

We do not knowingly collect data from children under 16. If you believe we have inadvertently done so, please contact us and we will delete the data promptly.

Why we collect it (legal basis)

We process your personal data only when we have a lawful basis to do so:

  • Contract performance: to process your orders, deliver products, handle returns, and provide customer service
  • Legal obligation: to comply with tax, accounting, and consumer protection laws (e.g., retaining invoices for 7 years as required by Belgian tax law)
  • Legitimate interest: to secure our Website, prevent fraud, improve our services, and communicate about orders you’ve placed
  • Consent: to send marketing communications (newsletter), place non-essential cookies, and share data for purposes you’ve explicitly agreed to — you can withdraw this consent at any time

Who we share it with

We share your personal data only with parties who help us deliver our service to you:

  • Payment processors: Mollie BV (Netherlands) processes payment transactions on our behalf
  • Shipping providers: bpost, DPD, or similar carriers receive the information needed to deliver your order
  • IT service providers: our hosting provider (Hetzner Online GmbH, Germany) and email service providers process data on our instructions under data processing agreements
  • Accounting and invoicing: our accountant and invoicing software receive transaction data as required for legal compliance
  • Authorities: when legally required to do so (e.g., tax authorities, law enforcement with a valid request)

We do not sell your personal data to third parties. We do not transfer your data outside the European Economic Area unless adequate safeguards are in place (such as Standard Contractual Clauses).

How long we keep it

  • Order data: 7 years from the order date, as required by Belgian tax law
  • Account data: as long as your account is active, plus a reasonable period after closure for legal claims
  • Newsletter subscriptions: until you unsubscribe
  • Customer service correspondence: up to 3 years after our last contact
  • Cookies and analytics data: see our Cookie Policy for specific retention periods

Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”), subject to legal retention obligations
  • Restrict processing in certain circumstances
  • Object to processing based on legitimate interest, including direct marketing
  • Data portability: receive your data in a structured, machine-readable format
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) at www.gegevensbeschermingsautoriteit.be

To exercise any of these rights, contact us at info@necessities-antwerp.be. We will respond within 30 days.

Security

We take appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, alteration, or disclosure. This includes encrypted connections (HTTPS), secured hosting infrastructure, access controls, and regular backups. However, no system is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the “Last updated” date at the top. Material changes will be communicated via the Website or email where appropriate.