Privacy PolicyLast updated: October 2026
1. Who We Are
This Privacy Policy explains how we collect, use, store and protect personal data when you visit or use our website.
The data controller responsible for processing your personal data is:
Company name: Lize Rubens
Legal form: Sole proprietorship (Belgium)
Registered address: Lange beeldekensstraat, 2060 Antwerpen
Company registration number: BE 0646 877 360
Email address: info@lizerubens.be
Telephone number: +32 498 659979
Website: www.lizerubens.be
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian legislation.
2. What Personal Data Do We Collect?
Depending on how you use our website, we may process the following categories of personal data.
Contact Forms
When you contact us through our website, we may collect:
First and last name
Email address
Telephone number, if provided
The content of your message
Orders and Online Payments
When you place an order or make a payment through our website, we may process:
Name and billing details
Billing and delivery address, where applicable
Email address and telephone number, where applicable
Order details, including purchased products or services and order amounts
Payment status, payment references and transaction information provided by our payment service provider
Full payment card details are generally processed directly by our payment service provider and are not accessible to us. This should be verified against the actual configuration of our payment systems.
Website Usage
Our website may process certain technical information necessary for its proper operation and security, such as technical log data and information associated with strictly necessary cookies.
Please do not submit sensitive personal data through our contact form unless it is necessary.
3. Why Do We Process Your Personal Data?
We process your personal data for the following purposes:
To respond to enquiries submitted through our contact form.
To process and manage orders.
To receive, verify and administer payments.
To prepare and retain invoices and other legally required documents.
To communicate with customers about their orders or agreements.
To comply with applicable legal obligations.
To maintain, secure and ensure the proper functioning of our website.
We do not use personal data for purposes that are incompatible with those described above.
4. Legal Bases for Processing
We process personal data only where a valid legal basis under Article 6 of the GDPR applies.
Performance of a Contract — Article 6(1)(b) GDPR
We rely on this legal basis when processing is necessary to fulfil an order, administer a payment or perform an agreement with you.
Compliance with a Legal Obligation — Article 6(1)(c) GDPR
We process certain data where required by law, for example to comply with applicable accounting, tax and invoicing obligations.
Legitimate Interests — Article 6(1)(f) GDPR
Where appropriate, we may process personal data for legitimate business interests, such as responding to ordinary business enquiries, protecting our website and maintaining our services, provided that these interests are not overridden by your rights and freedoms.
Consent — Article 6(1)(a) GDPR
Where consent is required for a particular processing activity, we will request it before processing your personal data. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
The applicable legal basis depends on the specific purpose of the processing.
5. Who Do We Share Your Personal Data With?
We do not sell your personal data to third parties.
Where necessary for the operation of our business, we may share personal data with the following categories of recipients:
Website hosting and IT service providers: to host, maintain and secure our website.
Payment service provider: [Name of payment provider], to process and administer online payments.
Accountants or bookkeepers: where applicable, to manage accounting and statutory reporting.
Shipping or fulfilment providers: where applicable, to deliver orders.
Competent public authorities: where disclosure is required by law.
Where third-party service providers process personal data on our behalf, we put appropriate contractual arrangements and safeguards in place where required by the GDPR.
6. International Transfers of Personal Data
Some of our service providers may process or store personal data outside the European Economic Area (EEA).
Where this applies, we ensure that any international transfer complies with the applicable GDPR requirements. Depending on the circumstances, this may include an adequacy decision or appropriate safeguards, such as Standard Contractual Clauses.
Before publishing this Privacy Policy, we will verify whether our hosting provider, payment provider or other service providers transfer personal data outside the EEA and identify the relevant safeguards where necessary.
7. How Long Do We Retain Your Personal Data?
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account applicable statutory retention requirements.
Our general retention principles are as follows:
Contact form submissions: retained for as long as necessary to respond to and follow up on your enquiry, unless further retention is justified by a valid legal basis.
Order and customer data: retained for as long as necessary to manage and fulfil the relevant agreement.
Invoices and accounting records: retained for the applicable statutory retention period.
Technical log data: retained for as long as necessary for security, troubleshooting and technical administration.
Actual retention periods depend on the type of data and applicable legal obligations. We will establish and apply specific retention periods where appropriate.
8. Cookies
Our website uses only strictly necessary cookies that are required for its proper and secure functioning.
Depending on the features available on our website, these cookies may be used to maintain a secure session, preserve a shopping cart or support the proper operation of the payment process.
Based on our current configuration, we do not use advertising cookies or analytics cookies.
Strictly necessary cookies generally do not require prior consent, although applicable information obligations must still be met.
If we introduce additional cookies or tracking technologies in the future, we will update our cookie information and implement a consent mechanism where legally required.
9. How Do We Protect Your Personal Data?
We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
Depending on our systems and operational requirements, these measures may include access restrictions, secure connections, software updates and appropriate arrangements with service providers.
No method of electronic storage or transmission can guarantee absolute security. We nevertheless take reasonable and appropriate steps to reduce the risks associated with processing personal data.
10. Your Rights Under the GDPR
Subject to the conditions and limitations set out in the GDPR, you may have the following rights:
Right of access: to request confirmation of whether we process your personal data and obtain access to that data.
Right to rectification: to request the correction of inaccurate or incomplete personal data.
Right to erasure: to request the deletion of your personal data in certain circumstances.
Right to restriction of processing: to request that we restrict the processing of your personal data in certain circumstances.
Right to object: to object to processing based on our legitimate interests, subject to the applicable legal conditions.
Right to data portability: to receive certain personal data you have provided to us in a structured, commonly used and machine-readable format, or request its transfer to another controller where the legal conditions are met.
Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time.
These rights are not absolute and may be subject to legal conditions and exceptions. For example, we may be required to retain certain information to comply with legal obligations.
To exercise your rights, please contact us at [Privacy email address or general contact email address].
To protect your personal data, we may ask you to provide appropriate proof of identity where necessary and proportionate.
We will respond to your request within the time limits prescribed by the GDPR.
11. Complaints
If you have questions or concerns about how we process your personal data, we encourage you to contact us first at [Contact email address].
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).
Belgian Data Protection Authority
Drukpersstraat 35
1000 Brussels
Belgium
Website: https://www.gegevensbeschermingsautoriteit.be/
12. Links to Third-Party Websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external websites.
We recommend reviewing the privacy policies of third-party websites whenever you visit or use them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, data processing practices or legal obligations.
The latest version will be published on our website, together with the date on which it was last updated.
14. Contact Us
If you have any questions about this Privacy Policy or how we process your personal data, please contact us:
Lize Rubens
Email: info@lizerubens.be
Address: langebeeldekensstraat 2060 Antwerpen
Website: www.lizerubens.be