GDPR Privacy Policy

1. Introduction

Back2Buzz respects your privacy and is committed to protecting your personal data. This GDPR Privacy Policy explains how we collect, use, store, and share your information when you visit our webshop refurbished.back2buzz.eu (the “Website”), place an order, or contact us.

We process your personal data in accordance with the General Data Protection Regulation (Regulation EU 2016/679).

2. What Personal Data We Collect

We collect the following categories of personal data:

a) When you place an order:

• Full name

• Shipping and billing address

• Email address

• Phone number

• Payment details (processed securely via third-party gateways)

• Order history and product preferences

b) When you contact us or use live chat:

• Name

• Email address

• Your message or inquiry

c) When you browse our website:

• IP address

• Browser type and version

• Device information

• Cookies and usage data (see Section 9)

3. Legal Basis for Processing Personal Data

We process your personal data on the following legal grounds:

• Performance of a contract: To fulfill your orders, deliver products, and handle returns.

• Legal obligation: To comply with tax and accounting regulations.

• Legitimate interests: To improve our services, prevent fraud, and ensure website security.

• Consent: For marketing communications and optional cookies.

4. How We Use Your Personal Data

Your data may be used for the following purposes:

• Processing and delivering orders

• Customer service and support

• Managing your account

• Sending transactional and marketing emails (with consent)

• Analyzing usage to improve our website and services

• Complying with legal obligations

5. Who We Share Your Data With

We may share your data with trusted third parties, including:

• Payment processors: e.g., Stripe, PayPal

• Shipping partners: e.g., DHL, DPD, or national post services

• IT service providers: for hosting and maintenance

• Marketing tools: (only with consent), such as email platforms like Mailchimp

All partners are GDPR-compliant and only process data as instructed by Back2Buzz.

6. Data Retention Period

We retain your personal data only as long as necessary to:

• Fulfill the purposes for which it was collected

• Comply with legal and regulatory requirements

• Resolve disputes and enforce agreements

Typically:

• Customer data: retained for 6 years (tax compliance)

• Marketing data: until consent is withdrawn

• Chat messages/support tickets: for up to 2 years

7. Your GDPR Rights

You have the following rights under the GDPR:

• Right to access: Request a copy of your data

• Right to rectification: Correct inaccurate or incomplete data

• Right to erasure: Ask us to delete your data (subject to legal limits)

• Right to restrict processing: Temporarily limit how we use your data

• Right to data portability: Transfer your data to another provider

• Right to object: To processing based on legitimate interest or marketing

• Right to withdraw consent: At any time, for marketing or optional processing

To exercise these rights, contact: [Insert Email or Form Link]

8. Data Security

We implement robust security measures including:

• HTTPS encryption

• Regular software updates and security patches

• Access controls and staff training

• Secure servers hosted in the EU/EEA

We regularly audit our systems for potential vulnerabilities and attacks.

9. Cookies and Tracking

We use cookies to:

• Enhance site functionality and user experience

• Collect analytics to improve performance

• Enable essential features (like cart and login)

You can manage cookie preferences via our cookie consent banner or browser settings.

For more details, see our [Cookie Policy].

10. International Data Transfers

If any data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses

• Transfers to countries with adequacy decisions

• Binding corporate rules (if applicable)

11. Changes to This Policy

We may update this GDPR Privacy Policy from time to time. Any changes will be posted on this page, with an updated effective date. We encourage you to review it regularly.

12. Contact Us

If you have questions about this policy or your personal data:

Back2Buzz – Data Protection Officer
Email: ebusiness@back2buzz.be
Address: 47 Place A. Favresse, B-1310 La Hulpe, BE

If you believe your data rights are not respected, you can lodge a complaint with the Data Protection Authority in your country.