Website copy

Last updated: 10 August 2026

1. Our commitment

Tapis de Fleurs de Bruxelles ASBL respects your privacy and processes personal data in accordance with applicable Belgian and European data protection legislation, including the General Data Protection Regulation.

We only collect and process personal data for defined and legitimate purposes. We do not sell personal data.

2. Data controller

The organisation responsible for processing personal data through the Flower Carpet e-shop is:

Tapis de Fleurs de Bruxelles ASBL
Grand-Place SN
1000 Brussels
Belgium
Enterprise and VAT number: BE0445932160
Legal contact email: richard.poncin@flowercarpet.be

3. Personal data we process

Depending on your use of the e-shop, we may process the following categories of data.

Identification and contact data

• first name and last name;
• email address;
• telephone number;
• billing address;
• delivery address.

Order and customer account data

• products ordered;
• order amount;
• order date and status;
• invoice information;
• returns and refunds;
• account username;
• saved addresses;
• order history;
• account preferences.

Payment data

Payments are processed by an external payment service provider. Flower Carpet does not store your complete payment card details.

We may receive limited payment information such as payment status, transaction reference, payment method, payment date and limited identification information supplied by the payment provider.

Communications

• customer service requests;
• return and withdrawal requests;
• complaints;
• delivery questions;
• messages relating to an order.

Technical and usage data

• IP address;
• browser and device information;
• date and time of access;
• security logs;
• cookie identifiers;
• website interactions;
• analytics information where permitted.

4. Purposes and legal bases

Processing and delivering orders

We process personal data to register and confirm orders, verify payment, prepare and deliver products, create invoices, manage returns and refunds, and provide customer support.

The legal basis is the performance of the sales contract or steps requested before entering into that contract.

Managing customer accounts

When a customer creates an account, we process the information necessary to provide access to order history, saved addresses, account settings and related services.

The legal basis is the performance of the service requested by the customer.

Legal and accounting obligations

We process and retain certain order, invoice, payment and customer information to comply with applicable accounting, tax, invoicing and consumer protection obligations.

The legal basis is compliance with a legal obligation.

Security and fraud prevention

We may process technical and transactional information to secure the e-shop, prevent fraud, detect misuse, resolve technical issues, and establish or defend legal claims.

The legal basis is our legitimate interest in operating a secure and reliable e-shop.

Marketing

Promotional communications are only sent where we have a valid legal basis. You may withdraw your consent or unsubscribe at any time.

Cookies and analytics

Cookies strictly necessary for the operation of the website may be used without consent where permitted. Analytics, advertising and other non-essential cookies are only activated after the required consent has been obtained. Cookie choices can be managed through the website’s cookie preference tool.

5. Recipients of personal data

Personal data may be communicated, where necessary, to service providers involved in website hosting, e-commerce operation and maintenance, payment processing, parcel delivery, accounting and invoicing, email delivery, customer communications, website security, analytics and cookie consent management.

These service providers may only process personal data for the services they provide and must protect the data appropriately.

Personal data may also be communicated to public authorities where required by law.

6. International transfers

Some technical service providers may process personal data outside the European Economic Area.

Where this occurs, the transfer will be based on an appropriate legal safeguard, such as an adequacy decision, approved standard contractual clauses or another mechanism permitted by applicable data protection law.

7. Retention periods

Personal data are not retained longer than necessary.

• order, invoice, payment and accounting records may be retained for the legally required accounting and tax retention period;
• customer account data may be retained while the account remains active and afterwards where necessary for order records, legal obligations or claims;
• customer service communications are retained for as long as necessary to process the request and any related claim;
• marketing data are retained until consent is withdrawn or the data are no longer required;
• security and technical logs are retained for a limited period necessary for security and troubleshooting;
• cookie data are retained for the periods indicated in the cookie settings or applicable cookie policy.

8. Your rights

Subject to the applicable legal conditions, you may request access to your personal data, correction of inaccurate or incomplete data, deletion of personal data, restriction of processing, objection to certain processing, portability of data supplied by you, and withdrawal of consent at any time.

Withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.

Some information cannot be deleted immediately when its retention is required by accounting, tax or other legal obligations.

9. Exercising your rights

Requests concerning personal data may be sent to richard.poncin@flowercarpet.be.

Please describe your request clearly. We may request reasonable proof of identity where necessary to prevent unauthorised access to personal data.

10. Complaints

You have the right to lodge a complaint with the Belgian Data Protection Authority:

Belgian Data Protection Authority
Rue de la Presse 35
1000 Brussels
Belgium

We encourage you to contact Flower Carpet first so that we can attempt to resolve the issue.

11. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

No online system can guarantee absolute security.

12. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes to the e-shop, service providers, legal requirements or personal data processing activities.

The current version will always be published on this page.

Drafting references

These references support the legal principles used to prepare this draft. They are not intended to appear in the published website copy.

• Belgian Data Protection Authority