PRIVACY POLICY

1) Who we are

 

 

CRAFT PC designs, assembles, and sells custom PCs and components to customers across the EU (online and in-store in Eupen, Belgium).

 

 

2) What data we collect

 

• Identity & contact: name, email, phone, billing/shipping address, VAT number (B2B).

• Order & fulfillment: items purchased, serials, invoices, delivery details, RMA/returns.

• Payments: method, status, transaction IDs (we do not store full card numbers — payments are processed via our providers).

• Support & messaging: emails, WhatsApp/Instagram DMs, troubleshooting notes.

• Website & analytics: device info, pages viewed, consent choices, cookies/trackers.

• Marketing preferences: newsletter/ads consent, unsubscribes.

• Custom builds: spec/requirements you share (budget, monitor, games/apps).

 

 

3) Why we process your data (lawful bases)

 

• Contract – to take orders, deliver goods, provide warranty/RMA, customer support.

• Legal obligation – invoicing, VAT and accounting records, consumer law.

• Legitimate interests – fraud prevention, service security, limited analytics to improve our site and services, handling social DMs (we balance this against your rights).

• Consent – non-essential cookies/trackers, direct marketing (email/SMS/ads), and publishing your UGC/testimonials. You can withdraw consent any time.

 

 

4) How long we keep it

 

• Orders/invoices: up to 10 years (accounting law).

• Warranty/RMA: during warranty period + reasonable period to close the case.

• Support messages: up to 2 years after last contact.

• Marketing: until you opt out or we delete inactive records.

• Analytics cookies/IDs: per our Cookies Policy.

 

 

5) Who we share data with (processors/partners)

 

Only as needed for the purposes above:

 

• E-commerce & hosting: Wix (site), related IT providers.

• Payments: Mollie, Klarna, PayPal, banks (SEPA/IBAN).

• Shipping: DHL, DPD, Nova Poshta Global (labeling, tracking).

• Analytics/ads (consent-based): Google (Analytics/Ads/Tag Manager), Meta (Facebook/Instagram, Pixel).

• Service & admin: email/CRM tools, accountants, authorized service centers.

  We sign data-processing terms where required.

 

 

6) International transfers

 

If partners are outside the EEA/UK, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) with supplementary safeguards.

 

 

7) Your rights

 

You can access, rectify, erase, or port your data, and restrict or object to processing based on legitimate interests. You can withdraw consent at any time (this won’t affect prior processing).

To exercise your rights, email helpcraftpc@gmail.com. We may ask for proof of identity and will reply within 1 month (extendable where allowed).

 

Complaints: you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA) — Rue de la Presse 35, 1000 Brussels; +32 2 274 48 00; contact@apd-gba.be. 

 

 

8) Children

 

Our store is intended for adults (18+). We do not knowingly collect data from children.

 

 

9) Security

 

We apply technical and organizational measures appropriate to risk (TLS encryption in transit, access controls, data minimization, backups).

 

 

10) Changes

 

We may update this policy. The latest version is always published here.

 

Contact: CRAFT PC EUPEN — Haasstrasse 64, 4700 Eupen, Belgium · helpcraftpc@gmail.com