Privacy Policy

Last updated: 20-09-2026

Squishbao respects your privacy and handles your personal data carefully, in line with the General Data Protection Regulation (GDPR). This policy explains which data we collect, why, and what rights you have.

Still to fill in: official company name, company/VAT number, business address and contact details of the data controller (and, if applicable, a data protection officer).

What data do we collect?

Order details: name, address, email address, phone number and order contents, once you place an order.
Payment details: processed by our payment provider — we do not store full card or account details ourselves.
Account details: if you create an account, the details you provide when doing so.
Usage data: your cart and discount code are remembered locally in your browser (see our cookie policy).
Statistics: only with your consent, to see how many visitors the site gets and which pages are popular. Not yet active at this time.
Contact: details you share yourself when you send us a message (e.g. via email or a contact form).

What do we use this data for?

To process, ship and track your order (performance of the contract).
To answer your questions and provide customer service.
To send a newsletter, with your consent, or to improve the site based on statistics.
To comply with legal obligations (e.g. bookkeeping and tax record-keeping requirements).

Who do we share data with?

We only share data with parties that need it to make our service possible, such as:

A payment provider, to process your payment.
A carrier, to deliver your order.
A hosting provider, to run this website.

Still to fill in: the specific names of the payment provider(s), carrier(s), hosting provider and any analytics tool used, plus whether any data is processed outside the EU/EEA (and if so, under which safeguards).

We never sell your data to third parties for commercial purposes.

How long do we keep your data?

We do not keep personal data longer than necessary for the purpose it was collected for, and we adhere to legal retention periods (for example, the tax record-keeping requirement for invoices).

Still to fill in: specific retention periods per data type.

Your rights

You have the right to:

request access to the data we hold about you;
have inaccurate data corrected;
have your data deleted ("right to be forgotten");
have the processing of your data restricted, or object to it;
request your data in a portable format (data portability);
withdraw previously given consent (e.g. for statistics) at any time via our cookie preferences;
file a complaint with the supervisory authority — in Belgium this is the Data Protection Authority (DPA).

To exercise any of these rights, please get in touch with us.

Still to fill in: the email address or form through which requests should come in.

Security

We take appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

Changes

We may update this privacy policy from time to time. The date at the top of this page shows when it was last updated.