Privacy & Cookies Policy

In this privacy policy you can read which personal data we collect when you visit our website, email us, use the chat or place an order. You can also read why we do this, how long we keep the data and what your rights are. We explain the legal terms in plain language.

a. Data controller
The data controller is the company that decides why and how your personal data is processed. For this website and online shop, that is:

ClipperShop - FlowCore Srl
Rue de la Croix Rouge 1
7740 Pecq, Belgium
Company number: 1036.070.163
Tel: +32 69 49 03 63 or +32 498 92 18 53

For any question about this privacy policy or about your data, you can always reach us by email to info@clippershop.be, through the chat, by phone or by letter at the address above.

b. Data subject
The data subject is the living natural person who can be identified, directly or indirectly, by means of personal data. Personal data should be understood broadly: names, contact details and personal characteristics, but also orders or other documents that make it possible to identify someone.

c. Applicable law
The processing of personal data by ClipperShop - FlowCore Srl is governed by European Regulation 2016/679 (the General Data Protection Regulation, GDPR) and by the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

Last updated on 3 October 2026.

a. What is personal data
Personal data is any information about a person who can be identified. We collect it in three ways: when you enter it yourself, when you place an order, and automatically when you visit the website.

b. Data you enter yourself
To use the newsletter or the chat, or to email or call us, you give us data yourself:

• name and email address;
• possibly your phone number and address;
• the content of your question or message.

We assume this data is correct.

c. Data when you place an order
An order is a sales contract. For it, we process:

• identification data: name, delivery and billing address, phone number, email address;
• for businesses: the VAT number;
• date of birth or age, for the legal age check when selling smoking articles;
• payment data: amount, payment method and payment status.

The payment itself is handled by Mollie or PayPal. We do not see or store your card number or bank details.

d. Data collected automatically
During your visit, data is collected through cookies and similar techniques, such as:

• your IP address and the time of your visit;
• the pages you view and the website you came from;
• your device, operating system and browser.

We only place non-essential cookies with your consent, which we ask for through the cookie banner. You can always change that choice. You can read more about this in our cookie policy below.

e. No sensitive data
We do not process sensitive data, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation, health or trade union membership.

a. What processing means
Processing is everything that is done with personal data: collecting, recording, storing, updating, consulting, using, transferring, archiving and erasing. We only do this for the purposes below, each time with its legal basis.

b. When you use the website

• Answering your questions (email, phone, chat).
  Legal basis: legitimate interest, or the performance of a contract if your question is about an order.
• Newsletter with promotions and new products.
  Legal basis: your consent. For existing customers: our legitimate interest, for similar products. You can unsubscribe at any time through the link in every newsletter.
• Improving the website with statistics.
  Legal basis: your consent through the cookie banner.
• A review you write about a product you bought from us. With the review we show your first name, the first letter of your last name, the date, your rating and your text; never your email address or your order. What we do with reviews is in our review policy.
  Legal basis: your consent, which you give by posting the review. You can always have the review removed.

c. When you place an order

• Customer management: processing, delivering and following up the order, after-sales service and warranty.
  Legal basis: performance of the contract.
• Accounting and invoicing.
  Legal basis: legal obligation.
• Age check when selling smoking articles.
  Legal basis: legal obligation.
• After delivery, one email asking you to review the products you bought, with one reminder at most. You stop these emails with the link at the bottom of every review email or in your account under "My reviews".
  Legal basis: our legitimate interest in informing other customers honestly about our products. You can always object to it.

d. Only what is necessary
We only collect the data needed for these purposes. Data that is incorrect or incomplete is corrected or erased.

We do not keep personal data longer than necessary for the purpose for which it was collected:

• Orders and invoices: 10 years after the order, as required by law for accounting and VAT.
• Your customer account: as long as your account exists. You can always have it deleted; we then keep the order data until the end of the legal period.
• Customer follow-up and newsletter: up to 3 years after your last order or contact, or until you unsubscribe. After that, the data is erased.
• Questions by email, and messages you sent earlier through our contact form: up to 2 years after the question has been dealt with.
• Conversations with the virtual assistant: 90 days, see point 6.
• Reviews: as long as they are online, until you ask us to remove them or until your account is deleted at your request. If you no longer want review emails, we only keep your customer number and a code calculated from your email address (not the address itself), so that a later order without an account does not get a review email either.
• Cookies: see the cookie policy below.

ClipperShop - FlowCore Srl never sells or rents out your data. We only pass it on when necessary.

a. To processors who work for us

• Mollie and PayPal: payments;
• Sendcloud and the carriers who deliver your parcel: shipping and tracking of your parcel;
• MailerLite: the newsletter;
• Resend: sending emails;
• OpenAI: the virtual assistant (see point 6);
• Google: website statistics, only with your consent;
• our hosting provider: the website and the online shop.

A data processing agreement has been concluded with each processor. They may only use your data for the task we give them.

b. Outside the European Union
Some processors are based in the United States. Transfers there take place on the basis of the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.

c. To third parties, when required by law
When there is a legal obligation, or at the request of judicial authorities or the police.

On our website you can ask questions to our virtual assistant. You are then not talking to a person, but to a computer program that works with artificial intelligence (AI). The chat window says so when it starts and shows the label "AI" at the top.

a. How the assistant works
The assistant answers on the basis of the information on our website, our own explanations and, if you are logged in to your account, the data of your orders. If the assistant cannot help you, or if you ask for it, it passes your question on to a staff member. When a staff member answers, you see their first name and possibly a photo, with the word "Colleague". If the staff member does not speak your language, your message is translated automatically for them and their answer is translated automatically into your language, by the same AI model; such an answer is marked "Automatically translated". The assistant takes no decisions with legal effects for you: it only provides information.

b. Which data

• your messages and the answers;
• the language of the page;
• a random code that recognises your browser;
• the moment you accepted the privacy policy;
• your rating of an answer (thumbs up or down);
• your email address, if you give it yourself;
• a shortened part of your IP address (for example 81.82.83.xxx) and the country it points to;
• if you are logged in: your first name and the order data needed to answer your question (status, items, carrier and tracking code).

We never show a full address or payment details in the chat, and we never store your full IP address.

c. Why
To answer your question and follow up your order (performance of the contract), to improve our answers, for example by reviewing questions the assistant could not answer, and to protect the chat window against misuse, for example a program that floods it with messages (in each case our legitimate interest). That is what the shortened IP address is for: counting how many messages come from the same address, and being able to block an address or a country.

d. Who processes the data for us
OpenAI, the provider of the AI model that writes the answers and makes the translations. Your messages may be processed in the United States for this, with the safeguards required by the GDPR (the EU-US Data Privacy Framework or standard contractual clauses). According to OpenAI's terms, this data is not used to train its models. The conversations themselves are stored on our own server in the European Union. For the status of your parcel we request the data from Sendcloud, and reply emails are sent through Resend. When your question goes to a staff member, they may receive a notification with your question and the latest messages through Telegram and answer you from there; Telegram may process this data outside the European Union. We look up the country of an IP address on our own server, in a list from DB-IP, without passing your address on to anyone.

e. How long
A conversation is kept for 90 days and then deleted automatically. The shortened IP address and the country are kept for 30 days. The current conversation is also kept in your own browser, so you can find it again when you move to another page. A conversation that has been inactive for a while disappears there by itself, and after logging out, the conversation linked to the account is no longer visible.

You have the right to:

• access your data;
• have incorrect data corrected;
• have your data erased, unless we are required by law to keep it;
• have the processing restricted;
• object to the processing, including direct marketing;
• receive your data in a common format (portability);
• withdraw your consent at any time, without affecting the processing that took place before.

How to make a request
By email to info@clippershop.be or by letter to ClipperShop - FlowCore Srl, Rue de la Croix Rouge 1, 7740 Pecq, Belgium. We reply within one month. To protect your data, we may ask you to confirm your identity.

Complaint
If you are not satisfied with our answer, you can lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

a. Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and access by unauthorised persons. The website uses a secure connection (https), and only staff members who need the data for their work have access to it.

b. Changes
We may update this privacy policy, for example when the law changes or when we start using a new service. The date of the last change is shown under point 1. We therefore advise you to check this page from time to time.

We use cookies on this website. A cookie is a small file that is sent with the pages of this website and stored by your browser on your device. The information in it can be read again on a later visit.

a. Essential cookies
These cookies are needed for the website and the shopping cart to work, to remember your language and to store your cookie choice. No consent is required for them. If you install our shop as an app, your device also keeps the page the app shows without internet and, if you close the install bar, that choice. They contain no personal data.

Notifications
If you switch on notifications (in the app, on a sold-out design or after an order), we keep the address your browser creates for them, your language and what you want a notification for: new designs, your order leaving or a design coming back in stock. For notifications about your orders we link that address to your account. The notification travels encrypted through your browser's service (Google, Apple, Mozilla or Microsoft): that service cannot read its content. You switch notifications off on the Notifications page in your account or in your browser settings. We then delete the address, as we do when your browser no longer accepts it.

b. Statistics: Google Analytics and our own counters
Only with your consent, we place a cookie from Google as part of the Google Analytics service. We use it to see how visitors use the website. We do not share the Analytics data with other Google services. The information is stored by Google on servers in the European Union and/or the United States. Google is certified under the EU-US Data Privacy Framework. With the same consent, we also count anonymously how often the install bar of our app is shown and how often the app is installed and opened. This is only a number per day, without a cookie and without anything that identifies you.

c. Marketing and social media
Only with your consent, we, our advertisers or social networks such as Facebook and Instagram place cookies that track which pages you visit, to better tailor content and ads to you. What these networks do with your data can be found in their own privacy policies. For transfers to the United States, they rely on the EU-US Data Privacy Framework or on standard contractual clauses.

d. Session cookies and persistent cookies
Session cookies are deleted automatically as soon as you close your browser. Persistent cookies are kept for some time, so that we recognise you on a later visit and you do not have to set your preferences again.

e. Changing your choice
You can always change your choice through the Cookie settings link at the bottom of the website. Your choice is stored per browser and per device. If you use several browsers or devices, or if several people share the same device, check your choice from time to time.

f. Deleting cookies
You can delete existing cookies through your browser settings (search for "manage cookies" in your browser's help). On your next visit, we will ask for your consent again.