Privacy Policy

Last updated: 9dec2025

This Privacy Policy describes how plaq.studio, operated by Sandbox Services BV, collects, uses, and protects your personal data when you visit or make a purchase on our website.

1. Company Information

Sandbox Services BV

C-mine 12, 3600 Genk, Belgium

VAT: BE 0651.791.302

Email: privacy@plaq.studio

Sandbox Services BV acts as the Data Controller for all personal data processed through plaq.studio.

2. Personal Data We Collect

We collect personal data in order to process orders, provide services, and improve our website.

The data we collect includes:

2.1 Data you provide directly

  • Name
  • Billing and shipping address
  • Email address
  • Phone number (optional)
  • Order details
  • Payment information (processed by Mollie, not stored by us)
  • Account information (if you create an account)

2.2 Data collected automatically

  • IP address
  • Browser type and device information
  • Cookies and usage data
  • Analytics data collected via Google Analytics and Google Tag Manager

2.3 Data collected when you communicate with us

  • Messages sent through contact forms or email
  • Customer support requests

3. How We Use Your Personal Data

We process your data for the following purposes:

3.1 To process and fulfill your order

  • Managing orders and payments
  • Shipping with Bpost
  • Sending order confirmations and notifications via Postmark

3.2 To operate our online store

  • Running WooCommerce and related plugins
  • Fraud prevention and security

3.3 To improve our website

  • Analytics and performance measurement
  • Ensuring site functionality and debugging

3.4 For legal and regulatory compliance

  • Bookkeeping (7-year retention period)
  • VAT and transaction records
  • Handling disputes or claims

We do not sell personal data to third parties.

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

  • Contractual necessity: to process and deliver your order.
  • Legal obligation: accounting and tax requirements.
  • Legitimate interest: analytics, fraud prevention, and website security.
  • Consent: for cookies, analytics, and marketing (managed via CookieScript).

5. Sharing Your Data

We share your data only with trusted service providers essential to our operations:

5.1 Payment provider

Mollie processes your payments securely.

We do not store your full payment details.

5.2 Shipping

Bpost receives your name, address, and tracking information to deliver your order.

5.3 Email provider

Postmark is used to send transactional emails such as order confirmations and updates.

5.4 Analytics

Google Analytics and Google Tag Manager collect anonymized usage data.

Your consent is requested via CookieScript before any non-essential cookies are loaded.

5.5 Website infrastructure

  • WooCommerce
  • WordPress plugins
  • Secure hosting environment

All processors are GDPR-compliant and located in the EU or offer adequate safeguards.

6. Cookies & Tracking Technologies

We use cookies to:

  • Enable core site functionality
  • Store your cart and login status
  • Improve performance and analytics
  • Manage cookie consent via CookieScript

You can change or withdraw your consent at any time using the cookie banner.

See our separate Cookie Policy for more details.

7. Data Retention

We retain personal data only as long as required for our operations:

  • Order & customer data: 7 years (legal obligation)
  • Analytics data: retention according to your GA settings
  • Emails and support messages: until no longer needed
  • Account data: until the user requests deletion

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability
  • Withdraw cookie/analytics consent
  • File a complaint with the Belgian Data Protection Authority

To exercise your rights, contact: privacy@plaq.studio

9. International Transfers

Some data may be processed outside the EU (e.g., Postmark, Google).

In such cases, data is protected through:

  • Standard Contractual Clauses
  • GDPR-compliant processor agreements
  • Adequate safeguards

10. Security Measures

We take appropriate technical and organizational measures to protect your data, including:

  • Encrypted website connections (HTTPS)
  • Restricted access to customer data
  • Secure servers and firewalls
  • Regular updates and monitoring

11. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated revision date.

12. Contact

If you have any questions about this Privacy Policy or your data, contact:

privacy@plaq.studio

Sandbox Services BV

C-mine 12, 3600 Genk, Belgium