Privacy policy

PRIVACY POLICY
Last updated: 10 September 2026

This policy explains how your personal data is used when you visit the Slow Bass® D/Vision store, place an order or subscribe to our communications.

1. Who is responsible for your data?

The store is operated by:

Steven von Oakwood
Louvain-la-Neuve — Belgium
Belgian business registration number (BCE): 0806.525.108
VAT number: BE 0806.525.108
Email: info@slowbass-design.com

Steven von Oakwood is the data controller for the processing carried out to manage the store, orders and SBD communications.

2. What data do we use?

Depending on your interactions with the store, we may process:

• Your first and last name, email address, delivery and billing addresses and, where necessary, your telephone number;

• Products ordered, amounts, payment references and statuses, delivery information, returns and refunds;

• Information you provide when making an enquiry or complaint;

• Your communication preferences and records documenting your consent or unsubscribe request;

• Technical and browsing data: IP address, browser, device, pages and products viewed, shopping cart and interactions with the store;

• Information about the delivery of our emails and clicks on their links.

This data comes from you, your use of the store and the service providers involved in payment, production or delivery.

Required fields are identified when data is collected. Without the information needed for an order, we cannot process or deliver it.

3. Why do we use this data?

We use your data for the following purposes:

Managing your orders and customer service
To record purchases, process payments, produce and deliver products, manage returns and respond to your enquiries. This processing is based on the performance of the contract or steps taken at your request before a purchase.

Meeting our legal obligations
To maintain our accounts, retain required supporting documents and comply with tax and consumer protection obligations.

Protecting the store and our rights
To prevent fraud, secure transactions and manage disputes. This processing is based on our legitimate interest in protecting our business and customers while respecting your rights.

Sending you marketing communications
With your consent, to send SBD news, welcome messages, offers and customer loyalty communications.

Personalising communications and measuring their effectiveness
Depending on your consent choices, to use your interactions with the store or emails to tailor communications, analyse their effectiveness and send reminders about products viewed, abandoned carts or abandoned checkouts.

Non-essential cookies and tracking technologies require your consent.

4. Newsletter and marketing emails

We use Shopify Messaging, together with Shopify Flow for certain automations.

Our marketing communications are sent only to subscribers. Double opt-in is enabled for new email subscriptions.

Some communications may depend on your purchase history or, where your privacy choices allow, on products viewed and abandoned carts or checkouts.

You can unsubscribe at any time using the link in our emails or by writing to info@slowbass-design.com. Withdrawing your consent does not affect processing carried out before its withdrawal.

Unsubscribing from marketing does not prevent you from receiving messages needed to follow up on an order or enquiry.

Email open tracking is disabled in our Shopify Messaging settings. Information about clicks, message delivery and orders attributed to campaigns may nevertheless be processed, depending on the features used and the applicable consents.

We do not currently run marketing campaigns by SMS or WhatsApp.

5. Who may receive your data?

Necessary data may be shared with the following parties:

• Shopify, for hosting, store operations, orders, payments and communications, including through Shopify Payments, Shop Pay, Messaging and Flow;

• Printful, for on-demand production, shipping and handling product-related issues;

• Carriers and logistics partners, for deliveries and returns;

• Providers involved in your chosen payment method, including banks, card networks and services such as Klarna, Apple Pay, Google Pay, Bancontact or MobilePay, where offered and used;

• Email and support service providers needed to respond to your enquiries;

• Our accounting or legal advisers and the competent authorities, where necessary or legally required.

The information shared depends on the service concerned. Some providers, particularly payment providers, also process data to meet their own obligations and in accordance with their privacy policies.

Full payment card details are processed by payment providers. We receive the information needed to track the transaction and may receive partial payment details.

6. Shopify Network Intelligence

Shopify Network Intelligence is enabled on our store.

As part of this service, Shopify may use information about your interactions with SBD together with information from your interactions with other merchants and with Shopify. This processing contributes, among other things, to improving services, personalisation and advertising relevance.

Information may be shared with Shopify and its service providers, including in other countries. Advertising uses and non-essential technologies are subject to the applicable consent choices.

For processing where Shopify determines its own purposes and means, please consult its Consumer Privacy Policy.

You can also visit the Shopify Privacy Portal to exercise your rights with Shopify, including withdrawing consent or objecting to certain processing.

7. Cookies and preferences

The store uses strictly necessary cookies, including for the shopping cart, security and checkout functionality.

Cookies and technologies used for analytics, non-essential personalisation or advertising are used according to your consent. You can accept them, reject them or choose which categories to allow through the banner.

You can change your choices later using the cookie preferences available on the store. Rejecting optional cookies does not prevent you from placing an order.

Newsletter subscriptions and cookie consent are separate choices.

8. International transfers

Some providers may process data outside the European Economic Area. Choosing primary hosting within the European Union does not mean that all processing takes place exclusively within the EU.

Where an international transfer is necessary, it must be covered by a mechanism provided for under applicable law, such as an adequacy decision or standard contractual clauses, supplemented where necessary by additional measures.

You can contact us for details of the applicable safeguards and how to obtain access to them.

9. Retention periods

We retain data for periods appropriate to its purpose:

Orders and supporting documents: while they are being processed, then for the periods required by accounting and tax obligations and, where necessary, to manage guarantees or defend legal claims.

Customer service enquiries: we retain correspondence while handling your enquiry and for two years after it is closed to support follow-up. It is then deleted or anonymised. Documents needed to comply with a legal obligation, manage an ongoing guarantee or establish, exercise or defend a legal claim may be retained separately, with restricted access, for as long as necessary.

Marketing list: until you unsubscribe or after three years without a relevant voluntary interaction, such as a purchase, a click in a communication or confirmation of your interest. Simply receiving an email does not extend this period.

Consent and objection records: strictly necessary records may be retained separately to demonstrate that your choices have been respected and to avoid resubscribing you by mistake.

Technical and tracking data: according to its purpose, the operating lifespan of the technologies concerned and security needs, without indefinite retention.

Data needed to meet a legal obligation or handle a dispute may continue to be retained with restricted access after it is removed from routine use.

10. Your rights

Subject to the conditions set out in the GDPR, you may request access to, rectification or erasure of your data, restriction of processing or the portability of certain data.

You may also object to processing based on a legitimate interest, object to direct marketing at any time and withdraw your consent where processing is based on it.

To exercise your rights, write to info@slowbass-design.com. Where necessary, we will request only the information needed to verify your identity.

We normally respond within one month. This period may be extended by two months for complex or numerous requests; we will inform you within the first month and explain the reasons.

You may lodge a complaint with the Belgian Data Protection Authority: www.autoriteprotectiondonnees.be.

11. Security and updates

We take appropriate technical and organisational measures to reduce the risk of unauthorised access, loss and disclosure of data.

This policy may change to reflect developments in our services or obligations. The last updated date appears at the beginning of this document. If a new use requires your consent, updating this policy does not replace that consent.