Privacy Notice

• Identity and contact data.
• Business data: business name, optional company number, optional VAT number, country of establishment.
• Order, payment and delivery data.
• Membership and device data, including subscription tier, active months and any loaned device serial.
• Academy progress and certification results.
• Certified Artists Map listing data.
• Website and device data, including IP address, browser and usage of the site.
• Communications with us.

• Performance of the Certified Artist Agreement and of orders (Art 6(1)(b) GDPR).
• Compliance with legal obligations, including Belgian VAT and accounting law (Art 6(1)(c) GDPR).
• Legitimate interests in securing the service, preventing fraud, improving the offer and direct marketing to existing customers (Art 6(1)(f) GDPR).
• Consent for the Certified Artists Map listing, for marketing to non-customers, and for non-essential cookies (Art 6(1)(a) GDPR).

• Payment providers.
• The subscription and invoicing tooling we use to run memberships.
• Carriers and fulfilment partners for delivery.
• Email and messaging providers for service and marketing communication.
• Our accountant.
• IT and hosting providers.

Processors act on our instructions under a data processing agreement. We never sell personal data.

Where a processor operates outside the EEA, we rely on an adequacy decision or on the European Commission's standard contractual clauses.

• Contract, order and invoice data: ten (10) years, as required by Belgian accounting law.
• Membership and device records: for the duration of the membership plus ten years.
• Academy results: for as long as the certification is claimed.
• Map listing data: until the listing is removed.
• Marketing data: until consent is withdrawn.
• Website analytics: a maximum of twenty-six (26) months.

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting processing carried out before the withdrawal.

You can exercise these rights at privacy@spectralashes.eu. We respond within one month.

We do not carry out automated decision-making producing legal effects.

Essential cookies keep the site and checkout working. Analytics and marketing cookies are only set with your consent, are managed through the consent banner, and can be changed at any time.

You may lodge a complaint with the Belgian Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, www.gegevensbeschermingsautoriteit.be, or with the supervisory authority in your country of residence.

We publish revisions on this page and update the date above.