Privacy

Who is responsible

The data controller for this shop is:

Legal name

Peg Productions BV

Registered office

Alsembergsesteenweg 897, 1180 Ukkel, Brussel, Belgium

Contact for privacy matters

info@pegproductions.com

What we collect

We only collect what we need to take an order, deliver a parcel, comply with Belgian tax law, and run the website.

When you place an order

• Your name and delivery address
• Your email address (for the order confirmation and tracking link)
• Your phone number, if your carrier requires it for delivery
• What you ordered and the price you paid
• Stripe's payment reference (we do not see your card number; Stripe handles payment data directly)

When you visit the site

• Server logs containing your IP address, browser, and the pages you requested (kept short-term for security and debugging)
• A session cookie that holds your cart and language preference
• Your cookie consent choices, if you make them

If you write to us

When you email us, we keep that correspondence so we can follow up. We do not run a mailing list and we do not send marketing email.

Why we are allowed to process this

• Performance of a contract (Art. 6(1)(b) GDPR): processing your order and delivering it
• Legal obligation (Art. 6(1)(c) GDPR): keeping invoices and accounting records as required by Belgian law
• Legitimate interest (Art. 6(1)(f) GDPR): preventing fraud, securing the site, and answering questions you send us
• Consent (Art. 6(1)(a) GDPR): for any non-essential cookies, where we ask before they load

Who else sees the data

We share the minimum needed with the processors that make the shop work. Each acts under a written data-processing agreement and is bound by the GDPR.

• Stripe (payment processing)
• Sendcloud and the carrier you choose at checkout (shipping label and tracking)
• Postmark (transactional email delivery)
• Render.com (hosting), Hetzner (object storage), Sentry (error tracking)

We do not sell or rent your data. We do not transfer personal data outside the EU/EEA except where Stripe or Sentry route limited operational data under Standard Contractual Clauses.

How long we keep it

Invoices and order records are kept for 10 years after the year of the transaction, as required by Article 60 of the Belgian VAT Code.

Your cart and session data live in your browser only. They expire when you close the browser or after a few weeks of inactivity.

If you ask us to delete your data sooner, we will — except for the invoice records the law requires us to keep.

Your rights

Under the GDPR you have the right to:

• Access the data we hold about you (Art. 15)
• Have inaccurate data corrected (Art. 16)
• Have your data deleted, within the limits set by law (Art. 17)
• Restrict or object to processing (Art. 18 and 21)
• Receive your data in a portable format (Art. 20)
• Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, write to info@pegproductions.com. We will reply within one month.

Right to lodge a complaint

If you believe we are mishandling your data, you have the right to complain to the Belgian Data Protection Authority:

Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) — www.dataprotectionauthority.be

Cookies

We use a small number of strictly necessary cookies for the cart, the language switcher, and CSRF protection. Anything beyond that is loaded only after you opt in via the cookie banner.