Fred Corp. processes personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, and Belgian data protection law.
This policy explains what we collect, why, how long we keep it, and what you can ask us to do about it.
The short version
We collect what we need to take your order, ship it, invoice it, and support it. Nothing more.
We do not sell your personal data to third parties. We do not rent it, trade it, or share it for anyone else's marketing. We never have and we do not intend to. The only parties who receive your data are the ones required to complete the transaction, such as the payment processor and the shipping carrier, and they may only use it for that purpose.
1. Who is responsible
The controller for the processing described here is:
Fred Corp.
BE1039.629.964
Rue du Village, 6
1320 Beauvechain
We have not appointed a Data Protection Officer, as we are not required to.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, shipping address, email, phone | Fulfilling and delivering your order | Performance of a contract |
| Billing address, VAT number where applicable | Issuing a valid invoice | Legal obligation |
| Order history and payment status | Accounting, warranty handling, support | Legal obligation and legitimate interest |
| Correspondence you send us | Answering your questions and handling claims | Legitimate interest |
| Email address, if you subscribe | Sending you product news | Consent |
| Technical data from your visit | Running the site and keeping it secure | Legitimate interest |
We do not collect special categories of data, and we have no interest in doing so.
Payment card details are never stored on our systems. Card data goes directly to our payment processor.
3. Who receives your data
We share the minimum needed with a small number of processors:
- The provider hosting the shop
- The payment processor handling your transaction
- The carrier delivering your parcel
- Our accounting provider, for invoices we are legally required to keep
Each of these acts under a data processing agreement and may only use your data to perform the service we engaged them for.
We may also disclose data where a legal obligation requires it, for instance to tax authorities or in response to a valid legal order.
That is the complete list. Your data is not passed to advertisers, data brokers, or analytics companies that would use it for their own purposes.
4. Transfers outside the EEA
We prefer providers based in the European Economic Area. Where a provider processes data outside it, the transfer relies on an adequacy decision or on Standard Contractual Clauses.
5. How long we keep it
Invoices and the accounting records attached to them are kept for the period Belgian law requires, which is currently seven years.
Order and customer account data is kept while your account is active and for as long as warranty or support claims remain possible.
Correspondence is kept as long as it is useful for support, then deleted.
Marketing consent is kept until you withdraw it.
6. Cookies
The site uses cookies that are strictly necessary for it to work, such as keeping you logged in and remembering the contents of your basket. These do not require your consent.
Any cookie that is not strictly necessary is set only after you agree to it, and you can change your mind at any time.
7. Your rights
Under the GDPR you can ask us to:
- Give you a copy of the personal data we hold about you
- Correct anything inaccurate
- Delete your data, where we are not required to keep it
- Restrict or object to a particular processing
- Provide your data in a portable, machine-readable format
- Withdraw a consent you previously gave, without affecting what was lawful before you withdrew it
Write to the contact address in section 1. We will respond within one month. There is no charge for exercising these rights.
8. Security
Data is transmitted over encrypted connections and access is limited to the people who need it to run the shop. No system is perfect, and we do not claim otherwise, but a breach affecting your rights would be reported to the supervisory authority within 72 hours and to you directly where the regulation requires it.
9. Complaints
If you think we have handled your data badly, tell us first and we will try to put it right.
You also have the right to complain to the Belgian supervisory authority:
Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35 / Drukpersstraat 35,
1000 Brussels,
Belgium
contact@apd-gba.be
+32 2 274 48 00
https://www.autoriteprotectiondonnees.be
10. Changes
If this policy changes in a way that affects you, we will say so on the site. The date below shows when it was last revised.
Last updated : 2026-09-13