Privacy policy

Privacy Policy
Last updated: May 19, 2025

This Privacy Policy describes how FlatPackPony ("we", "us", or "our") collects, uses, and protects your personal data when you visit or interact with our website www.flatpackpony.com, make purchases, or otherwise use our services (collectively, the "Services").

Please read this policy carefully to understand how we process your data and what rights you have.

1. Who We Are

We are a verified small business based in Belgium.

Flatpackpony is a creative webshop focused on originality and imagination, offering DIY kits, gifts, wall art, and apparel.

Current legal status: FlatPackPony is a registered business under KBO/BCE number 1024.591.204, based in Belgium.

You may contact us at:

2. Personal Data We Collect

a. Information You Provide

  • Name, address, email, phone number

  • Order and payment details

  • Account login details (if applicable)

  • Reviews, messages, or referrals submitted by you

b. Information Collected Automatically

  • IP address, browser/device information

  • Browsing behavior (e.g. viewed products, cart activity)

  • Cookies and analytics data (see section 5)

c. Third-Party Sources

  • Payment providers (e.g. Stripe, Shopify Payments)

  • Platforms such as Shopify and email tools

We do not knowingly collect data from children under 18.

3. Why and How We Use Your Data

Purpose Legal Basis (GDPR)
Fulfilling orders and contracts Art. 6(1)(b) – Contract
Account and service management Art. 6(1)(b) – Contract
Customer service and support Art. 6(1)(f) – Legitimate interest
Marketing (with consent) Art. 6(1)(a) – Consent
Website improvement Art. 6(1)(f) – Legitimate interest
Fraud prevention and security Art. 6(1)(f) – Legitimate interest

4. Data Sharing

We may share your data with:

  • Shopify (e-commerce platform)

  • Payment processors (e.g. Stripe)

  • Fulfillment and shipping providers

  • Marketing and analytics providers

We do not sell your personal data. We may share anonymized data with partners for analytics or advertising.

5. Cookies

We use cookies and similar technologies to:

  • Enable core site functionality

  • Analyze traffic and usage

  • Personalize your experience

For non-essential cookies (marketing, analytics), we ask for explicit consent. You can manage your preferences anytime via our cookie banner.

For full details, please refer to our Cookie Policy.

Our website also honors the Global Privacy Control (GPC) signal.

6. Data Transfers

Some of our providers are outside the EEA (e.g. Shopify, email tools). We ensure that appropriate safeguards (e.g., Standard Contractual Clauses) are in place and assess risks before data transfers.

7. Retention

We retain personal data:

  • Order/account data: 7 years (legal/accounting)

  • Support tickets: 2 years

  • Marketing consent: until withdrawn

  • Inactive accounts: deleted after 3 years of inactivity

8. Your Rights (under GDPR)

You have the right to:

  • Access and receive a copy of your data

  • Correct inaccurate data

  • Request deletion (under conditions)

  • Object to processing (esp. marketing)

  • Restrict processing

  • Port your data

  • Withdraw consent at any time

  • File a complaint with a data protection authority (e.g. GBA/APD)

To exercise your rights, contact us at flatpackpony@gmail.com.

9. User Content

Reviews or other content you share on the site may be public. Please avoid posting personal information.

10. Third-Party Links

Our site may contain links to other websites. We are not responsible for their privacy practices. Review their privacy policies before submitting data.

11. Updates

We may update this Privacy Policy to reflect changes to our practices or legal requirements. Any updates will be posted here with a revised “Last updated” date.

Thank you for trusting FlatPackPony with your data. We are committed to creativity, transparency, and respecting your privacy.