Privacy policy.

Last updated: 29 September 2026.

1. Data controller

The controller responsible for processing your data is La Vitrine Locale SRL(VAT BE 0784.342.988), Avenue Robert Schuman 51, bus D23, 1400 Nivelles, a company under Belgian law. For any question about your data, write to us at info@lavitrinelocale.be.

2. Data we collect

When you place an order

Surname, first name, delivery and billing address, email address and, where applicable, your phone number. This data is necessary to process and deliver your order.

At payment

Payments are processed by our payment provider. We never store your card details : only the payment confirmation is passed on to us.

While you browse

Technical data (page views, device, measurement data) may be collected via cookies, only with your consent (see §4).

When you write to us or request a quote

Through the contact form : your name, email address, phone number (optional) and your message. Through the business quote form : additionally your company name and the number of boxes you need. This information is stored in our customer management system and sent to our team by email.

When you apply for a job

Your name, email address, phone number, your LinkedIn profile and covering message (both optional), as well as your CV and cover letter as attachments. This information is stored in the recruitment module of our management system and is accessible only to the people involved in hiring.

To protect the forms

Your IP address is stored briefly to block mass submissions. It is erased automatically after one minute and is never used for any other purpose.

3. Purposes and legal basis

We use your data to :

• process your orders and deliver to you — legal basis : performance of the contract ;
• contact you about your order — performance of the contract ;
• meet our accounting and tax obligations — legal obligation ;
• answer your questions and quote requests — legal basis : your request, and our legitimate interest in replying to our customers ;
• process your job application — legal basis : steps taken at your request prior to entering an employment contract ;
• protect our forms against abuse — legal basis : our legitimate interest in keeping the service available ;
• measure audience and improve the site — legal basis : your consent ;
• measure the effectiveness of our ads — if you arrive through a Google ad and have accepted cookies, the click identifier and campaign are attached to your quote or contact request — legal basis : your consent ;

4. Cookies and consent

By default, no measurement or advertising cookie is placed without your agreement. We use Google's Consent Mode v2 : within the European Economic Area, all non-essential cookies are refused until you have accepted. You choose via the banner shown on your first visit ; your choice is stored on your device and takes precedence over any regional setting.

When you accept, we use Google Analytics 4 (via Google Tag Manager) to understand site usage in aggregate. Cookies essential to operation and security remain active.

You can withdraw your consent at any time, as easily as you gave it: click the “Cookie settings” button at the bottom of any page. The banner reappears and your new choice takes effect immediately.

What we actually store

• lvl-consent — stores your cookie choice (essential) (13 months, after which we ask again)
• lvl-cart-v2 — stores your shopping basket (essential) (until you clear it)
• _ga, _ga_* — Google Analytics, aggregated statistics (only after consent) (2 years)
• lvl-adclick — ad click identifier (Google Ads) and arrival campaign, attached to your request if you send a form (only after consent, erased if you withdraw it) (90 days)

The first two are stored locally in your browser (localStorage) and never sent to our servers. lvl-adclick is only sent along with a form you submit to us. Without your consent, no request is made to Google at all.

5. Recipients and processors

Your data is never sold. It may be shared with our processors strictly for the purposes above : payment provider, carrier, order and billing management tool, and — subject to your consent — audience measurement tool. Each acts on our instructions and in compliance with the GDPR.

Transfers outside the European Union. Our website is hosted by Vercel Inc., our emails are delivered through Resend, Inc. and our forms are protected by Upstash, Inc.; subject to your consent, we also use Google Analytics — all US companies. Your data may therefore be processed outside the EU. Those transfers rely on the European Commission's adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, supplemented by our processors' standard contractual clauses.

Resend. Messages sent through our forms — including CVs and cover letters — are emailed to our team through Resend, Inc., a US provider, which processes them solely for that delivery.

Upstash. Your IP address is stored for one minute with Upstash, Inc., a US provider, solely to block mass submissions to our forms.

6. Retention period

Data related to an order is kept for the duration of the commercial relationship, then for the legal accounting retention period (7 years in Belgium, art. III.86 of the Code of Economic Law). Measurement data is kept in line with the retention settings of the analytics tool.

Messages from the contact form and quote requests are kept while they are handled and then for three years from the last contact. Job applications, CVs and cover letters included, are kept for up to two years after the hiring process, then erased. The IP address used to protect the forms disappears after one minute. You may ask us to erase this data sooner at any time (see §7).

7. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability of your data. To exercise them, write to info@lavitrinelocale.be.

You may also lodge a complaint with the Data Protection Authority (DPA), Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be.

You may withdraw your analytics consent at any time, without affecting the lawfulness of processing carried out beforehand. We make no automated decisions and carry out no profiling.

8. Contact

A question about this policy or your data ? Contact us at info@lavitrinelocale.be.