Privacy policy

This privacy policy explains how we use your personal data and what rights you have as a customer and visitor of this website.

We highly value the protection of your privacy and personal data. This privacy statement is intended to inform you, in a transparent manner, about the data we collect from you as a customer or website visitor. This is done in accordance with Belgian and European regulations regarding the protection of privacy.

By using this website and providing your personal information, you explicitly agree to this privacy policy. The consent you give is always freely given, and you have the right to withdraw this consent at any time. Withdrawal of your consent does not affect the processing of personal data carried out prior to the withdrawal; any processing based on a lawful basis; or processing required due to legitimate interest.

Article 1 – Who Are We?

This privacy statement applies to the website marythenightmar.com.
The data controller responsible for processing your personal data is:

Leighworks
Baalsebaan 162
3120 Tremelo
Company number: 0842.204.874

For any questions regarding the processing of your personal data, you may contact us at: goodbye@marythenightmare.com.

Article 2 – Data Processing

We only process the data necessary to perform our services. We process different types of personal data depending on the services you use or request through our website.

We process your data in the context of our activities and collect your information to answer your questions, send newsletters, perform direct marketing, and ensure the proper execution of our agreement. These data are required for you to make use of our services.

Below you will find an overview of the data we process, the purpose of this processing, the legal basis, and the retention period.

Contact Information

Data: name, address, phone number, email address, company name, company number, etc.
Purpose: We collect and process your contact details to answer your questions, for direct marketing purposes, to keep you informed about events or new items, and to ensure the proper execution of the agreement so we can serve you as a customer. We may also process your data for completing orders, posting reviews of our services or products, and for processing comments left on our posts or articles.
Legal basis: Performance of contract and consent.
Retention period: Indefinite, unless you request deletion or the law requires otherwise.

Billing and Financial Administration

Data: name, billing address, phone number, email, bank details, outstanding balance.
Purpose: We collect your personal data to process your payment.
Legal basis: Performance of contract and consent.
Retention period: At least 7 years, as required by law.

Technical Information

Data: IP address, error logs, etc.
Purpose: We collect technical information to improve our website’s general use and performance.
Legal basis: Legitimate interest and consent.
Retention period: Indefinite, unless you request deletion or the law requires otherwise.

Article 3 – Direct Marketing

We also use your personal data for direct marketing purposes, such as sending our newsletter. This enables us to inform you about events, discounts, or new products and services. We only do this with your explicit consent. You can withdraw this consent at any time by contacting us via email.

Article 4 – Protection of Your Data

We have implemented the necessary technical and organisational measures to protect your personal data against loss and any form of unlawful processing. We make every reasonable effort to safeguard the confidentiality of your information.

Article 5 – Sharing Data with Third Parties or Third Countries

We will not share your personal data with third parties without your consent, unless we are legally obliged to do so or if it is necessary for our business operations. We will never sell your personal data to third parties.

We may have to share some of your data with one of the following parties:
• Website platform: WordPress with WooCommerce
• Newsletter service: MailerLite
• Payment services: Mollie
• Website hosting: Unix-Solutions
• Bookkeeping platform: Dexxter

Article 6 – Your Rights as a Data Subject

As a data subject, you have several rights regarding the personal data collected about you. To exercise any of the rights listed below, please contact us by email.

You have the following rights:
• Right of access and copy
• Right to correction or rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to object
• Right to data portability

When you submit a request to exercise your rights, we must first verify your identity. Therefore, you must include a copy of your identity card when submitting your request.

Exercising your rights is, in principle, free of charge. If your request is clearly unfounded or excessive, we may charge a reasonable fee to cover administrative costs. We may also choose not to process your request; if so, we will inform you of the reasons.

In any case, we will inform you within four weeks of the outcome of your request.

If allowed under applicable Belgian and European legislation, you have the right to submit a complaint to the competent supervisory authority. In Belgium, this is the Data Protection Authority.

Article 7 – Amendments

We may amend this privacy statement at any time. Changes will always be published on this page so you can remain informed of the current policy.

Article 8 – Jurisdiction

This statement is governed, interpreted, and enforced in accordance with Belgian law. Belgian law applies exclusively in the event of any dispute. The courts of the Flemish Brabant district have exclusive jurisdiction unless mandatory law states otherwise.