Privacy policy.

Trade name

Pure and Lab

Operator

Patricia D’Addario (sole trader)

Address

’t Hof te Overbeke 23, 1082 Berchem-Sainte-Agathe, Belgium

Company number (CBE)

0824.219.688

VAT number

BE 0824.219.688

Email

info@pureandlab.com

Phone

+32 475 84 20 30

Website

www.pureandlab.com

Online shop

shop.pureandlab.com

Pure and Lab acts as data controller for the processing operations whose purposes and means it determines in connection with its website, its online shop and its customer relationships.

• Identification and contact data: surname, first name, address, email, phone.
• Order and billing data: products, amounts, order history, billing and delivery details.
• Payment data, mainly processed by the payment providers: Pure and Lab does not have access to your full bank details.
• Customer account data, when you create an account on the online shop.
• Your exchanges with us and the requests you send us.
• Technical and browsing data: IP address, device information, technical logs and data from cookies or similar technologies.
• Marketing data: subscription, preferences, interactions and proof of consent where required.

The contact form on www.pureandlab.com does not store any data: it prepares an email in your own email client, which you then choose whether or not to send.

• Performance of the contract or pre-contractual measures: orders, payments, delivery, returns and after-sales service.
• Legal obligations: accounting, tax, warranty, regulatory obligations and responses to the competent authorities.
• Legitimate interest: security, fraud prevention, defence of our rights, answering your requests, continuity and improvement of the service.
• Consent: commercial communications where required by law, cookies and trackers that are not strictly necessary.

• Shopify, the platform on which the online shop runs, and the technical providers needed to operate it.
• The payment providers offered at checkout.
• bpost and, where applicable, other carriers responsible for delivery.
• Vercel, host of the website www.pureandlab.com.
• Our email and IT maintenance providers.
• Audience measurement and advertising providers (including Meta), only if you have given your consent.
• Our accountant, professional advisers and insurers, and the authorities where required by law.

Your data is never sold or rented to third parties.

The online shop uses Shopify for hosting and e-commerce management. Depending on the feature concerned, Shopify processes data on behalf of Pure and Lab or for its own purposes, in accordance with its privacy policy: shopify.com/legal/privacy.

Some service providers, in particular Shopify and Vercel, may process data outside the European Economic Area, for example in Canada or the United States. These transfers rely on the mechanisms provided by the GDPR: adequacy decisions of the European Commission (including the EU–US Data Privacy Framework for certified companies) or standard contractual clauses.

Data is kept for as long as necessary for the purposes pursued, plus the periods required by law:

• Orders, invoices and accounting records: 10 years, in accordance with Belgian accounting and tax obligations.
• Data relating to warranty and after-sales service: for the duration of the legal warranty, plus the applicable limitation periods.
• Exchanges with customer service: for as long as needed to handle the request, then for a maximum of 3 years after the last contact.
• Customer account: until it is deleted, or after 3 years of inactivity.
• Marketing data: until you withdraw your consent or unsubscribe, and for a maximum of 3 years after the last contact.
• Cookies: according to the periods set out in the Cookie policy.

Electronic commercial communications are sent in compliance with the applicable rules. Where they are based on your consent, you can withdraw it at any time. Every communication includes a link allowing you to unsubscribe easily.

The website www.pureandlab.com does not use any cookies or trackers. The online shop uses cookies that are strictly necessary for it to work and, only with your consent, audience measurement and advertising cookies. To find out more, see the Cookie policy.

Under the conditions set out in the GDPR, you may request access to your data, its rectification or erasure, the restriction of processing, exercise your right to data portability, object to certain processing operations and withdraw your consent where processing is based on it.

You can send your request to info@pureandlab.com. We reply within one month; this period may be extended by two months for a complex request, in which case you will be informed. If we have reasonable doubts about your identity, we may ask you for additional information.

If you believe your rights are not being respected, you can lodge a complaint with the Belgian Data Protection Authority (DPA), Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — +32 2 274 48 00 — www.dataprotectionauthority.be.

Pure and Lab implements technical and organisational measures proportionate to the risks in order to protect your data against destruction, loss, alteration, disclosure or unauthorised access.

This policy may be updated to reflect legal, technical or organisational changes. The date of the last update appears at the top of this document.