Privacy Policy

Last updated: 24 August 2026

1. Who is responsible for your personal data?

Carpshop24 is operated by The Secret and is responsible for the processing of personal data as described in this privacy policy.

Contact details

Carpshop24
Beekstraat 64A
9420 Erpe-Mere
Belgium

Company registration number and VAT number: BE0839.726.723
Email: info@carpshop24.com
Website: www.carpshop24.com

In this privacy policy, we use the name “Carpshop24” for the company and “Carpshop24.com” when specifically referring to our website.

2. Which personal data do we collect?

Which personal data we collect depends on how you use our website and services.

We may process the following data:

name, address, email address and telephone number;
billing and delivery details;
account details and preferences;
order details, such as purchased products, amounts, discounts, returns and refunds;
the selected payment method and payment status;
messages and questions you send to our customer service;
subscriptions to newsletters, stock notifications and other notifications;
products you add to a wishlist;
IP address, browser, device type and operating system;
information about your use of our website, such as pages visited, searches, click behaviour, the date and time of your visit, and the website from which you reached us;
cookie data and similar technical identifiers;
information necessary for fraud prevention, security and the prevention of misuse.

Full payment card details are normally processed directly by our payment providers. Carpshop24 generally only receives the information necessary to verify and process the payment and order.

3. What do we use your personal data for?

We process personal data for the following purposes:

to process, pay for, deliver and, where applicable, refund orders;
to manage your account and wishlist;
to send stock notifications and other messages requested by you;
to answer questions and provide customer service;
to prevent and detect fraud, misuse and security issues;
to comply with accounting, tax and other legal obligations;
to analyse and improve our website, services and product range;
to investigate and resolve technical issues;
to send newsletters and marketing messages when you have given consent or when legally permitted;
to display personalised content or advertising when you have given consent for this, where required.

4. On what legal grounds do we process your data?

Depending on the purpose, we base processing on one or more of the following legal grounds:

Performance of a contract: for example, for processing and delivering your order.
Legal obligation: for example, for our accounting and tax administration.
Legitimate interest: for example, for customer service, security, fraud prevention and improving our services.
Consent: for example, for non-essential cookies, newsletters or certain marketing activities.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawing your consent does not affect processing that has already lawfully taken place.

5. With whom do we share personal data?

We only share personal data when necessary for our services or when we are legally required to do so.

Data may be shared with:

Shopify, which provides the technical platform for our webshop;
payment providers and financial service providers;
fulfilment, warehouse, transport and delivery companies;
providers of IT services, hosting, security and webshop applications;
providers of customer service, stock notifications and email communications;
analytics and marketing partners, where legally permitted and, where required, after you have given your consent;
accountants, legal advisers, insurers and other professional service providers;
government authorities or regulators when we are legally required to provide data.

These parties may only use personal data for the agreed or legally permitted purposes.

Carpshop24 does not sell personal data to third parties.

6. Shopify

Our webshop runs on the Shopify platform. Shopify processes certain personal data to enable the webshop, payments, account functions and other services.

Depending on the Shopify service used, Shopify may process data on behalf of Carpshop24 or for its own purposes.

More information can be found in Shopify's Consumer Privacy Policy.

7. Transfers outside the European Economic Area

Some service providers may process personal data outside the European Economic Area.

Where personal data is transferred internationally, we or our service providers use appropriate safeguards, such as an adequacy decision by the European Commission or approved contractual clauses, where legally required.

8. How long do we retain personal data?

We do not retain personal data longer than necessary for the purpose for which it was collected.

The specific retention period depends, among other things, on:

the duration of our customer relationship;
the execution and handling of orders;
legal accounting and tax retention obligations;
possible warranty, return or dispute procedures;
fraud prevention and security;
the consent you have given.

We retain newsletter and marketing data until you unsubscribe or withdraw your consent, unless longer retention is permitted or required by law.

When data is no longer needed, it is deleted or anonymised, unless we need to retain it longer due to a legal obligation or for the establishment, exercise or defence of legal claims.

9. How do we protect your personal data?

Carpshop24 takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

We restrict access to personal data to employees and service providers who need this data to carry out their work.

No method of electronic storage or data transmission is entirely risk-free. We therefore regularly evaluate our security measures.

10. Cookies and similar technologies

Carpshop24.com uses cookies and similar technologies.

Necessary cookies ensure that the webshop functions correctly from a technical perspective. Other cookies may be used for analytics, personalisation and marketing.

Where consent is legally required, we will only place non-essential cookies after you have given your consent. You can manage your preferences via our cookie banner and, where available, through the website's privacy settings.

You can also delete or block cookies through your browser settings. As a result, certain parts of the webshop may not function properly.

11. Your privacy rights

Depending on applicable legislation, you have, among other things, the right to:

know which personal data we process about you;
request access to your personal data;
have inaccurate or incomplete data corrected;
request the deletion of your personal data;
have the processing of your data restricted;
object to certain processing activities;
receive your data in a structured, commonly used and machine-readable format;
withdraw your consent at any time;
file a complaint with a supervisory authority.

You can send your request to info@carpshop24.com. To protect your data, we may ask you to confirm your identity before processing your request.

We will respond to your request within the legally prescribed period.

You can also file a complaint with the Belgian Data Protection Authority:

Data Protection Authority
Press Street 35
1000 Brussels
www.gegevensbeschermingsautoriteit.be

12. Newsletters and marketing

When you subscribe to our newsletter, we may send you information about Carpshop24 products, offers, promotions and news.

You can unsubscribe at any time via the unsubscribe link at the bottom of every marketing email or by contacting us via info@carpshop24.com.

Service messages about an order, payment, delivery, return or account are not marketing messages and may remain necessary to perform our agreement with you.

13. Links to other websites

Our website may contain links to websites or services of other parties. Carpshop24 is not responsible for the content or privacy practices of these external websites.

We recommend reading the privacy policy of these parties before providing personal data there.