Privacy policy
1. Controller and contact
HS COIFFURE / CAPELIO, BE 0862.170.543, Rue d’Auvelais 8, 5060 Arsimont, Belgium, is the controller for the Helen Seward shop. Contact: contact@capelio.be; +32 470 695 344.
2. Data and purposes
We process the contact details and addresses you provide, orders, payment references and status, customer-service correspondence, returns and chosen salon or code. Optional accounts contain a hashed password. Guest purchases create an order record without login access. Order, payment, delivery and after-sales data are processed to perform the contract and requested precontractual steps.
Invoicing and accounting fulfil legal obligations. Security, abuse prevention and defence of our rights rely on legitimate interests, subject to your rights. Technical data include IP addresses and sessions. Optional fields, salon choice and precise location are not required for purchase. A VAT number allows our team to assess professional status without automatic approval.
3. Salons and location
Salon choices and codes provide requested benefits and manage commissions based on your choice and our legitimate interest in running the programme. The choice may be stored in your account. A valid promo code linked to a salon makes it your new usual salon. You can change this choice later in your account. Salons do not automatically receive your address, email or customer record; selection does not authorise advertising.
A local IP-range list may estimate connection country to adapt shop features. Estimates can be wrong, notably with VPNs. Postcode searches use GeoNames. “Near me” uses your position only with browser permission and does not add it to your customer record. Opening the optional OpenStreetMap map sends its provider your IP and technical information, including the area displayed. The list works without the map. See https://osmfoundation.org/wiki/Privacy_Policy.
4. Recipients
Access is limited to staff and authorised providers needing data for their tasks. Providers include Infomaniak for hosting and email, DPD for delivery, Mollie for relevant payments, and our accountant and FALCO for invoices and accounting records. Authorities may receive legally required information. Providers receive only necessary data. Mollie also has its own obligations: https://www.mollie.com/fr/legal/privacy.
Infomaniak is based in Switzerland, covered by a European adequacy decision. Other transfers outside the EEA must use an applicable GDPR mechanism, such as an adequacy decision or standard contractual clauses. You may request information on recipients and safeguards at our contact address.
5. Retention
Customer records and history are not automatically deleted merely for inactivity. They support customer relationships, orders, guarantees and requests. Necessity must be reviewed and unnecessary data appropriately handled: absence of automatic deletion does not authorise indefinite retention of all data.
Invoices and supporting records subject to the general tax-retention requirement are retained for ten years according to statutory start dates and exceptions. Records needed for disputes are retained during their handling. Technical data and backups serve security and restoration, not unjustified extended commercial use. Closure and erasure requests are assessed individually; mandatory archives remain with access limited to their purpose.
6. Cookies and communications
CAPELIO_SESSION supports sessions, baskets and security; inactive sessions are invalidated on use after two hours. CAPELIO_REMEMBER may remember a login for thirty days when offered and chosen. These necessary functions are separate from advertising trackers. No newsletter is activated in this checkout. If offered later, a separate choice and easy unsubscribe will be provided. Buying or choosing a salon is not a subscription.
7. Rights and security
Under GDPR conditions you may access, correct, erase, restrict or port data and object to processing based on legitimate interests. You may object to direct marketing at any time. Consent may be withdrawn without affecting earlier lawful processing. Write to contact@capelio.be; we normally reply within one month and notify any legally justified extension. Proportionate identity checks may be required if there is reasonable doubt.
You may complain to https://www.autoriteprotectiondonnees.be/. Keep passwords and private order links confidential: links grant access to the relevant document. Contact us about suspected unauthorised access. Processing changes receive updated information; any required consent is requested separately.