Privacy and cookies

Controller

North Sea Works & Services (North Sea Creations), Doktersweg 12 bus G001, 8660 De Panne, Belgium. Enterprise 1041.273.917; VAT BE 1041.273.917. Contact northsea.creations@outlook.com or +32 470 89 61 82.

Data and purposes

Accounts: email, password securely held by the account service, and profile information you provide (name, business, VAT/enterprise number, phone, address), to manage your account and orders. Orders: products/options, name, email, optional phone and delivery address, to make, deliver, invoice and handle questions/complaints, on contractual and statutory grounds. Payments: Mollie handles payment; we receive status/reference, not complete card/bank details. Contact/reviews: the information you submit and reviews you publish. Withdrawal: order number, name, email, optional reason, timestamp, reference and handling record, to handle and prove your request. For abuse prevention, a non-reversible IP hash is used for a few minutes; the IP address itself is not retained.

Recipients

Supabase stores account and shop data. Resend sends registration, password-reset and order emails, processing recipient addresses and the relevant content/attachments. Mollie processes payments. Cloudflare provides hosting/security and non-public withdrawal storage accessible only to us through administration. Carriers such as Mondial Relay/DPD receive name and delivery address. Optional internal withdrawal notifications contain only reference, order number and time, not name/email. Fonts are locally hosted. We do not sell your data or use it for advertising.

Retention

Account data is kept while your account exists. Invoices, accounting records and necessary fiscal order/payment evidence are kept for ten years, calculated from 1 January after the relevant year. Other order data is kept only as necessary for fulfilment, complaints and applicable legal obligations. A separate withdrawal dossier is kept seven years after receipt and then automatically removed; fiscal evidence required longer is retained separately. Internal notes and customer-supplied photos/design files are not kept longer than needed for their purpose.

Cookies and browser storage

We do not use analytics, advertising or tracking cookies. Necessary local storage holds your cart/shipping choice (nsc_cart, nsc_cart_shipping), language (nsc_lang), payment continuation (nsc_checkout_token, nsc_pending_checkout), login (sb-…-auth-token) and temporary password recovery (nsc_pw_recovery). Consent is not required for strictly necessary storage. Cloudflare may set necessary security cookies. Clearing browser storage removes your cart. If analytics/marketing storage is introduced later, we request consent first.

Your rights

You may request access, correction, erasure, restriction, portability and object, within applicable law, via northsea.creations@outlook.com. If dissatisfied, you may complain to the Belgian Data Protection Authority: www.gegevensbeschermingsautoriteit.be.