Privacy policy

Data controller

Loanny Beauty Services SRL (BE 0718.821.369), Avenue de Tervueren 46, 1040 Etterbeek, Belgium, trading as LBS Distribution. Any question about your data should be sent to info@lbs-distribution.be.

Data collected

• Professional account request: company name, company number, activity, contact name, email, phone (optional) and billing address. The number is checked with VIES, the European Commission service, whose answer (validity, registered name and address) is kept with the request.
• Sign-in: a single-use link sent by email, then a session cookie. Only a fingerprint of these tokens is kept, never the token itself.
• Order: the account details, phone, delivery method, delivery address where applicable, items and amounts.
• Contact form: name, email, phone (optional), message. The site keeps no copy; the message reaches us by email.
• Security: IP address when a form is sent, to limit automated submissions, and the Cloudflare Turnstile anti-robot check.

No payment data passes through this site: cards and bank accounts are entered at Mollie, our payment provider.

Purposes and legal bases

• Reviewing an account request and managing the account: pre-contractual measures, then performance of the contract.
• Processing, delivering and invoicing an order, including through the Peppol network: performance of the contract and legal obligation.
• Keeping accounting records: legal obligation.
• Answering a contact request: legitimate interest in replying to those who write to us.
• Limiting spam and abuse: legitimate interest in protecting the site.

Recipients and processors

• Cloudflare, Inc.: site hosting, database, image storage, email sending and anti-robot checks. Data is stored on Cloudflare's European infrastructure.
• Mollie B.V. (Netherlands): payment processing. Receives the amount, the order reference and the bank details you enter with it.
• bpost SA (Belgium): parcel delivery. Receives, for a shipped order, the recipient name, email, phone if given, and the address or pick-up point chosen.
• Doccle SRL (Belgium): sending invoices and credit notes through the Peppol network, as Belgian rules require between businesses.
• European Commission (VIES): VAT number check when an account is requested.

No data is sold, rented or passed on for advertising purposes.

Retention periods

• Account: for as long as the business relationship lasts, then 3 years to answer any question or complaint. A refused request is deleted after 12 months.
• Orders and invoices: 10 years from the end of the financial year, the legal retention period for accounting records in Belgium.
• Sign-in links: 30 minutes. Sessions: 60 days, or until you sign out.
• Contact form messages: deleted from the mailbox 12 months after the last exchange.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. These rights are exercised at info@lbs-distribution.be. Erasure does not extend to accounting records the law requires us to keep.

If our answer does not satisfy you, you can lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels: dataprotectionauthority.be.

Cookies

The site sets no audience measurement or advertising cookie. What is stored is detailed in our cookie policy.