Privacy policy
Last updated: 21 October 2026
1. Who is responsible for your data?
Elcielicious is a trade name of Steve Meerschaut, sole proprietorship.
Address: Begijnestraat 13, 9230 Wetteren, Belgium
Company no. (KBO): 0897.897.920 – VAT: BE 0897.897.920
Email: info@elcielicious.com
We are the controller of the personal data we process through elcielicious.com. For privacy questions, contact us using the details above.
2. What data do we use, why and on what legal basis?
- Processing, paying, shipping or pick-up of your order and after-sales service: name, address, email, phone number, ordered products, payment status (we never see full card details). Legal basis: performance of the contract.
- Invoicing and accounting: invoice and order data. Legal basis: legal obligation.
- Customer account and subscriptions (if you create one): name, email, addresses, order history. Legal basis: performance of the contract.
- Questions via the contact form, email or the website chat: your name, contact details and message. The chat is partly answered by an automated chatbot, which takes no decisions with legal effect. Legal basis: pre-contractual steps or our legitimate interest in answering you.
- Newsletter and offers by email: only if you sign up yourself: email address and, if given, name. Legal basis: consent. Without that consent we do not send you marketing emails. You can unsubscribe at any time via the link in every email.
- Operation and security of the shop (cart, language, country and currency, fraud prevention): technical data such as IP address and browser. Legal basis: legitimate interest; the cookies involved are strictly necessary.
- Statistics (Shopify analytics, Google Analytics 4): browsing behaviour on the site, device, approximate location. Legal basis: consent via the cookie banner.
- Advertising and remarketing (Google Ads and Google Merchant Center, Meta/Facebook & Instagram): browsing and purchases on the site, online identifiers. Legal basis: consent via the cookie banner.
- Disputes, warranty and defending our rights: relevant order and contact data. Legal basis: legitimate interest.
We use your data for marketing only with your consent. We take no automated decisions with legal effect and we do not sell your data.
3. Who do we share data with?
Only where needed for the purposes above:
- Shopify (Shopify International Ltd., Ireland): shop platform, hosting, checkout, payments, customer accounts, subscriptions, invoices, forms (Shopify Forms), email and customer messages (Shopify Messaging and Shopify Inbox) and search. If you pay with Shop Pay, Shopify also processes data for that service. How Shopify itself handles your data is explained in the Shopify Consumer Privacy Policy.
- Payment providers: depending on the payment method you choose (e.g. PayPal or Klarna), that provider receives the data needed for your payment.
- Shipping: MyParcel (shipping labels) and the carrier of your parcel (DPD or PostNL), for delivery and, if chosen, a PostNL pick-up point.
- Best Chat (chat widget): if you use the chat.
- Google (Ads, Analytics, Merchant Center) and Meta Platforms (Facebook & Instagram): only after your consent for statistics or marketing.
- Our accountant, and authorities where required by law.
4. Transfers outside the European Economic Area
Some partners (e.g. Google, Meta and the Shopify group in Canada) may process data outside the EEA, only with appropriate safeguards: an adequacy decision of the European Commission (e.g. the EU-US Data Privacy Framework, or for Canada) or standard contractual clauses.
5. How long do we keep your data?
- Invoices and accounting records: 10 years (legal retention obligation).
- Other order and customer data: as long as needed for delivery, warranty and customer service, and at most 2 years after your last order, unless you have an account.
- Customer account: until you ask us to delete it.
- Contact and chat messages: at most 2 years after the last contact.
- Newsletter: until you unsubscribe.
- Cookies: see section 9.
6. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (always against direct marketing). You can withdraw consent at any time, without affecting earlier processing. Change your cookie choice via Cookie settings (also at the bottom of every page). Send requests to info@elcielicious.com; we reply within one month and may ask you to confirm your identity.
7. Complaints
Please contact us first. You may also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be, contact@apd-gba.be.
8. Security
We take appropriate technical and organisational measures. Payments run through secure payment providers; we do not see or store full card details.
9. Cookies
We use necessary cookies and, only with your consent via the cookie banner, statistics and marketing cookies.
What are cookies?
Cookies are small files a website stores on your device. Similar technologies (such as local storage and pixels) are covered too.
Your choice
On your first visit the cookie banner asks for your consent. Rejecting is as easy as accepting. Without consent we only set strictly necessary cookies. You can change or withdraw your choice at any time via Cookie settings (also at the bottom of every page), or delete/block cookies in your browser (the shop may then work less well).
Below are the cookies and similar technologies we measured (name – provider – purpose – duration). Other pages or actions (such as checkout or the chat) may set additional cookies from the same providers.
1. Strictly necessary (no consent needed)
- _shopify_essential – Shopify – shop operation, session and your cookie choice – 1 year
- localization – Shopify – selected country and language – 1 year
- cart_currency – Shopify – cart currency – 14 days
- cart and other checkout cookies – Shopify – cart and checkout – duration set by Shopify
- _shop_app_essential (domain shop.app) – Shopify – Shop Pay/Shop functionality – 1 year
- Local storage of Shopify Forms and the chat (e.g. forms_session_id, forms_visit_count) – forms and chat – session or short term
2. Statistics (only with consent)
- _shopify_analytics – Shopify – shop visit statistics – 1 year
- _ga – Google Analytics 4 – distinguishing visitors – approx. 13 months (400 days)
- _ga_PXXMZV9P0V – Google Analytics 4 – session state – approx. 13 months
- _ga_DC4C07RNLF – Google Merchant Center – measuring visits from Google Shopping – approx. 13 months
3. Marketing (only with consent)
- _shopify_marketing – Shopify – marketing attribution – 1 year
- _gcl_au and local storage _gcl_ls – Google Ads – ad conversion measurement – 90 days
- _fbp – Meta (Facebook & Instagram) – measuring and showing ads – 90 days
- Cookies of Google (e.g. doubleclick.net, google.com) and Meta on their own domains – advertising and remarketing – per provider
4. Preferences
- Local storage recentlyViewedProduct and recommended-products – theme – show recently viewed and recommended products – until cleared
Third parties
More about our partners' cookies: Shopify · Google · Meta. Some partners process data outside the EEA; see section 4 above.
Questions? Email info@elcielicious.com.
10. Children
Our shop is not aimed at children under 16.
11. Changes
We may update this policy. The date at the top shows the latest version.