Privacy Policy

Kelly's Books & Journal Treasures
Effective from: April 2026

1. Who are we?

Kelly's Books & Journal Treasures is responsible for processing your personal data as described in this privacy policy.

2. What data do we collect?

We collect the following personal data when you place an order or contact us:

First name and last name
Email address
Shipping address and billing address
Phone number (if provided)
Payment information (processed via secure payment providers)
Order history

3. Why do we process your data?

We process your personal data for the following purposes:

Processing and delivering your order
Customer communication and customer service
Complying with legal obligations
Sending newsletters (only with your consent)

4. Legal basis for processing

We process your data based on:

Performance of a contract – for processing orders
Legal obligation – for accounting and tax obligations
Consent – for newsletters and marketing communications

5. How long do we store your data?

We do not store your personal data longer than necessary. Order data is stored in accordance with legal retention periods (minimum 7 years for accounting purposes). Newsletter data is stored until you unsubscribe.

6. Do we share your data?

We only share your data with third parties necessary for the performance of our services, such as delivery services and payment providers. We never sell your data to third parties. All processors are contractually bound to confidentiality and GDPR compliance.

7. Your rights

In accordance with the AVG/GDPR, you have the following rights:

Right of access – you can request what data we hold about you
Right to rectification – you can have inaccurate data corrected
Right to erasure – you can request to have your data deleted
Right to restriction of processing – you can have processing restricted
Right to data portability – you can request your data in a readable format
Right to object – you can object to the processing

Please contact us via our contact form to exercise your rights. You also have the right to lodge a complaint with the Data Protection Authority (GBA): www.gegevensbeschermingsautoriteit.be.