Privacy Policy

Introduction

This Privacy Policy explains how Chocommerce ("NexArt", "we", "us" or "our") processes personal data when you visit our website, contact us, create an account or place an order for our glossy aluminium posters with magnetic mounting. It applies to the website nexart.be and to orders placed through it.

Who we are

Website operator: Chocommerce.

Registered address: Wemmel, Belgium.

VAT number: BE0792555128. Business registration number: 0792.555.128.

Contact email: support@nexartstudio.be.

Personal data we collect

Depending on how you use the website, we may collect identification details, billing and shipping details, email address, phone number if provided, account login data, order history, customer support messages, technical data such as IP address and browser information, and cookie consent choices.

How we collect data

We collect data directly from you when you fill in forms, create an account, subscribe to marketing, contact us or place an order. Some technical and cookie data may be collected automatically when you browse the website.

Why we use your data

We use personal data to operate the store, process orders, deliver products, provide customer support, handle returns or complaints, secure the website, comply with legal obligations, improve the customer experience and, where applicable, send marketing communications with the required consent.

WooCommerce orders and checkout data

NexArt uses WooCommerce to run the online store. Checkout data may include your name, billing address, shipping address, email address, phone number, purchased products, order notes, tax details and order status information.

Payment data

Payments are processed by payment providers. NexArt does not intend to directly store full payment card details on its own servers. Payment providers may process payment identifiers, transaction status and fraud prevention data according to their own terms and privacy notices.

Shipping and delivery data

We may share the data needed to deliver your order with shipping carriers, fulfilment partners or delivery service providers. This can include your name, delivery address, email, phone number if required by the carrier, package details and tracking information.

Customer account data

If you create a customer account, WooCommerce may store your login credentials, account email, billing and shipping addresses, order history and saved preferences. You are responsible for keeping your account password confidential.

Contact form data

When you contact NexArt through a form, email or support channel, we process the information you provide so we can respond to your request and keep an appropriate support record.

Newsletter and marketing

If you choose to subscribe to our newsletter, we process your email address and consent status to send product news, updates and offers. Our newsletter is managed with Klaviyo, an email marketing provider acting as our processor (see "International transfers" below). We only send marketing emails with your consent, and you can unsubscribe at any time through the link in our emails or by contacting us.

Cookies and analytics

NexArt currently uses only strictly necessary cookies required to operate the store, the cart and the checkout. We do not use analytics, advertising or tracking cookies. If we introduce any non-essential cookies in the future, we will ask for your consent beforehand through a cookie banner. Please see our Cookie Policy for more information.

Legal basis for processing

Depending on the context, we process personal data because it is necessary to perform a contract, comply with legal obligations, pursue legitimate business interests, protect the website, or because you have given consent.

How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy. As an indication: order and invoicing data are kept for 7 years to comply with Belgian accounting and tax obligations; customer account data are kept until you ask us to delete your account; customer support messages are kept for up to 2 years after your request is resolved; newsletter data are kept until you unsubscribe or withdraw your consent. When a retention period ends, data are deleted or anonymised.

Who we share data with

We may share relevant data with our hosting provider (Hostinger), payment providers, shipping carriers, our newsletter provider (Klaviyo) when you subscribe, professional advisers and public authorities where legally required. We do not sell your personal data.

International transfers

Most of your data is processed within the European Economic Area. Our newsletter provider, Klaviyo, is based in the United States, so subscribing to the newsletter involves a transfer of your email address outside the EEA. Such transfers rely on appropriate safeguards, such as the EU-US Data Privacy Framework and/or standard contractual clauses approved by the European Commission.

Your rights

Depending on applicable law, you may have rights to access, correct, erase, restrict or receive your personal data, object to certain processing and withdraw consent. See our GDPR & Data Protection page for more detail.

Security

We use reasonable technical and organisational measures to protect personal data. No online service can be guaranteed to be completely secure, but we aim to keep access limited to people and providers who need it.

Changes to this policy

We may update this Privacy Policy when our website, providers, legal obligations or business processes change. The latest version will be published on this page.

Contact

For questions about this Privacy Policy or your personal data, contact us at support@nexartstudio.be.