Privacy Policy

Data privacy is of great importance to Sienna Goodies, and we want to be open and transparent about how we process your personal data. We aim to create an environment where you can share your information without worrying about its security.

That is why we have a privacy policy that determines how your personal data is processed and secured and explains your rights when managing that information. Through this privacy policy, Sienna Goodies complies with relevant privacy legislation, including European Regulation 2016/679 of 27 April 2016 concerning the protection of personal data (GDPR), as well as the anti-spam provisions from Book XII of the Code of Economic Law (WER).

Who is the controller of your personal data?

Sienna Goodies is the controller of the personal data you submit to us and responsible for your personal data under applicable data protection law.

Sienna Goodies
(Meraki Retail BV)
Everdijstraat 41
2000 Antwerp
VAT no. BE0723.675.428
info@siennagoodies.com

As the cases mentioned in Article 37 GDPR do not apply, Sienna Goodies is not obliged to appoint a data protection officer.

Who has access to your data?

Your data may be shared within the Sienna group; this includes Sienna Goodies and its boutique stores Sienna Antwerp and Sienna Ghent. In this context, the transfer of your data remains limited to companies within the European Economic Area.

Your personal data passed on to third parties will only be used to provide you with our services: companies for validating your address (e.g., Google), companies to send you an order confirmation (e.g., Shopify, Klaviyo), warehouse and distribution suppliers in connection with the delivery of your order (e.g., SendCloud, Bpost, PostNL), payment service providers for your payment (e.g., Mollie). Please note that many of these receiving companies have an independent right or obligation to process your personal data.

In the context of its activities, Sienna Goodies uses cookies from Google. In this process, (part of) your personal data may be transferred to Google, whose headquarters are located in the United States. Google is certified under the Data Protection Framework, meaning no additional measures such as Standard Contractual Clauses (SCCs) are needed to transfer data to Google. For more information on how Google collects and processes your data, please refer to Google's official information page.

In rare cases, Sienna Goodies may be required to disclose your personal data due to a judicial order or to comply with other compelling laws or regulations. Sienna Goodies will reasonably try to inform you in advance, unless legally restricted.

Under no circumstances will Sienna Goodies share and/or sell your personal information to third parties that are not part of our production process, for example, to send you advertisements.

Why do we use your personal data?

We will use your personal data to manage your online purchase at Sienna Goodies by processing your orders and returns through our online services and sending you notifications of delivery status or any problems with the delivery of your items.

We will use your personal data to manage your payments.

We use your data to manage your Sienna Loyalty Club account – which is automatically activated when you create a Sienna account – to award rewards and provide you with loyalty-related communications and updates. You can unsubscribe from this at any time, as outlined in our Privacy Policy.

We use your data to handle complaints and warranty issues for products.

Your personal data is used to identify you and to validate your legal minimum age for online shopping and to confirm your address with external partners.

Sienna Goodies may use your data to optimize its website.

Your personal data may be used to send you commercial information or make suitable offers. We only do this if you have given your consent by subscribing to the newsletter. As previously mentioned, Sienna Goodies will under no circumstances share and/or sell your personal information to third parties that are not part of our production process, for example, to send you advertisements.

What types of personal data do we process?

To provide you with good and personal service, Sienna Goodies needs your data. Sienna Goodies processes three types of data: identity, payment, and traffic data. This data all comes directly from you as a customer.

• Identity and contact details such as name, address, email address, and telephone number: Sienna Goodies uses these identity details to process your order and send it to you as carefully and quickly as possible.
• Payment data: Sienna Goodies registers payment data to verify that the payment was made correctly. We only note your payment method. Of course, bank details are not stored, and every payment option is secured (for more information, see "payment" under customer service).
• Traffic (or Behavioral) data: Sienna Goodies registers your IP address, browsing and click behavior, navigation usage, search history, visited pages, visited articles, etc., so that Sienna Goodies can optimize the user-friendliness, functionality, and content of the website.
  
  

What is the legal basis for processing your personal data?

The processing of your identity and contact details, as well as your payment details, is necessary to enable Sienna Goodies to manage and execute your order and the associated loyalty program, and to realize the delivery to you. We also use your address details to confirm them with our external partners who are essential for the execution of your order. The legal basis for this is the performance of the contract.

The processing of your identity and contact details in the context of handling complaints and warranty issues has as its legal basis the performance of the contract, namely the handling of the complaint or issue submitted by you.

The processing of your identity and contact details, as well as your payment details, for the purpose of managing your payments, has as its legal basis the performance of the contract, as well as the legitimate interest of Sienna Goodies to prevent fraud, etc.

The processing of your identity data in the context of identification and age verification has as its legal basis our legal obligation to verify whether you have reached the minimum age. Your personal data is used to identify you and to validate your legal minimum age for online shopping and to confirm your address with external partners.

The processing of your identity and contact details in the context of direct marketing has your consent as its legal basis.

The processing of your payment data in the context of ordering has as its legal basis to verify that the payment was made correctly.

The processing of your traffic (behavioral) data takes place in the context of Sienna Goodies' legitimate interest to optimize the user-friendliness, functionality, and content of its website.

How long do we retain your data?

We retain your personal data for as long as necessary to achieve the purposes outlined above.

Personal data will be stored for the period necessary to comply with legal requirements (including accounting).

Contact details may be retained for a longer period as long as a contractual relationship exists with you, or even after its termination, for the continuity of our services and our marketing interests.

The following examples clarify what types of personal and contact data exist and how long they are stored:

1. Customer Personal Data
   Retention period: 5 years after the last purchase
   Example: Name, address, email address, and phone number of customers. This data is stored to facilitate future purchases and provide customer service.
2. Order Data
   Retention period: 7 years
   Example: Information about orders, such as products, prices, and delivery information. This is necessary for accounting purposes and to comply with tax obligations.
3. Payment Information
   Retention period: 5 years
   Example: Data about payment methods (e.g., credit card information). This is stored for payment processing and any disputes.
4. Communication with Customers
   Retention period: 3 years
   Example: Emails or messages between the customer and customer service. These are stored to follow up on inquiries and ensure good customer service.
5. Marketing Data
   Retention period: Until the customer unsubscribes
   Example: Newsletter subscriptions or promotional emails. This data is stored as long as the customer has given consent to receive marketing communications.
6. Return Information
   Retention period: 2 years
   Example: Data about returned items, including reasons for returns. This helps improve products and services.
7. Cookies and Tracking Data
   Retention period: Maximum 13 months
   Example: Information collected via cookies on the website for analytical purposes. This data is used to analyze and improve webshop usage.
8. Feedback and Reviews
   Retention period: 5 years
   Example: Customer reviews and product feedback. This information is used for quality improvement and marketing purposes.
9. Account Information
   Retention period: Until the account is deleted
   Example: Username, password (in anonymized form), and account settings. This data is retained as long as the account is active.
10. Documentation for Legal Purposes
    Retention period: 10 years
    Example: Documents required for legal disputes or claims. These must be stored for 10 years according to legal requirements.
    
    

What are your rights?

In accordance with the GDPR regulation, you can exercise rights regarding your personal data:

Right to access:
You have the right to request information about the personal data we hold about you at any time, as well as how we use your personal data. You can contact Sienna Goodies, and we will inform you by email.

Right to rectification:
You have the right to request the correction of your personal data if it is inaccurate, including the right to complete incomplete personal data.

Right to erasure:
You have the right to erase personal data processed by Sienna Goodies at any time, except in the following situations:

• You have an ongoing case with Customer Service
• You have an open order that has not yet been shipped or has only been partially shipped
• You have an outstanding debt with Sienna Goodies, regardless of the payment method
• If you have misused or are suspected of misusing our services in the past four years
• If you have made a purchase, we will retain your personal data related to your transaction for accounting rules.

Right to restriction:
You have the right to request that Sienna Goodies restrict the processing of your personal data under the following circumstances:

• If you object to processing based on Sienna Goodies' legitimate interest, Sienna Goodies will restrict all processing of such data pending verification of the legitimate interest.
• If you claim that your personal data is inaccurate, Sienna Goodies must restrict all processing of such data pending verification of the accuracy of the personal data.
• If the processing is unlawful, you can object to the erasure of your personal data and instead request a restriction of the use of your personal data.
• If Sienna Goodies no longer needs the personal data, but it is necessary for your defense against legal claims.

Right to data portability:
When Sienna Goodies processes your personal data by automated means based on your consent or on the basis of an agreement, you have the right to transfer a copy of your data to you or to another party in a structured, commonly used, and machine-readable format. This only applies to the personal data you have submitted to us.

Right to object:
You have the right to object to the processing of your personal data based on a legitimate interest of Sienna Goodies. Sienna Goodies will not continue to process the personal data unless we can demonstrate a legitimate reason for the processing that overrides your interests and rights or as a result of legal claims.

Right to object to direct marketing:
You have the right to object to direct marketing, including profiling for direct marketing purposes. You can unsubscribe from direct marketing in the following ways:

• By following the instructions in each marketing email
• By editing your Sienna Goodies account settings

Right to withdraw your consent:
To the extent that the processing is based on your prior consent, you always have the right to withdraw that consent.

How can you exercise your rights?
We take data protection very seriously, and therefore you can always contact us via email (info@siennagoodies.com) to handle your requests regarding your aforementioned rights.

Automated individual decision-making:
The processing of your personal data does not include profiling, and you will not be subjected to automated decisions by us.

Right to lodge a complaint with a supervisory authority:
If you believe that Sienna Goodies is processing your personal data incorrectly, you can contact us. You also have the right to lodge a complaint with a supervisory authority.

For Belgium, you can lodge a complaint with the Data Protection Authority (GBA):
Drukpersstraat 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
Fax: +32 (0)2 274 48 35
e-mail: contact@apd-gba.be

For the Netherlands, you can lodge a complaint with the Dutch Data Protection Authority (AP):
Postbus 93374, 2509 AI The Hague
Tel: +31 088-1805250
Fax: +31 088 - 071 21 40
online: https://autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap

Security and Confidentiality

We have developed security measures adapted on a technical and organizational level to prevent the destruction, loss, falsification, modification, unauthorized access or accidental notification to third parties of collected personal data, as well as any other unauthorized processing of these data.

Under no circumstances can Sienna Goodies be held liable for any direct or indirect damage resulting from incorrect or unlawful use of personal data by a third party.

You must at all times comply with the security regulations, among other things, by preventing any unauthorized access to your login and code. You are therefore solely responsible for the use made from the website of your computer, IP address, and your identification data, as well as for their confidentiality.

Children's Privacy

Our website is not aimed at individuals under 13 years of age. We do not knowingly collect personal data from individuals under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we discover that we have collected personal data from individuals under 13 years of age without verification of parental consent, we will take steps to remove that data from our servers.
If we need to rely on consent as the legal basis for processing your data and your country requires parental consent, we may need parental consent before collecting and using that data.

Links to third-party websites

Our website may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We therefore strongly advise you to review the privacy policy of every site you visit.

Applicable Law and Disputes

The validity, interpretation, and execution of the terms stated in this privacy policy are exclusively governed by Belgian law.
Any dispute regarding the validity, interpretation, and execution of these terms will be exclusively settled by the competent court in Antwerp.
However, before resorting to court, negotiations will be conducted in good faith to resolve the dispute amicably.

Changes

We may need to update our privacy statement. The latest version of the Privacy Statement is always available on our website. You are therefore requested to consult the privacy policy regularly to be aware of any changes.

Questions?

If you have any questions after reading our privacy policy, you can send them to us via info@siennagoodies.com.


This privacy policy was last updated on July 24, 2025.