Privacy policy

Last updated: September 10, 2026

Smape Café ("we", "us", "our") operates this website and webshop, including all related information, content, features, tools, products and services (the "Services"), on our own e-commerce platform. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Business details (for business/B2B customers) including your company name and VAT number, which we verify against the EU VIES register in order to correctly apply VAT and issue a compliant invoice.
• Financial information including payment confirmation and transaction details processed on our behalf by our payment provider, Mollie. We do not store your full card, bank or wallet details ourselves.
• Account information including your login details and preferences, where you create an account.
• Transaction information including the items you view, add to your cart, or purchase, and your order history.
• Communications with us including the information you include in emails or forms you send us, for example a customer support inquiry or event request.
• Device and usage information including limited, aggregated technical information collected via our privacy-first website analytics.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, place an order, sign up for our newsletter, submit an event request, or otherwise communicate with us;
• Automatically through the Services including limited technical information collected when you use our website;
• From our service providers including when they collect or process your personal information on our behalf in order to provide the Services (see "How We Disclose Personal Information" below);
• From public registers such as the EU VIES VAT register, when you check out as a business customer.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

• Provide, Tailor, and Improve the Services. We use your personal information to process your payments, fulfill and ship your orders, issue invoices, manage your account, respond to event requests, and generally provide and improve the Services.
• Marketing. If you opt in to our newsletter, we use your email address to send you marketing and promotional communications. You can unsubscribe at any time via the link in every email or by contacting us.
• Security and Fraud Prevention. We use your personal information to authenticate your account and to detect, investigate or take action regarding possible fraudulent or unsafe activity.
• Communicating with You. We use your personal information to provide you with customer support and to respond to your inquiries.
• Legal Reasons. We use your personal information to comply with applicable law (including tax and invoicing obligations) or to respond to valid legal process.

How We Disclose Personal Information

We do not sell your personal information. In certain circumstances, we disclose personal information to service providers who process it on our behalf, strictly to provide the Services:

• Mollie — our payment service provider, to process your payment securely.
• MyParcel and Bpost — to arrange and track the shipping and delivery of your order.
• onFact — to generate and send invoices, including via the Peppol e-invoicing network for eligible business (B2B) customers.
• Resend — to send transactional emails (order confirmations) and, if you opt in, our newsletter.
• Vercel and Neon — to host our website, application and database infrastructure.
• When you direct or consent to our disclosure of certain information to third parties, or in connection with a business transaction, merger, or to comply with a legal obligation.

These providers are only permitted to use your personal information as necessary to provide their services to us and are bound by their own privacy and security obligations.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details below to request that it be deleted.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need it to maintain your account, provide you with Services, comply with legal obligations (for example, Belgian accounting and tax law require us to keep invoices for a statutory period), or resolve disputes.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know. You may request access to personal information that we hold about you.
• Right to Delete. You may request that we delete personal information we maintain about you, subject to our legal retention obligations (e.g. issued invoices).
• Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may request a copy of the personal information we hold about you.
• Managing Communication Preferences. You may opt out of marketing emails at any time using the unsubscribe link. If you opt out, we may still send you non-promotional emails, such as order or invoice confirmations.

You may exercise any of these rights by contacting us using the details below. We may need to verify your identity before we can process your request, and we will respond in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), www.gegevensbeschermingsautoriteit.be, or the supervisory authority in your own EEA country.

International Transfers

Some of our service providers may process personal information outside the European Economic Area. Where this occurs, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country recognized as providing an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date above.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at hi@smape.cafe, call us at 038868066, or write to us at Groenstraat 56A, 2870 Puurs-Sint-Amands, Belgium. For the purpose of applicable data protection laws, Smape Café is the data controller of your personal information.