Privacy policy
1. Introduction
At Nature Avenue BV (registered office at Kelderveld 37/2, 2500 Lier, Belgium, VAT BE 0773.994.276 — "Nature Avenue", "we", "us"), we attach great importance to your privacy. In this privacy statement we explain how we collect, use, store, share and protect your personal data when you use our website and place orders.
Purpose of this statement: to transparently inform you about your rights and our obligations under the General Data Protection Regulation (GDPR).
2. Data controller
Nature Avenue BV is the data controller for the processing of your personal data in the context of the webshop.
Contact details for privacy and data protection:
- Address: Kelderveld 37/2, 2500 Lier, Belgium
- Email: info@natureavenue.be
For questions or complaints regarding the processing of your personal data, you can contact us using the details above.
3. What data do we collect?
We collect various types of personal data, depending on how you use our website:
| Category | Examples |
|---|---|
| Identification data | Surname, first name, date of birth (if necessary), gender |
| Contact data | Email address, telephone number, billing address, delivery address |
| Account data | Username, password (encrypted), account settings |
| Order data | Items purchased, quantity, price, payment method, date and time of order |
| Payment data | (partial) bank account, credit card — processed via a secure payment provider |
| Technical data | IP address, browser type, device, date and time of access, pages visited, operating system, cookies |
| Marketing and communication data | Preferences, newsletter opt-ins, opt-outs |
| Complaints and correspondence | Emails or chat history with customer service, complaints, feedback |
4. Purposes of processing and legal grounds
We process your personal data for the following purposes:
| Purpose | Data processed | Legal ground |
|---|---|---|
| Performance of the purchase agreement | Name, address, order data, payment data | Necessary for the performance of the contract (Art. 6(1)(b) GDPR) |
| Shipping and delivery | Address, contact data, logistics data | Necessary for the performance of the contract |
| Communication and customer service | Email, telephone, correspondence | Necessary for performance and legitimate interest |
| Invoicing and accounting | All data relevant for legislation | Legal obligation (Art. 6(1)(c) GDPR) |
| Marketing, offers, newsletters | Email, preferences, behavioural data | Consent (Art. 6(1)(a) GDPR) or legitimate interest, unless you object |
| Analysis and website optimisation | Log data, click behaviour, cookies | Legitimate interest or consent (for non-essential cookies) |
| Fraud prevention and security | IP address, order history | Legitimate interest, protection of Nature Avenue's rights |
5. Legal ground and consent
- For the performance of your order and delivery, processing is necessary to fulfil our contractual obligations.
- For marketing, tracking and non-essential cookies, we ask for your consent via a cookie banner or account setting.
- You always have the right to withdraw your consent, without consequences for processing based on another legal ground.
- If you object to processing based on legitimate interest (for example marketing), we will take this into account, unless we have compelling legitimate grounds or legal obligations require us to do so.
6. Sharing data with third parties
We may share your personal data with, or provide access to:
- Logistics partners such as GLS for delivery and return of parcels
- Payment providers and financial service providers (such as Mollie, Stripe or similar)
- Technical service providers, hosting companies, email and marketing platforms (such as Shopify, email platforms)
- Government authorities where legally required (tax authorities, law enforcement)
- Accountants and auditors
- In the event of a merger, acquisition or business takeover, a transfer of personal data may take place under the legally required conditions
We conclude data processing agreements with parties that process personal data on our behalf, so that they are obliged to take appropriate security measures.
7. International transfers
If personal data is sent to countries outside the European Union (EU) or the European Economic Area (EEA) — for example for hosting or services outside the EU — Nature Avenue ensures appropriate safeguards, such as:
- Standard contractual clauses approved by the European Commission
- Transfers to countries on the EU's adequacy list
- Other mechanisms recognised by the EU
More information about international transfers can be found in Articles 13 and 14 GDPR and on the website of the European Data Protection Board: https://www.edpb.europa.eu/sme-data-protection-guide/international-data-transfers_en
8. Retention period
We do not keep your personal data longer than necessary for the purpose for which it was collected, unless legal obligations apply.
Indicative retention periods:
- Order and invoice data: 7 to 10 years (in accordance with tax and commercial legislation)
- Account data: as long as the account is active, with a maximum of 3 years of inactivity
- Marketing data: until you object or withdraw your consent
- Log data: as long as necessary, generally a maximum of 1 to 2 years
- Complaints and correspondence: as long as relevant, generally 5 years
These periods may vary depending on legislation in the countries where we are active (Belgium, the Netherlands, France, Germany, Austria, Luxembourg).
9. Cookie policy
Our website uses cookies and similar techniques for functional, analytical and marketing purposes. For more details, please refer to our separate Cookie Policy.
- For all non-essential cookies, we ask for your consent via the cookie banner.
- You can change your preferences at any time via the cookie settings on the website.
10. Your rights
As a data subject, you have the following rights under the GDPR:
- Right of access: to ask what data we hold about you
- Right to rectification: to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten") under certain conditions
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interest (for example marketing)
- Right to withdraw consent, without affecting the lawfulness of processing prior to withdrawal
- Right to lodge a complaint with the competent supervisory authority (in Belgium: the Data Protection Authority / DPA, or the authority in your country of residence)
You can exercise your rights by contacting Nature Avenue (see section 2). We respond to your request within the legal deadlines — generally within 1 month.
11. Security measures
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction. Examples:
- Encryption of data in transit (SSL / TLS)
- Secure storage and access control
- Periodic audits and security tests
- Minimisation of access (only those who need it)
- Employee awareness and training
12. Changes to this privacy statement
We reserve the right to amend this privacy statement, for example in the event of new legislation, new services or new processing activities. The amended version will be published on our website with a new date. We recommend that you consult this statement regularly.
13. Contact or complaints
Do you have questions, requests or complaints about how we handle your personal data?
Nature Avenue BV Kelderveld 37/2, 2500 Lier, Belgium Email: info@natureavenue.be
If you are not satisfied with the handling, you have the right to lodge a complaint with the relevant data protection authority. In Belgium this is the Data Protection Authority (DPA) — www.gegevensbeschermingsautoriteit.be.
Last updated: 2 June 2026
