Privacy policy

This policy explains how Blockedex SRL, which runs Kurofolio, handles your personal data. Blockedex SRL is the controller of this data. For any question or request, write to [email protected].

What we collect

• When you order: your name, delivery address, email address, the items you bought, the amounts paid and, if you give it, a phone number for the carrier.
• When you pay: payment is handled by Stripe. We receive the payment status and limited details, such as the card brand and its last four digits, never your full card number.
• When you write to us: your email address and the content of your message.
• When you browse: our hosting and security providers process technical data, such as your IP address and browser, to deliver the site and protect it from abuse. We do not use advertising or tracking cookies.

Why we use it

We do not sell your data, and we only send you marketing emails if you have asked for them.

Who receives it

Only the providers we need to run the shop, each for its own task:

• Stripe for payments;
• postal services and couriers (such as bpost, DHL or UPS) for delivery, which receive your name, address and, where needed, your phone number and email address;
• email providers that send and receive our emails (order confirmations, replies);
• hosting, storage and security providers for the website;
• our accountant, and the authorities where the law requires it.

Some of these providers are based outside the European Economic Area, for example in the United States. In that case your data is protected by the safeguards the GDPR provides, such as an adequacy decision or the European Commission’s standard contractual clauses.

How long we keep it

• Order data: as long as needed to handle your order and the legal guarantee, then as long as Belgian accounting and tax law requires for invoices (currently up to 10 years).
• Messages: as long as needed to answer you, and at most 3 years after our last exchange.
• Technical logs: a few weeks, unless needed to investigate an incident.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to [email protected]. We answer within one month.

If you think we have not respected your rights, you can file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or with the authority of your country.

Changes

We will update this page if the way we handle data changes. The date at the top shows the latest version.