Privacy Policy

Introduction

This privacy policy outlines how we collect, use, and protect your personal data in compliance with the
General Data Protection Regulation (GDPR) and other applicable EU data protection laws.

Identity of the Data Controller
Company: Lumione (Tomes & Tokens)
Address: Poortendriesstraat 4, 9340, Belgium
Email: info@tomesandtokens.be
VAT Number: BE1003243185

What Data We Collect

We may collect the following types of personal data:

– Name
– Contact details (email, phone number, shiopping/billiing address)
– Order history
– IP address and browser user agent
– Communication preferences

How we user your data

We process your data for the following purposes:
– To process and deliver your order
– To provide customer support
– To comply with legal obligations
– To improve our website and purposes

Legal basis for processing

We rely on the following legal grounds:
– Performance of a contract
– Compliance with legal obligations
– Consent (for marketing)
– Legitimate interests (to improve services and prevent fraud)

Sharing your data

We only share your data with:
– Shipping providers (e.g., bpost)
– Payment processors
– IT service providers (e.g.: email services)
– Government authorities when legally required

Retention Period

We retain your data for as long as necessary to fulfill the purposes we collected it for, including legal,
accounting, or reporting requirements.

Your rights

– You may access your personal data at any time as requested
– Correct or update your data
– Request the deletion of your data (any data we are not legally required to preserve for accounting etc.)
– Restrict or object to processing
– Withdraw consent at any time
– File a complaint with us or with the Data Protection Authority

Cookies

We use functional, analytical, and (with your permission) marketing cookies. You can manage cookie
preferences via your browser or our cookie consent banner.

Data Security

We implement appropriate technical and organizational measures to secure your personal data against
unauthorized access, loss, or destruction.

Third Country Transfers

We do not transfer your data outside the EEA unless adequate safeguards are in place.

Changes to this policy

We may update this policy. Changes will be posted on this page with an updated revision date.

Contact

For any privacy-related questions or requests, contact us at info@tomesandtokens.be.