01
Who We Are
SESE is an anti-aging skincare brand based in Belgium. We operate the website sese.be and sell skincare products directly to consumers online.
Data controller: SESE BV, Belgium
Contact: info@sese.be
We take your privacy seriously. This policy explains how we collect, use, and protect your personal data when you interact with our website and place orders.
02
What Data We Collect
When you shop with us or use our website, we may collect the following personal data:
- Identity data: first name, last name
- Contact data: email address, shipping address, billing address, phone number
- Transaction data: details of your purchases and order history
- Payment data: payment method details. These are processed securely via Shopify and our payment providers; SESE does not store full card details
- Technical data: IP address, browser type, operating system, pages visited, time spent on site, collected via cookies and analytics tools
- Marketing data: your email address and marketing preferences, if you subscribe to our newsletter
03
Why We Collect It
We use your personal data for the following purposes:
- To process and fulfil your order, including shipping and delivery
- To send you order confirmations, tracking information, and service communications
- To process returns and refunds
- To respond to your customer service enquiries
- To improve the functionality and content of our website (analytics)
- To send you our newsletter and promotional communications, only if you have given explicit consent
- To comply with legal obligations (tax records, consumer law)
04
Legal Basis (GDPR)
We only process your personal data when we have a valid legal basis under the General Data Protection Regulation (GDPR):
- Contract performance (Art. 6(1)(b) GDPR): Processing necessary to fulfil your order, including shipping, payment, and returns
- Legitimate interest (Art. 6(1)(f) GDPR): Website analytics to improve the user experience and our services
- Legal obligation (Art. 6(1)(c) GDPR): Compliance with Belgian tax and accounting law
- Consent (Art. 6(1)(a) GDPR): Newsletter and marketing communications. You can withdraw your consent at any time
05
How Long We Keep Your Data
- Order and transaction data: retained for 7 years in accordance with Belgian tax legislation
- Customer account data: retained for as long as your account is active, or until you request deletion
- Newsletter and marketing data: retained until you unsubscribe, or for a maximum of 3 years of inactivity
- Analytics data: typically anonymised and retained per our analytics provider's settings
06
Your Rights Under GDPR
As a resident of the EU/EEA, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
Right to Portability
Request your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest, including direct marketing.
Right to Withdraw Consent
Withdraw marketing consent at any time via unsubscribe link or by contacting us.
To exercise any of these rights, contact us at info@sese.be. We will respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données - dataprotectionauthority.be).
07
Third Parties
We do not sell your personal data to third parties. We only share data with trusted service providers necessary to operate our business:
- Shopify Inc.: our e-commerce and order management platform. Shopify processes data on our behalf as a data processor. See Shopify's privacy policy at shopify.com/legal/privacy.
- Payment providers: Visa, Mastercard, Bancontact, PayPal, Apple Pay for secure payment processing
- Shipping carriers: for delivering your order and providing tracking information
- Email service providers: for sending order confirmations and newsletters
- Analytics providers: for anonymised website usage data
All third-party processors are bound by data processing agreements in accordance with GDPR.
08
International Data Transfers
Some of our service providers (for example Shopify Inc., based in Canada, and certain analytics or payment providers) may process personal data on servers located outside the European Economic Area (EEA). Where this occurs, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs), an EU adequacy decision, or equivalent legally recognized transfer mechanisms. You can request more information about these safeguards by contacting us at info@sese.be.
09
Cookies
We use cookies on sese.be to ensure the website functions correctly and to improve your experience. For full details on the cookies we use and how to manage them, please see our Cookie Policy.
10
Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our website uses HTTPS encryption and our payments are processed via PCI-DSS compliant providers.
11
Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.