Last updated: 25 August 2026
1. Controller
Daily Bear, Van Deynsestraat 123, 2100 Deurne, België, company number 1038.580.879, VAT BE1038580879, is the controller. Contact: info@dailybear.be · +32 451 07 92 47.
2. Data, purpose and legal basis
| Processing | Data and purpose | Legal basis |
|---|---|---|
| Orders and account | Identity, address, contact, order and account data to process, deliver and support purchases. | Contract; legal obligations for invoices and administration. |
| Payments and fraud prevention | Payment status, transaction identifiers, device and risk signals. Full card data is handled by payment providers, not stored by us. | Contract; legitimate interest in secure transactions; legal obligations. |
| Customer service | Messages, attachments, call notes and order context to answer requests and defend legal claims. | Contract or steps before a contract; legitimate interests. |
| Newsletter | Email address and consent record to send marketing that you requested. | Consent; you may withdraw it at any time. |
| Analytics and advertising | Cookie identifiers, interactions, device and approximate location to measure and personalise. | Consent where required. Optional tracking remains off before consent. |
| Security and compliance | Logs, IP address and relevant records to secure the shop, prevent abuse and meet legal duties. | Legitimate interests and legal obligations. |
3. Recipients and international transfers
We share only what is necessary with Shopify (shop platform), payment providers, carriers and fulfilment partners, email and customer-service suppliers, analytics or advertising suppliers after consent, professional advisers and public authorities where legally required. These parties act as processors or independent controllers according to their role.
Some suppliers may process data outside the European Economic Area. Where no adequacy decision applies, we use an appropriate safeguard such as European Commission standard contractual clauses and assess supplementary measures where required. Contact us for information about the applicable safeguard.
4. Retention
- Order and invoice records: normally ten years after the relevant taxable period where Belgian tax or accounting law requires it.
- Customer-service cases: up to two years after closure, longer only for an active dispute or legal duty.
- Newsletter data: until withdrawal; a minimal suppression record may be kept for up to five years to respect the opt-out.
- Consent records: up to five years after the consent or withdrawal, to demonstrate compliance.
- Security logs: normally no more than 12 months, unless an incident or legal claim requires longer storage.
When these periods do not apply, we retain data only as long as necessary for the stated purpose, considering limitation periods, disputes and legal obligations.
5. Your rights
Depending on the conditions of the GDPR, you may request access, correction, deletion, restriction, portability or objection. You may withdraw consent at any time without affecting earlier lawful processing. Email us; we may ask for proportionate identity verification. You can complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.
6. Automated decisions
Daily Bear does not make solely automated decisions that produce legal or similarly significant effects. Payment or fraud providers may score transactions for security; a declined transaction can be raised with us. Advertising profiling occurs only where the required consent has been given.
7. Cookies and similar technologies
| Category | Provider | Purpose | Typical duration |
|---|---|---|---|
| Necessary | Daily Bear and Shopify; payment or security providers during checkout | Cart, checkout, consent, security, network and session functions. | Session to 1 year, depending on the cookie. |
| Preferences | Daily Bear and Shopify | Language and choices such as cookie settings. | Up to 1 year. |
| Analytics | Shopify and any analytics provider configured in Shopify | Measure use and improve the shop; only after consent where required. | Up to 13 months. |
| Marketing | Shopify and any advertising provider configured in Shopify | Measure campaigns and personalise advertising; only after consent. | Up to 13 months. |
Exact cookie names and shorter provider durations can change when services are configured. Use “Cookie preferences” in the footer to accept, reject or change optional categories. Browser settings may also delete cookies. Necessary cookies cannot be disabled through our banner because the shop cannot function securely without them.
8. Changes and contact
We may update this policy when our services or legal duties change. Material changes will be communicated appropriately. Questions or privacy requests: info@dailybear.be.