Last updated: 16 June 2026
Nordcrest Group BV ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains who we are, what personal data we collect, why we collect it, how long we keep it, with whom we share it, and what rights you have.
This policy applies to all personal data we process through our website www.snoozeluxe.eu and in the context of orders placed through our online shop.
1. Who We Are (Data Controller)
The data controller responsible for the processing of your personal data is:
Nordcrest Group BV
Meersbloemstraat 20, 9890 Gavere, Belgium
Email:
Website: www.snoozeluxe.eu
VAT number: BE 1027.773.101
2. What Personal Data We Collect and Why
We only collect personal data that is necessary for the purposes described below. We do not collect more data than we need, and we do not use your data for purposes other than those stated here.
2.1 Order Processing and Delivery
Purpose: To process and fulfil your order, arrange delivery, and handle any after-sales questions or complaints.
Data collected: First and last name, delivery address, billing address (if different), email address, telephone number.
Legal basis: Execution of a contract - we need this information to process and deliver the order you placed with us.
Retention period: Order data is retained for 7 years to comply with Belgian accounting and tax legislation. Data that is no longer required for legal obligations is deleted or anonymised after this period.
2.2 Payment Processing
Purpose: To process your payment securely.
Data collected: Order amount, currency, and the payment details necessary to complete the transaction. We do not store your full payment card details ourselves - these are handled directly by our payment service provider (see section 4).
Legal basis: Execution of a contract - processing is necessary to complete your payment.
2.3 Email Newsletter
Purpose: To send you our newsletter with product updates, promotions, and other relevant communications.
Data collected: Email address, and your record of consent (date and method of subscription).
Legal basis: Your consent, given freely when you subscribe to the newsletter and accept our general conditions and this Privacy Policy.
Retention period: Your email address is retained for as long as you remain subscribed. You can unsubscribe at any time via the unsubscribe link included in every newsletter, or by contacting us directly. Upon unsubscribing, your email address will be removed from our active mailing list without undue delay.
2.4 Contact Form
Purpose: To handle your enquiry, question, or complaint.
Data collected: Email address, message content, and optionally an order reference number and an attachment (e.g. a photo of a product issue).
Legal basis: Execution of a contract, where your enquiry relates to an order or contract with us (e.g. a delivery issue or return request). Legitimate interest, for general enquiries not related to an order, as we have a legitimate interest in responding to questions from website visitors.
Retention period: Contact messages are retained for as long as necessary to handle your enquiry and for a reasonable period thereafter in case of follow-up. Messages related to an order may be kept for up to 7 years as part of the order record, to the extent required by Belgian accounting law.
2.5 Product Reviews
Purpose: To allow customers to share their experience with our products, and to display these reviews on our website to inform other visitors.
Data collected: Star rating, review title, and review text. Because an account is required to submit a review, your first name and the initial of your last name (e.g. “John D.”) are displayed alongside your review. Your full last name is never shown publicly.
Legal basis: Your consent, expressed by voluntarily submitting a review. You are under no obligation to submit a review.
Moderation: All reviews are checked by a member of our team before being published. We reserve the right to decline publication of reviews that contain personal information, offensive content, or content unrelated to the product.
Retention period: Reviews are displayed on our website for as long as the relevant product is listed. You may request removal of your review at any time by contacting us.
Please note: Published reviews are publicly visible. We recommend you do not include personal information such as your address or order number in the body of your review.
2.6 Website Analytics
Purpose: To understand how visitors use our website and to improve its content and performance.
Data collected: We use a privacy-focused analytics tool that does not collect personal data and does not set cookies. It measures aggregated traffic data only (page views, referral sources, device type, approximate country). No individual visitor can be identified from this data.
Legal basis: Not applicable - no personal data is processed for this purpose, so no consent or other legal basis is required.
3. Hosting and Infrastructure
Our website and webshop are hosted with a professional cloud hosting provider. Your personal data is stored and processed within the European Economic Area (EEA) and is not transferred outside the EEA as part of our hosting arrangement.
Our hosting provider acts as our data processor under a data processing agreement and processes your data solely on our instructions, not for its own purposes.
4. Third Parties We Share Your Data With
We share your personal data with third parties strictly to the extent necessary to run our business and fulfil your order. We do not sell your data, and we only share it where described below.
Third parties that process personal data on our behalf and under our instructions are our data processors. We have a data processing agreement in place with each of them. Third parties that independently determine how they use your data are independent data controllers, each responsible for their own compliance.
Depending on the purpose described in section 2, we may share your personal data with the following categories of recipients:
- Payment service providers: to process your payment, we share relevant order and payment data with a licensed payment service provider. This provider acts as an independent data controller for payment data, as it is regulated as a financial institution subject to its own legal and regulatory obligations. We do not receive or store your full card details.
- Logistics and delivery partners: to deliver your order, we share your name, delivery address, and, where relevant, your telephone number and email address (for delivery notifications) with a shipping partner. This partner acts as an independent data controller for shipment data and uses it solely to fulfil the delivery.
- Invoicing and accounting software providers: we use invoicing and accounting software to generate invoices and manage our financial administration. These providers process your name, billing address, email address, and order details on our behalf, acting as our data processors.
- Our external bookkeeper: we share relevant financial and invoice data with our external bookkeeper for accounting and tax compliance purposes. Our bookkeeper processes this data strictly on our instructions and is bound by professional confidentiality obligations as well as a data processing agreement.
- Hosting and IT service providers: as described in section 3, our website and related infrastructure are supported by professional hosting and IT service providers acting as our data processors.
- Supervisory or judicial authorities: where required by law, or to defend our legal rights or those of others.
Your personal data is only shared with the above recipients on a need-to-know basis, limited to what is necessary for them to perform their service. Upon request, we are happy to provide more detailed information about the specific service providers we work with.
5. Your Rights
Under data protection law, you have the following rights regarding your personal data:
- Right of access: You have the right to obtain a copy of the personal data we hold about you. If you have an account on our website, you can download a copy of your personal data directly from the “Your Account” section, under “My personal data”. This includes your contact details, address, and order history.
- Right to rectification: You have the right to have inaccurate or incomplete data corrected. You can update your name, email address, password, and delivery addresses yourself at any time from the “Your Account” section. For any other corrections, please contact us directly.
- Right to erasure: You have the right to request deletion of your personal data, subject to our legal retention obligations (for example, we are required to retain invoice data for 7 years under Belgian tax law).
- Right to restriction of processing: You have the right to request that we limit the processing of your data in certain circumstances.
- Right to data portability: You have the right to receive your personal data in a structured, machine-readable format, where processing is based on consent or contract. You can download your personal data directly from your account as described under the right of access above.
- Right to object: You have the right to object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on your consent (e.g. the newsletter), you may withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal. You can unsubscribe from our newsletter via the link included in every email.
For rights you cannot exercise directly through your account, please contact us at . We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.
6. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is hosted using professional infrastructure that applies industry-standard security controls, including encryption in transit (HTTPS) and at rest.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Belgian Data Protection Authority within 72 hours and, where required, inform affected individuals without undue delay.
7. Complaints
If you believe we are not handling your personal data in accordance with the law, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données):
www.dataprotectionauthority.be
Rue de la Presse 35, 1000 Brussels
Email: contact@apd-gba.be
Tel: +32 (0)2 274 48 00
We would, however, appreciate the opportunity to address your concerns directly before you contact the authority. Please reach out to us first at .
8. Changes to This Policy
We may update this Privacy Policy from time to time, for example when we introduce new services or when legislation changes. We will update the date at the top of this page when changes are made. We recommend checking this page periodically.