Privacy
Privacy & Cookie Policy
We handle your data with care. Here you can read what data we process, why, and what rights you have under the GDPR.
Last updated: September 13, 2026
1. Data controller
The data controller responsible for processing your personal data is UrWeb VOF, Houten Schoen 96C0002, 9100 Sint-Niklaas, Belgium, company number BE0805971515, trading under the brand name WHYTE™ Smile. For privacy questions, email us at info@whyte-smile.com.
2. Data we process
- Order data: name, email address, delivery and billing address, ordered products, and order numbers.
- Payment data: payment method and payment status. We don't process full card or bank details ourselves; that's handled by our payment service provider Mollie.
- Communication: emails and messages you send us (e.g. via the contact form).
- Technical data: IP address and device/browser information needed to keep the webshop secure and functional.
3. Purposes and legal bases
- Performance of the contract: processing your order, payment, shipping, and any returns (GDPR Art. 6(1)(b)).
- Legal obligations: bookkeeping and statutory tax retention (GDPR Art. 6(1)(c)).
- Legitimate interest: customer service, fraud prevention, and improving and securing the webshop (GDPR Art. 6(1)(f)).
- Consent: where legally required, for example for non-essential cookies or newsletters (GDPR Art. 6(1)(a)). Consent can be withdrawn at any time.
5. Retention periods
We don't keep your data longer than necessary. Order and invoice data is kept for 7 years in accordance with tax and bookkeeping obligations. Contact messages are kept for a maximum of 2 years after resolution. After that, data is deleted or anonymised.
6. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict processing of, and receive a copy (portability) of your data, and to object to processing. You can withdraw any previously given consent at any time. Send your request to info@whyte-smile.com; we'll respond within one month.
If you're not satisfied with how we handle your data, you can file a complaint with the Belgian Data Protection Authority (GBA/APD), Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be.
8. Changes
We may update this policy, for example in response to legal changes. The most recent version is always available on this page, with the last-updated date shown at the top.
Questions about this document?
Email us at info@whyte-smile.com or check out the contact page.
