Privacy Policy

Last updated: 12 June 2026.

The Squishy Box, operated by [LEGAL BUSINESS NAME], [BUSINESS ADDRESS], Belgium (the “data controller”, “we”, “us”), respects your privacy. This policy explains how we collect, use and protect your personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian data-protection law. For any privacy request, contact support@thesquishybox.com.

Personal data we collect

Order & account data you provide: name, email, shipping/billing address, phone number, and order details. Payment-card data is processed by our payment providers and is not stored by us.
Device & usage data collected automatically when you browse: IP address, browser/device type, pages viewed, and referring site, via cookies and similar technologies.

How and why we use your data (legal bases)

To process and deliver your orders, take payment and provide customer support — performance of a contract.
To prevent fraud and keep our store secure, and to improve our products and site — legitimate interests.
To send marketing emails where you have opted in — consent (you can withdraw any time).
To comply with legal obligations such as tax and accounting — legal obligation.

Who we share your data with

We share data only as needed to run our store, with:

Shopify — our e-commerce platform that hosts the store. See Shopify’s privacy policy at shopify.com/legal/privacy.
Payment providers (e.g. Shopify Payments, PayPal) to process payments.
Fulfilment partners, suppliers and shipping carriers who pack and deliver your order — we share the name and address needed to ship to you.
Analytics and marketing tools (e.g. Google Analytics, email service providers) to understand and improve our store.

We never sell your personal data.

International data transfers

Some of our suppliers and service providers are located outside the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or adequacy decisions.

Cookies

We use cookies and similar technologies to operate the store, remember your cart, analyse traffic and (with consent) personalise marketing. You can control cookies through your browser settings and our cookie banner where shown.

Data retention

We keep your personal data only as long as needed for the purposes above, including legal, accounting and reporting obligations (order records are typically retained for the period required by Belgian tax law).

Your rights under the GDPR

You have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and withdraw consent at any time. To exercise any right, email support@thesquishybox.com. We will respond within one month.

Complaints

If you believe we have mishandled your data, you may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels, +32 (0)2 274 48 00, contact@apd-gba.be.

Children

Our store is intended for adults. Customers must be the age of majority in their place of residence to purchase. We do not knowingly collect data from children without parental consent.