1. Who are we?
Palleys is a student business in Unizo’s Step Up programme. We are responsible for processing your personal data.
Palleys, Bernheimlaan 26, 9050 Gentbrugge, België. Email: hallo@palleys.be.
2. What data do we process and why?
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address, order details (chosen animal, edition, quantity) | Carrying out your order, customer service, guarantee | Performance of the contract |
| Delivery address (only for delivery, not for pickup) | Delivering your order | Performance of the contract |
| Phone number (optional) | Contact and delivery notifications | Performance of the contract |
| 1 to 4 photos of your pet | Making your custom Palley | Performance of the contract |
| Print-ready 3D model of your Palley | Being able to reprint your Palley under the guarantee | Performance of the contract |
| Payment status | Handling your payment. You pay with Bancontact. We don’t see or keep your card or account details: they stay with Bancontact and your bank. | Performance of the contract |
| Administrative data (order, payment) | Accounting and legal obligations | Legal obligation |
| Messages via the contact form or email | Answering your question | Legitimate interest |
| Technical data (server logs, an encrypted code of your IP address) | Security, preventing abuse, troubleshooting | Legitimate interest |
| Email address for news about new Palleys (optional) | Newsletter | Your consent |
| Your photo and Palley for marketing (optional) | Communication on the website and social media | Your consent |
| Necessary cookies (cart, language) | Making the webshop work | Legitimate interest (strictly necessary, no consent needed) |
We don’t use marketing cookies.
3. Photos and AI
For a custom Palley we only process your photos after you have ordered and paid. We do so with paid AI services from third parties: Google (Gemini) turns them into an image in the right pose, and Meshy makes a 3D model of that. Our team checks every step. Only upload photos of your pet, without people or children.
4. Who do we share your data with?
We only share data with service providers we need, under a data processing agreement:
- Bancontact Pro / KBC (payments)
- Google (AI processing of your photos), Meshy (3D model)
- Cloudflare (storage of photos and files), our hosting provider (a server in the EU, for the website and the database), Resend (emails)
- PostNL (delivery: name, address, email and phone, only if you choose delivery)
Our print partner only gets the 3D model with an order code, no name or address.
We don’t sell your data.
5. Transfers outside the EU
Some service providers are (partly) outside the EU, for example in the United States. In that case we make sure there are appropriate safeguards, such as standard contractual clauses or a recognised adequacy decision (such as the EU-US Data Privacy Framework).
6. How long do we keep your data?
- Uploads of unpaid orders: 7 days, then deleted automatically.
- Photos of your pet and the AI images of paid orders: 6 weeks after delivery or pickup, then deleted automatically.
- The print-ready 3D model of your Palley: 2 years after delivery, so we can reprint your Palley exactly under the guarantee. Then it is deleted automatically.
- Photos you gave consent for marketing for: until you withdraw that consent.
- Your email address for the newsletter: until you unsubscribe.
- Order and payment data: 7 years, because of accounting obligations.
- Contact details in customer service: up to 2 years after the last contact.
Would you like your photos or your 3D model deleted earlier? Email us. Without the 3D model we can no longer reprint your Palley exactly later on.
7. Security
Photos and models are stored in a shielded environment. They can only be reached through temporary, secure links and are only accessible to authorised team members. We don’t keep your IP address as readable text. No system is completely secure, but we take reasonable technical and organisational measures.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection. If you gave consent, you can always withdraw it. That doesn’t affect the processing up to then. Email us at hallo@palleys.be. We respond within one month.
9. Complaints
If you’re not satisfied, please email us first. You can also file a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.
10. Minors
Our webshop is intended for people aged 18 and over. We don’t knowingly collect data from minors.
11. Changes
We may change this policy. The latest version is always on our website, with the date at the top.
