We only process the data we need to deliver your order, to help you and to meet our legal obligations. We do not sell data, we do not send advertising without your consent and the shop uses no analytics cookies or cookies from advertising networks. If you arrive via a Google ad and place an order, we report that to Google Ads with only the click ID, the order number, the time and the value. We keep invoices for ten years because tax law requires it. You can always access your data, have it corrected or have it erased, insofar as the law allows.
Who is responsible for your data?
The controller responsible for processing your personal data in the nodarkness.be webshop and in No Darkness Pro is:
No Darkness BV
Anjelierenlaan 29, 8900 Ieper, België
Enterprise number: 0821.787.463
Email: franky@nodarkness.be
Phone: +32 57 46 68 66
For any question about privacy, or to exercise your rights, email franky@nodarkness.be.
Which data do we process, why and for how long?
Below, for each purpose, you can see which data we use, on what legal basis (Article 6 of the General Data Protection Regulation, GDPR) and how long we keep it.
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Carrying out, delivering and invoicing your order | Name, delivery address, billing address, email, phone, products ordered, amounts, chosen delivery method; if you order as a business, also company name and VAT number | Performance of the contract; legal obligation (accounting and VAT) | Invoices and accounting records 10 years; other order data until 2 years after delivery, the duration of the legal guarantee |
| Payment | Payment status, payment method, amount and the limited data that Mollie passes on to us depending on the method (for example the name of the account holder or the last digits of a card) | Performance of the contract; legal obligation | Together with the order, see above |
| Customer service, withdrawal, guarantee and complaints | Your messages, the photos and videos you send, your order number, the arrangements we make | Performance of the contract; legitimate interest (following up your question properly) | Until your question has been dealt with and for 2 years after that; anything belonging to a guarantee file until the end of the guarantee |
| Gift cards | Email of the buyer; name and email of the recipient; the sender’s name and the message you add; the code, the balance and where it was used | Performance of the contract | Until the card has expired or been used up and for 1 year after that; the sale itself as an accounting record for 10 years |
| No Darkness Pro: your account | First name and surname, company name, VAT number, sector, email, phone, language, your password (only as an irreversible hash), your discount percentage, the code you registered with, any explanation with your application, your logo | Performance of the contract | As long as your account exists; 1 year after closure, except invoices (10 years) |
| No Darkness Pro: checking your VAT number | VAT number and the name and address that the European VIES system returns with it | Legitimate interest (verifying that we are dealing with a genuine business); legal obligation for VAT | We keep the result of the check with your account |
| No Darkness Pro: your activity in the portal | Which products and categories you view, your searches, your cart, your catalogues, the emails we send you and how often a catalogue you shared is opened (without knowing by whom) | Legitimate interest (following up your account, helping you better and tailoring our range) | 2 years |
| Measuring what our ads on Google deliver | If you arrive via a Google ad: the click ID that Google adds to the address; if you order and pay during that visit, also the order number, the time and the value of the order. No name, email address, address or phone number. | Legitimate interest (knowing which ads generate sales and tailoring our budget accordingly) | The click ID until you close your browser; for an order, together with the order, see above |
| Keeping the website running securely | IP address, browser data, pages requested and time in the server logs; the session cookie | Legitimate interest (security, tracing errors, preventing misuse) | Server logs at most 30 days; the session cookie until you close your browser |
| Protecting login | An irreversibly encrypted derivative of your IP address (never the address itself), to slow down too many failed login attempts | Legitimate interest (security) | Only attempts from the last fifteen minutes count; after that it is cleared |
Newsletter
If you subscribe to the newsletter, we keep your email address, the language in which you subscribed, where you did so (at the bottom of the shop or at checkout) and when you confirmed your subscription. We do this on the basis of your consent: you first receive an email with a button to confirm, and only after that do we send you anything. Every newsletter contains a link to unsubscribe, and you can also do so via the contact page. After you unsubscribe, we only keep your address with a note that you have unsubscribed, so that we do not email you again by mistake; if you want us to erase it completely, let us know. For sending, we may use a service that uses your address solely on our instructions.
We do not take decisions about you based solely on automated processing, and we do not create profiles for advertising.
Who do we share your data with?
We do not sell your data and we do not rent it out. We only share it with parties we need to make the shop work. With those who process data on our behalf, we have a data processing agreement, or the processor terms of that service apply.
| Party | Purpose | Role and location |
|---|---|---|
| Mollie | Processing your payment | Independent controller for your payment data; established in the Netherlands |
| DigitalOcean | Hosting the webshop and the database | Processor; the server is in a data centre in Amsterdam, the company is American |
| Twilio SendGrid | Sending emails: order confirmations, gift cards, messages from No Darkness Pro | Processor; American company |
| European Commission (VIES) | Checking the VAT number when you register for No Darkness Pro | Public service of the European Union |
| Billit | Creating and sending electronic invoices, including via Peppol | Processor; Belgian company |
| Google (Google Ads) | The report that a click on our ad led to an order: click ID, order number, time and value | Independent controller; Google Ireland Limited, Ireland |
| The manufacturer or wholesaler that ships your product | Your name, delivery address and phone number, if the product ships directly from their warehouse to you | Recipient, only for that delivery |
| The carrier | Name, delivery address, email or phone, to deliver your parcel and notify you | Recipient, only for the delivery |
| Our accountant and the authorities | Invoices and accounting; data we are legally required to provide, for example to the tax authorities | Legal obligation |
If you contact us via WhatsApp, that conversation runs through the WhatsApp service (Meta). Their privacy rules then also apply to that channel. If you do not want that, use email or phone.
Does your data leave Europe?
Wherever possible we choose storage within the European Union: the shop’s server is in Amsterdam. A few of our service providers are American companies or belong to an American company (DigitalOcean, Twilio SendGrid, Google). Where data may go to the United States, this happens on the basis of the EU-US Data Privacy Framework, to which these companies have signed up, or on the basis of the European Commission’s standard contractual clauses.
How do we protect your data?
The shop only works over an encrypted connection (https). We do not store Pro account passwords themselves, only an irreversible hash of them. Only the people who need customer data for their work have access to it, with a personal account. Payment data such as your full card number never reaches us but stays with Mollie.
Which rights do you have?
- Access: you can ask which data we hold about you and what we do with it.
- Rectification: if something is incorrect, we correct it.
- Erasure: you can ask us to erase your data. What we are legally required to keep, such as invoices, we only erase once that period has ended.
- Restriction: you can ask us not to use your data for a while, for example while we check whether it is correct.
- Portability: you can receive the data you gave us in a common file format.
- Objection: you can object to processing based on our legitimate interest; we then stop, unless we have compelling grounds that take precedence.
Send your request to franky@nodarkness.be. We reply within one month. To prevent someone else from requesting your data, we may ask you to confirm who you are, for example by replying from the email address linked to your order.
Where can you lodge a complaint?
If you are not satisfied with how we handle your data, please tell us first. You also always have the right to lodge a complaint with the Data Protection Authority (GBA), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, dataprotectionauthority.be. If you live in another country of the European Union, you can also turn to the supervisory authority of that country.
Which cookies does the shop use?
Only a session cookie and local storage of your recent searches in your own browser. No analytics cookies and no cookies from Google or other advertising networks. If you arrive via a Google ad, the session also remembers the click ID of that ad. Everything is set out in the cookie policy.
Can this statement change?
Yes, for example if we start using a new service. The date of the last change is shown at the top. If anything material changes in what we do with your data, we will let you know.
Sources
- Regulation (EU) 2016/679 (General Data Protection Regulation), EUR-Lex (2016)
- Klacht indienen, Gegevensbeschermingsautoriteit (2026)
- Bewaartermijn van archieven (7 jaar boekhoudrecht, 10 jaar btw en inkomstenbelastingen), Instituut van de Bedrijfsrevisoren (2025)
- Privacyverklaring Mollie, Mollie (2026)
- Privacy Policy (EU-U.S. Data Privacy Framework), DigitalOcean (2026)
- Twilio Privacy Notice, Twilio (2026)
- VIES, VAT number validation, European Commission (2026)