Privacy policy

Last updated: September 21, 2026

Josh’s Collectibles respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains what personal data we collect, why we use it, how we protect it and what rights you have under the General Data Protection Regulation (GDPR) and applicable Belgian data protection legislation.

1. Who is responsible for your personal data?

The data controller responsible for processing your personal data is:

Josh’s Collectibles
Business owner: Joshua Harinck
Legal form: [LEGAL FORM]
Address: Kollegestraat 3/0012, 8500 Kortrijk, Belgium
Enterprise number: [ONDERNEMINGSNUMMER]
VAT number: [BTW-NUMMER]
Email: info@joshcollectibles.com
Telephone: [TELEFOONNUMMER]

Josh’s Collectibles is responsible for the processing of personal data described in this Privacy Policy.

We have not appointed a Data Protection Officer (DPO), as we are not currently required to do so.

2. What personal data do we collect?

Depending on how you interact with our webshop, we may process the following categories of personal data:

Contact and identification information

  • Name

  • Billing and delivery address

  • Email address

  • Telephone number, where provided

  • Account information

Order and transaction information

  • Products ordered

  • Order number

  • Order date

  • Delivery information

  • Billing information

  • Refund and return information

Payment information

Payments are processed through the payment providers available during checkout. Where applicable, payment providers process payment information in accordance with their own privacy policies.

We generally do not have access to your complete payment card details.

Technical information

When you visit our webshop, certain technical information may be collected automatically, such as:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Language settings

  • Pages visited

  • Referring pages

  • Technical identifiers

  • Information relating to your interaction with the webshop

Communications

If you contact us, we may keep information contained in your communication and our response in order to handle your request.

3. How do we collect your personal data?

We may receive personal data:

  • directly from you when you place an order or create an account;

  • when you contact us;

  • when you subscribe to marketing communications;

  • automatically when you use our website;

  • from service providers involved in operating our webshop, payment, delivery or other services;

  • where legally permitted, from other third parties.

4. Why do we use your personal data?

Depending on the circumstances, we process personal data for the following purposes:

  • processing and delivering orders;

  • processing payments and refunds;

  • managing customer accounts;

  • handling returns and withdrawals;

  • providing customer support;

  • communicating with you about your order;

  • preventing fraud and abuse;

  • maintaining the security of our webshop;

  • improving our webshop and services;

  • complying with legal, accounting and tax obligations;

  • sending marketing communications where legally permitted and, where required, with your consent;

  • analysing website usage and performance where permitted.

5. Legal bases for processing

We process personal data on the basis of one or more of the following legal grounds:

  • performance of a contract;

  • compliance with a legal obligation;

  • our legitimate interests, where these interests are not overridden by your rights and interests;

  • your consent, where consent is required.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Cookies and similar technologies

Our webshop uses cookies and similar technologies.

Some cookies are strictly necessary for the functioning and security of the webshop. Other cookies, such as analytics or marketing cookies, may require your consent under applicable law.

More information about the cookies used on our website can be found in our Cookie Policy and, where applicable, through our cookie consent mechanism.

7. Who may receive your personal data?

We may share personal data with service providers where this is necessary to operate our business and webshop.

Depending on the services we use, these may include:

  • Shopify, which provides the webshop platform;

  • Shopify Payments, which processes payments and related payment information;

  • shipping and delivery providers, including DHL where applicable;

  • accounting and invoicing service providers;

  • customer communication services;

  • webshop and form applications;

  • analytics and marketing service providers, where applicable;

  • fraud prevention and security providers;

  • other technical service providers necessary to operate the webshop.

These service providers may only process personal data as permitted by law and, where applicable, under appropriate contractual arrangements.

8. Shopify and third-party services

Our webshop is hosted and operated using Shopify.

We may also use third-party applications and services connected to our Shopify store, including applications for forms, invoicing, shipping, product search, customer communication, translations, order management and other webshop functions.

The exact services used may change over time. Where a service processes personal data on our behalf, we take reasonable steps to ensure that the processing complies with applicable data protection requirements.

9. International transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on an appropriate legal transfer mechanism where required, such as an adequacy decision or appropriate contractual safeguards.

10. How long do we keep your personal data?

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, taking into account our legal, accounting, tax and contractual obligations.

For example, certain transaction and accounting records may need to be retained for legally prescribed periods.

When personal data is no longer required, we will delete it or anonymise it where reasonably possible.

11. Your rights

Subject to applicable legal conditions, you have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing;

  • request data portability where applicable;

  • withdraw consent where processing is based on consent;

  • object to direct marketing at any time.

To exercise your rights, contact us at:

info@joshcollectibles.com

We may need to verify your identity before processing certain requests.

12. Marketing communications

If you receive marketing communications from us, you can unsubscribe at any time using the unsubscribe mechanism included in the communication or by contacting:

info@joshcollectibles.com

We will process your request in accordance with applicable law.

13. Reviews and user-generated content

If you submit a product review or other content to our webshop, the information you choose to provide may be displayed publicly.

Please do not include personal information in publicly visible reviews that you do not want other people to see.

14. Third-party websites

Our webshop may contain links to third-party websites.

We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy policy of any third-party website you visit.

15. Children's privacy

Our webshop is not intended to knowingly collect personal data from children without the involvement of a parent or legal guardian where required by law.

If you believe that a child has provided us with personal data in circumstances where this was not appropriate, please contact us.

16. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

However, no online system can be guaranteed to be completely secure.

17. Complaints

If you believe that your personal data has been processed unlawfully, you can contact us first at:

info@joshcollectibles.com

You also have the right to lodge a complaint with the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35
1000 Brussel
Belgium

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when our services or legal obligations change.

The latest version will always be published on our webshop with the corresponding update date.

19. Contact

If you have questions about this Privacy Policy or the processing of your personal data:

Josh’s Collectibles
Kollegestraat 3/0012
8500 Kortrijk
Belgium

Email: info@joshcollectibles.com
Telephone: [TELEFOONNUMMER]