Privacy Policy

Privacy Policy

Last Updated: March 2026

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or make a purchase, in compliance with the General Data Protection Regulation (GDPR).

1. The Data Controller

The company responsible for the processing of your personal data on this website is:

  • Company Name: LORENZINI C.H. BV
  • Registered Office: Zandhovensteenweg 45, 12, 2520 Ranst, Belgium
  • Email: sales@elch.be

2. What Data We Collect

We collect the following categories of information when you interact with our website or place an order:

  • Identification Data: First name and Last name.
  • Contact Data: Email address, phone number, delivery address, and billing address.
  • Transaction Data: Order details, purchase history, and transaction references (Note: We do not process or store full credit card numbers on our servers).
  • Technical & Connection Data: IP address, browser type, and device information (collected via cookies and tracking technologies).

3. Purpose & Legal Basis for Processing

We process your data for the following specific purposes:

  • Contract Execution: To process your orders, manage payments, and facilitate the delivery of your products. (Legal basis: Performance of a contract).
  • Customer Support: To respond to your inquiries, provide assistance, and manage returns or warranties. (Legal basis: Performance of a contract).
  • Legal Obligations: To comply with mandatory accounting, tax, and consumer protection laws in Belgium. (Legal basis: Legal obligation).
  • Marketing & Communications: To send you newsletters or promotional offers, strictly only if you have explicitly opted in. (Legal basis: Consent).

4. Data Sharing & Third Parties

We will never sell or rent your personal data to third parties. However, to successfully fulfill your order and maintain our services, we must securely share specific data with trusted partners:

  • Logistics Partners & Carriers: Your name, delivery address, and phone number are shared with our transport partners (e.g., Bpost, DPD, DHL) solely to organize and track your delivery.
  • Payment Processors: Your payment data is securely handled by our certified banking partners to validate and complete your transactions.
  • IT & Hosting Providers: Technical service providers that ensure our website remains secure, hosted, and functioning correctly.

5. Data Retention

We retain your personal data only for as long as strictly necessary to fulfill the purposes outlined in this policy:

  • Active Accounts: Maintained for as long as your account remains active.
  • Inactive Accounts: Safely deleted or anonymized 3 years after your last login or interaction.
  • Invoices & Transaction Data: Retained for 7 to 10 years, as mandated by Belgian accounting and tax legislation.

6. Your GDPR Rights

Under the General Data Protection Regulation, you maintain full control over your personal data. You have the right to:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Correct or update inaccurate data directly within your account settings or by contacting us.
  • Right to Erasure ("Right to be Forgotten"): Request the deletion of your data, provided we are not legally obligated to retain it (e.g., for tax compliance).
  • Right to Restriction & Objection: Ask us to limit the processing of your data or object to its use for direct marketing.

To exercise any of these rights, please contact our privacy team at: sales@elch.be.

7. Cookies & Tracking

Our website utilizes cookies to ensure core functionality (such as maintaining your active shopping cart) and to improve your browsing experience. Upon your first visit, a cookie banner allows you to accept, reject, or customize your tracking preferences. You may adjust these settings at any time through your browser.

8. Data Security

We implement robust technical and organizational security measures—including SSL encryption, secure servers, and restricted access protocols—to protect your personal data against unauthorized access, accidental loss, disclosure, or alteration.