Privacy Policy
Privacy Policy
Last updated: May 11, 2026
1. Introduction
This Privacy Policy explains how GUST CARE collects, uses, and protects the personal data of website users.
The controller of your personal data is:
Ameritex SRL
Company number: BCE [0XXX.XXX.XXX]
Registered office: Boulevard de L’Empereur 10, 1000 Brussels, Belgium
Email: contact@gustcare.com
This policy is established in accordance with Regulation (EU) 2016/679 of April 27, 2016 (General Data Protection Regulation – GDPR) and the Belgian law of July 30, 2018 on the protection of natural persons with regard to the processing of personal data.
By using the website, you accept the practices described in this policy.
2. Data Collected
We may collect the following information:
Identification data:
- first name and last name;
- postal address (delivery and billing);
- email address;
- phone number.
Transaction data:
- order history;
- amount of purchases;
- payment method used (without full bank details).
Navigation data:
- IP address;
- browser and device type;
- pages visited and duration of visit;
- cookies (see dedicated section below).
3. Purposes and Legal Bases for Processing
In accordance with Article 6 of the GDPR, we process your data on the following legal bases:
Performance of a contract (Art. 6.1.b GDPR):
- processing and tracking your orders;
- ensuring deliveries;
- managing customer service and returns;
- sending transactional emails.
Legal obligation (Art. 6.1.c GDPR):
- retention of invoices (Belgian accounting obligation: 7 years);
- tax and VAT obligations.
Legitimate interest (Art. 6.1.f GDPR):
- improving user experience and our products;
- preventing fraud;
- ensuring website security.
Consent (Art. 6.1.a GDPR):
- sending marketing communications and newsletters;
- use of non-essential cookies.
4. Data Sharing
Data may be shared with certain service providers necessary for the operation of the service, including:
- Shopify Inc. (website hosting and order processing) – headquartered in Canada, covered by an adequacy decision by the European Commission;
- payment providers (secure transaction processing);
- carriers and delivery services;
- emailing tools (only with your consent);
- technical and analytical services;
- public authorities (in case of legal obligation).
GUST CARE does not sell its users' personal data.
5. Transfers outside the EU/EEA
Some of our subcontractors (especially Shopify) may process data outside the European Economic Area. These transfers are governed by:
- adequacy decisions by the European Commission (Art. 45 GDPR);
- standard contractual clauses approved by the European Commission (Art. 46.2.c GDPR).
6. Data Retention
Customer data (name, address, email): retained for the duration of the commercial relationship, then deleted 3 years after the last purchase (general statute of limitations).
Billing data: retained for 7 years (Belgian legal accounting obligation, Code of Companies and Associations).
Navigation data / cookies: maximum duration of 13 months (recommendation by the Belgian Data Protection Authority).
Data related to marketing consent: retained until consent is withdrawn.
7. Data Security
GUST CARE implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure, in accordance with Article 32 of the GDPR. The website uses HTTPS protocol (SSL/TLS encryption).
8. Cookies
The website uses cookies in accordance with the Belgian law of June 13, 2005 relating to electronic communications (transposing ePrivacy Directive 2002/58/CE).
Strictly necessary cookies (no consent required):
- session cookies (cart management, authentication);
- security cookies.
Analytical cookies (subject to consent):
- Google Analytics or equivalent (audience measurement).
Marketing cookies (subject to consent):
- advertising tracking pixels (Meta, Google Ads).
Users can manage their cookie preferences at any time via the cookie banner or their browser settings.
9. User Rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data;
- Right to rectification: correct inaccurate or incomplete data;
- Right to erasure ("right to be forgotten"): request the deletion of your data;
- Right to restriction of processing: temporarily restrict the use of your data;
- Right to data portability: receive your data in a structured, machine-readable format;
- Right to object: object to processing based on legitimate interest or direct marketing;
- Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Any request can be sent to: contact@gustcare.com
We will respond within one month (extendable by two months in case of complexity, in accordance with Article 12.3 of the GDPR).
In case of an unsatisfactory response, you can lodge a complaint with the Data Protection Authority (DPA):
Data Protection Authority
Rue de la Presse 35, 1000 Brussels
www.autoriteprotectiondonnees.be
contact@apd-gba.be
10. Third-Party Services
The website may contain links or integrate third-party services.
GUST CARE is not responsible for the privacy policies applied by these external services.
11. Modifications
GUST CARE reserves the right to modify this Privacy Policy at any time. In the event of a substantial modification, we will notify users by email or via a notification on the website.