Privacy policy

1 oct. 2026 

1. Who we are

This Privacy Policy explains how we collect, use and protect your personal data when you visit our website https://www.lebaralunettes-shop.com, place an order, contact us or subscribe to our communications. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Belgian law.

The data controller is:

LE BAR A LUNETTES SRL Rue du Mouton-Blanc 15, 4000 Liège, Belgium Company number (BCE/KBO): 0704.932.157 – VAT: BE 0704.932.157 Email: contact@lebaralunettes-shop.com Phone: +32 4 234 03 83

Our online store runs on the Shopify platform. Where this policy conflicts with our Terms & Conditions on the processing of personal data, this policy prevails.

2. Personal data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact details: name, billing and delivery address, email address, phone number.
  • Order data: products ordered, returned or cancelled, order history, invoices.
  • Payment data: payment method and transaction confirmation. Your full card details are processed by our payment provider and are never accessible to us.
  • Account data: login details and preferences, if you create a customer account.
  • Communications: the content of your emails, messages and requests to our team.
  • Prescription data: only if you choose to send us an ophthalmologist's prescription (see section 4).
  • Technical data: IP address, device and browser information, and how you browse our website, collected through cookies and similar technologies (see section 9).

We collect this data directly from you, automatically when you use the website, and from our service providers (for example delivery status updates from DHL Express).

Purpose

Legal basis (GDPR)

Processing your order, payment, delivery, returns and warranty claims

Performance of the contract (Art. 6(1)(b))

Answering your questions and requests, including holds and pre-orders

Performance of the contract or pre-contractual steps (Art. 6(1)(b))

Managing your customer account

Performance of the contract (Art. 6(1)(b))

Invoicing, accounting and tax obligations

Legal obligation (Art. 6(1)(c))

Preventing fraud and securing our website and payments

Legitimate interest (Art. 6(1)(f))

Measuring our audience and improving our website

Consent for non-essential cookies (Art. 6(1)(a))

Sending our newsletter and marketing emails

Consent (Art. 6(1)(a)), or legitimate interest for existing customers (see section 5)

Personalising our communications and showing you our advertising on our website and on third-party platforms, such as social networks, based on your activity

Consent (Art. 6(1)(a)), given through our cookie banner

Handling an ophthalmologist's prescription you send us

Explicit consent (Art. 9(2)(a))

Establishing or defending legal claims

Legitimate interest (Art. 6(1)(f))

We do not sell your personal data for money. We only use your data for personalised advertising, or share it with advertising partners for that purpose, if you have given your consent. You can withdraw it at any time through the cookie settings or by contacting us. Prescription data is never used for marketing or advertising.

4. Prescriptions and health data

We do not sell prescription lenses online. If you ask us to fit ZEISS prescription lenses to your frame, we will need your ophthalmologist's prescription. This is health data, which receives special protection under the GDPR.

We only process it with your explicit consent, solely to assess feasibility and produce your lenses. Access is limited to our optician team. We keep it for as long as needed to complete your order and handle any warranty claim on the lenses, and no longer than 2 years after delivery, unless you ask us to keep it on file for future orders.

We recommend handing your prescription to us in our boutique, or sending it through a secure channel we provide on request, rather than by ordinary email. You can withdraw your consent at any time.

5. Newsletter and marketing emails

We may send you news about new collections, rare releases and events at our boutique:

  • If you subscribe to our newsletter or tick the marketing box at checkout, we rely on your consent.
  • If you are already a customer, we may send you information about products similar to those you bought, unless you objected when you gave us your email address or at any time since.

Every marketing email contains an unsubscribe link. Unsubscribing does not affect service emails about your orders. We use a specialised emailing provider for these communications, which acts on our behalf and under our instructions.

We do not send marketing by text message without your prior consent.

6. Who receives your data

We share your data only with the parties needed to run our business:

Recipient

Why

Shopify (Shopify International Limited, Ireland)

Hosting of our online store, order management and the Shopify features described below

Shopify Payments and its payment partners

Secure payment processing and fraud prevention

DHL Express

Delivery, tracking and, for shipments outside the EU, customs clearance

Customs authorities of the destination country

Import formalities for orders shipped outside the EU

Our emailing provider

Sending our newsletter and marketing emails

Advertising and social media partners, such as Meta or Google (only with your consent)

Showing you our advertising and measuring its effectiveness

Our accountant and IT service providers

Accounting obligations and technical support

Public authorities

When required by law

Our service providers act on our instructions and are bound by confidentiality and data protection obligations. Advertising partners use your data under their own privacy policies.

We also use certain Shopify features that combine information about your interactions with our store, with other Shopify merchants and with Shopify, for example to detect fraud or support advertising. For these features, Shopify acts as an independent controller and is responsible for answering your requests about that processing. More information and the related opt-out options are available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

7. International transfers

Some of our providers, including Shopify and DHL, may process data outside the European Economic Area. In that case we rely on a European Commission adequacy decision (for example for Canada, the UK or certified US companies under the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

When you order for delivery outside the EU, we must send your name, address and order details to DHL and to the customs authorities of the destination country. This transfer is necessary to perform your order (Art. 49(1)(b) GDPR).

8. How long we keep your data

Data

Retention period

Invoices and accounting records

10 years, as required by Belgian accounting and tax law

Order and customer service data

For the duration of the contract and the 2-year legal warranty, then up to 5 years to deal with any dispute

Customer account

Until you delete it, or after 3 years of inactivity

Newsletter subscription

Until you unsubscribe, or after 3 years without opening or clicking our emails

Prescriptions

Until the order and warranty are complete, at most 2 years after delivery, unless you ask us to keep them

Cookies

See section 9 and our cookie banner

After these periods, your data is deleted or anonymised.

9. Cookies

We use cookies that are strictly necessary for the website to work (shopping cart, checkout, security). These do not require your consent.

Analytics and advertising cookies, including those of our advertising partners such as Meta or Google, are only placed if you accept them in our cookie banner. They allow us to measure our audience and show you our advertising on other websites and social networks. You can change your choice at any time through the cookie settings link at the bottom of our website.

10. Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure payment processing and restricted access for our staff. No system is entirely risk-free, so please keep your account password confidential and avoid sending sensitive information by ordinary email.

11. Your rights

Under the GDPR, you have the right to:

  • access your personal data and receive a copy;
  • correct inaccurate or incomplete data;
  • have your data deleted, unless we must keep it by law;
  • restrict or object to its processing, including at any time to direct marketing and personalised advertising;
  • receive your data in a portable format;
  • withdraw your consent at any time, without affecting earlier processing.

To exercise these rights, email contact@lebaralunettes-shop.com. We may ask you to confirm your identity. We will reply within one month, which may be extended by two months for complex requests; we will tell you if so.

Complaints. If you are not satisfied with our answer, you may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données), Rue de la Presse 35, 1000 Brussels – www.dataprotectionauthority.be, or with the authority of the EU country where you live.

Children. Our website is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

12. Additional information for US residents

Depending on the state where you live, the use of your data for personalised advertising may count as a "sale" or "sharing" of personal information under US state privacy laws. You have the right to opt out of it through the Shopify Privacy Portal or by contacting us. If you visit our website with a Global Privacy Control signal enabled, we treat it as an opt-out request for that browser. You may use an authorised agent to submit a request on your behalf; we may ask for proof of authorisation and verify your identity. We do not knowingly sell or share the personal information of anyone under 16.

13. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top shows the latest version. We will inform you of any significant change by email or on our website.

14. Contact

For any question about this policy or your personal data:

LE BAR A LUNETTES SRL – Rue du Mouton-Blanc 15, 4000 Liège, Belgium Email: contact@lebaralunettes-shop.com – Phone: +32 234 03 83