Privacy policy
Personal data
Privacy policy
1. Data controller
The controller of the personal data collected on the site apexstudioworks.com is:
| Name | AAACOM |
| Address | Avenue de la Closière 48, 1410 WATERLOO, Walloon Brabant, Belgium |
| info@apexstudioworks.com | |
| Phone | +32 456 35 05 64 |
This policy is drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
2. Data collected
Apex Studio collects the following personal data, depending on the context of your interaction with the site:
| Context | Data collected |
|---|---|
| Order | Surname, first name, delivery and billing address, email, phone, configuration of the steering wheel ordered, order history |
| Account creation | Email, password (encrypted), account preferences |
| Contact / WhatsApp | Name, email or telephone number, content of the exchanges |
| Newsletter / popup | Email address, marketing preferences |
| Browsing | IP address, browser type, pages visited, session duration (via cookies — see Cookie policy) |
Apex Studio does not collect sensitive data within the meaning of Article 9 of the GDPR.
3. Purposes and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Processing and follow-up of orders | Performance of the contract (Art. 6.1.b GDPR) |
| Delivery of the product | Performance of the contract (Art. 6.1.b GDPR) |
| Invoicing and accounting obligations | Legal obligation (Art. 6.1.c GDPR) |
| Customer service and after-sales support | Performance of the contract / legitimate interest (Art. 6.1.b and 6.1.f GDPR) |
| Sending marketing emails and promotions | Consent (Art. 6.1.a GDPR) |
| Improvement of the site and audience analysis | Legitimate interest / consent for analytics cookies (Art. 6.1.f and 6.1.a GDPR) |
| Fraud prevention | Legitimate interest (Art. 6.1.f GDPR) |
4. Recipients of the data
Personal data is processed by Apex Studio and may be passed on to the following processors, strictly within the framework of the purposes defined above:
| Processor | Role | Location |
|---|---|---|
| Shopify Inc. | Hosting of the store, order processing, payment | Canada / EU (EU data processed in the EU) |
| Omnisend | Sending of marketing emails and automations | EU |
| BPost / DPD / DHL Express | Delivery — transmission of the delivery address only | BE / EU / International |
| Stripe / Shopify Payments | Payment processing — encrypted banking data, not accessible by Apex Studio | EU / USA (Privacy Shield / standard contractual clauses) |
Apex Studio does not sell, rent or transfer any personal data to third parties for commercial purposes.
5. Retention period
| Category of data | Period |
|---|---|
| Order and invoicing data | 7 years (Belgian accounting and tax obligation) |
| Customer account data | For as long as the account is active, plus 3 years after the last activity |
| Marketing data (email, preferences) | Until consent is withdrawn, or 3 years after the last interaction |
| Browsing data / analytics cookies | 13 months maximum (see Cookie policy) |
| After-sales / contact exchanges | 3 years from the closure of the exchange |
6. Transfers outside the European Union
Some of Apex Studio's processors are established outside the European Union (in particular Shopify Inc., established in Canada, a country recognised by the European Commission as offering an adequate level of protection). Any transfers to other third countries are governed by standard contractual clauses approved by the European Commission in accordance with Article 46 of the GDPR.
7. Your rights
In accordance with the GDPR, you have the following rights over your personal data:
- Right of access — obtain confirmation that data concerning you is being processed and receive a copy of it
- Right of rectification — have inaccurate or incomplete data corrected
- Right to erasure — request the deletion of your data, subject to statutory retention obligations
- Right to portability — receive your data in a structured, machine-readable format
- Right to object — object to the processing of your data for direct marketing purposes
- Right to restriction — request the temporary suspension of the processing of your data
- Right to withdraw consent — withdraw at any time your consent for processing based on it, without retroactive effect
These rights are exercised by email at info@apexstudioworks.com. Apex Studio undertakes to reply within one month of receipt of the request.
8. Data security
Apex Studio implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Financial transactions are encrypted using the SSL/TLS protocol. Payment data is never stored by Apex Studio.
In the event of a data breach likely to give rise to a risk to your rights and freedoms, Apex Studio undertakes to notify the DPA within 72 hours and the persons concerned as soon as possible.
9. Cookies
The site apexstudioworks.com uses cookies and trackers. The detailed list of the cookies used, their purposes and how to manage your consent are available in the Cookie policy.
10. Marketing communications
If you have consented to receive commercial communications from Apex Studio (through the sign-up form or the dedicated box when ordering), your data is used to send you offers, news and promotions by email.
You may unsubscribe at any time by clicking the unsubscribe link present in every email, or by contacting Apex Studio at info@apexstudioworks.com. Unsubscription takes effect within a maximum of 72 hours.
11. Minors
The site apexstudioworks.com is intended for adults. Apex Studio does not knowingly collect personal data concerning minors under 16. If you believe that a minor has provided us with personal data, contact us at info@apexstudioworks.com so that we may delete it.
12. Changes to the policy
Apex Studio reserves the right to amend this policy at any time, in particular to comply with any regulatory developments. The version in force is the one published on this page, dated in the header. In the event of a substantial change, registered users will be informed by email.