1. Who is responsible for your data
Islam Chic is an online modest fashion boutique, run by a sole trader registered in Belgium. The data controller for your personal data is:
- Khadiri, Mouhcine – trading as Islam Chic
- Quai de Compiègne 57, Boîte RCH2, 4500 Huy, Belgique
- Company number (CBE): 0820.916.047
- VAT number: BE 0820.916.047
- Telephone: +32 494 25 78 12
- E-mail: info@islamchic.com
- Website: https://islamchic.com
The person responsible for publication and for data processing is Mouhcine Khadiri.
We process your personal data in line with the General Data Protection Regulation (Regulation EU 2016/679, the “GDPR”) and Belgian law. This page explains, in plain language, what we collect, why, who we share it with and what rights you have.
2. What data we collect
We only collect the data we genuinely need to handle your order and run the boutique.
Data you give us
- Identity details: first name and surname.
- Delivery and billing address: street, number, box, postcode, town, country.
- Contact details: e-mail address and telephone number. We mainly use your phone number for delivery and parcel tracking.
- Order history: items ordered (hijabs, abayas, accessories and so on), quantities, amounts, order date, order status, and any returns or refunds.
- Your messages: the content of e-mails, messages or requests you send to our customer service.
- Your e-mail address if you choose to subscribe to our newsletter.
Data collected automatically
- Browsing data: IP address, device type, operating system, browser, language, pages viewed, date and time of your visit, and the website or link you came from.
- Technical session data: the contents of your basket, your session identifier, your language and currency preferences.
What we do not collect
We never ask for special category data under the GDPR (religious or philosophical beliefs, health, ethnic origin, orientation and so on), and we do not infer any such data from your purchases.
We do not store your card details. Payment is handled directly by the payment provider you select at checkout, and only that provider processes your banking details. We simply receive confirmation that the payment was accepted or declined. The payment methods available are shown during checkout.
3. Why we use your data, and on what legal basis
To fulfil your order
Legal basis: performance of the contract. Your identity details, address, e-mail address and phone number allow us to record your order, prepare and dispatch your parcel, keep you informed, and handle a return, an exchange, a refund or the statutory guarantee of conformity.
To meet our legal obligations
Legal basis: legal obligation. Belgian accounting and tax law requires us to issue and keep invoices and supporting documents, and to respond to legitimate requests from the competent authorities.
To run and improve the boutique
Legal basis: our legitimate interests. We use technical data to keep the site secure, prevent fraud and abuse, find and fix errors, and improve our range and our service. We make sure this interest does not override your rights and freedoms.
To send you our newsletter
Legal basis: your consent. You only receive our e-mails about new arrivals and offers if you have signed up. Every e-mail contains an unsubscribe link, and you can withdraw your consent at any time, without giving a reason.
To measure audience and, where relevant, advertise
Legal basis: your consent. Analytics cookies and marketing cookies are only placed if you accept them. See the “Cookies” section below.
Automated decisions
We do not take decisions producing legal effects concerning you based solely on automated processing, and we do not carry out extensive advertising profiling.
4. Who receives your data
We never sell, rent or trade your data. It is shared only with the people and providers who need it so that your order reaches you:
- Our web host, which hosts the website and its database.
- The carrier handling delivery, which receives the details needed to deliver the parcel (name, address and, depending on the case, e-mail address or phone number for tracking and delivery arrangements).
- The payment provider, which processes the transaction and your banking details.
- Our e-mail tool, which sends order e-mails and, if you have subscribed, the newsletter.
- Our accountant and, where the law requires it, the competent Belgian authorities.
- Analytics and advertising tools, only if you have accepted the corresponding cookies.
These providers act as processors, follow our instructions, and are bound by a contract compliant with Article 28 of the GDPR. They may not use your data for their own purposes.
5. How long we keep your data
- Accounting records (invoices, order forms, supporting documents): 10 years, in line with Belgian accounting and tax obligations.
- Customer account and order history: for as long as your account is active. You may ask us to delete it at any time; accounting documents already issued are still kept for the statutory period of 10 years.
- Inactive prospects (newsletter subscribers who have not ordered, or who have not interacted with our e-mails): 3 years from your last contact with us.
- Customer service enquiries: for as long as we need to deal with your request, and then for the 2-year statutory guarantee of conformity period where your request concerns a product.
- Browsing data and cookies: see the “Cookies” section.
Once these periods have passed, your data is deleted or anonymised.
6. Does your data leave the European Union?
We give preference to providers established in the European Union or the European Economic Area. If a transfer to a country outside the Union does take place, for example for an e-mail or analytics tool, it only happens within the framework set out in Chapter V of the GDPR: an adequacy decision of the European Commission, or standard contractual clauses together with additional safeguards where needed.
You are welcome to ask us for details of these transfers at info@islamchic.com.
7. How we protect your data
We apply appropriate technical and organisational measures: an encrypted connection (HTTPS) across the whole site, access to data limited to those who genuinely need it, strong passwords, regular updates of the site and its components, and backups.
No system is completely secure. Should a data breach occur that presents a high risk to your rights, we will inform you and notify the competent supervisory authority, in accordance with Articles 33 and 34 of the GDPR.
8. Your rights under the GDPR
The GDPR gives you the following rights over your personal data:
- Right of access: to know what data we hold about you and receive a copy of it.
- Right to rectification: to have inaccurate or incomplete data corrected, a misspelt address for instance.
- Right to erasure: to ask us to delete your data, within the limits of our legal retention duties.
- Right to restriction: to have processing paused, for example while we verify data you have challenged.
- Right to data portability: to receive the data you provided in a structured, machine-readable format, or to have us send it to another controller.
- Right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interests, and to object to direct marketing at any time and without giving a reason.
- Right to withdraw consent: at any time, where processing is based on your consent. Withdrawal does not affect the lawfulness of processing carried out beforehand.
How to exercise your rights. Write to us at info@islamchic.com, or by post to Khadiri, Mouhcine – Quai de Compiègne 57, Boîte RCH2, 4500 Huy, Belgique. Please tell us which right you wish to exercise and the e-mail address you use for your orders.
We reply within one month. If your request is complex, that period may be extended by two months, and we will let you know. Where we have reasonable doubts about your identity, we may ask for further proof. Exercising your rights is free of charge.
9. Lodging a complaint
If you believe your data is not being handled properly, you may lodge a complaint with the Belgian Data Protection Authority: https://www.autoriteprotectiondonnees.be.
You may also contact the supervisory authority of the EU country where you live. We would encourage you to come to us first, though: most situations are sorted out in a couple of messages.
10. Cookies
What is a cookie?
A cookie is a small file placed on your device when you visit a website. Among other things, it keeps your basket from one page to the next, recognises you when you return, and measures how many people visit the site. We also use similar technologies, such as your browser’s local storage.
Strictly necessary cookies
These are essential for the boutique to work and cannot be switched off from the site. They are used to:
- keep the contents of your basket and your session during your visit;
- keep you signed in to your customer account;
- protect the site and its forms against fraud and abuse;
- remember your language preference and your cookie choice.
These cookies do not require your consent, because without them the site cannot provide the service you asked for.
Analytics cookies
These tell us, in aggregate, how many people visit the site, which pages they view, for how long and from what kind of device. They help us spot what is not working and improve the boutique. They are only placed with your consent.
Marketing cookies
These allow us to measure how well our advertising performs and to show you more relevant content, including on other websites or on social media. They may be placed by advertising partners. They are only placed with your consent, which you can withdraw at any time.
Refusing, changing or deleting cookies
Today the website sets only strictly necessary cookies (basket, session, security). These are exempt from consent. No analytics or marketing cookies are currently active. Should we add any, a consent tool will be put in place beforehand: you will then be able to accept, refuse and change your choice at any time. You can already delete cookies from your browser settings, or write to us at info@islamchic.com.
Every browser lets you view, block or delete cookies. The setting is usually in the settings menu, under privacy, security or browsing data:
- Google Chrome: Settings, then Privacy and security.
- Mozilla Firefox: Settings, then Privacy and Security.
- Safari: Settings or Preferences, then Privacy.
- Microsoft Edge: Settings, then Cookies and site permissions.
You can also browse in private mode, which limits how long cookies are kept once you close the window.
Please note: if you block or delete all cookies, including the strictly necessary ones, features such as the basket or signing in to your account will no longer work properly.
11. Children
The boutique is intended for adults, or for anyone able to enter into a valid contract. We do not knowingly collect data about children. If you believe a child has given us personal data, please write to info@islamchic.com and we will delete it.
12. Changes to this policy
We may update this policy, for instance if we add a service, a provider or a tool. The version that applies is the one published on this page. If a change materially affects your rights, we will tell you clearly on the site or by e-mail.
13. Contact us
A question about your data, a doubt, a request? Do write to us, we answer personally:
- E-mail: info@islamchic.com
- Telephone: +32 494 25 78 12
- Post: Khadiri, Mouhcine – Quai de Compiègne 57, Boîte RCH2, 4500 Huy, Belgique