Privacy policy

Effective date: 10/01/2026 – last updated: 20/10/2026

XD Vintage attaches great importance to protecting your personal data and respects your privacy in accordance with the General Data Protection Regulation (GDPR). In this privacy policy we explain which data we collect, why we do so and which rights you have.

1. Who are we?

XD Vintage (sole proprietorship of Xander Deuvaert)
Weststraat 26, 9940 Sleidinge (Evergem), Belgium
Phone: +32 474 34 35 74
Email: info@xdvintage.com
Website: www.xdvintage.com
Company and VAT number: BE 1033.414.640

XD Vintage is responsible for processing personal data as described in this privacy policy.

2. Which personal data do we collect?

We may process the following personal data when you use our website, place an order or contact us:

First and last name
Email address
Phone number (optional)
Billing and delivery address
Order history
Payment information (processed securely via Shopify; we do not store card details)
Communication preferences (newsletter)
IP address and browser data
Website behaviour (via cookies and similar technologies)

3. Why do we process your data?

Processing and shipping orders
Customer service and communication
Sending order confirmations and service messages
Improving our website and services
Sending newsletters and marketing (only with consent)
Legal and administrative obligations

4. Legal basis for processing (GDPR art. 6)

Performance of a contract (e.g. order, delivery, payment)
Legal obligation (accounting, tax obligations)
Consent (newsletter, marketing, cookies)
Legitimate interest (website analytics, fraud prevention, improving services)

5. Retention periods

Order and invoice data: 7 years (legal obligation)
Newsletter subscriptions: until you unsubscribe
Contact requests: up to 12 months
Website and analytics data: up to 26 months
Cookies: according to the set cookie periods

6. Sharing data with third parties

We only share your data with trusted processors when this is necessary for our services:

Shopify – e-commerce platform and payments
Klaviyo – email marketing and newsletters
Payment providers – including Visa, Mastercard, Bancontact, iDEAL, Apple Pay, Google Pay, Shop Pay
Shipping partners – Sendcloud, bpost and DPD, for delivering orders

We never sell your personal data to third parties.

7. International data transfers

Some of our partners (such as Shopify and Klaviyo) are located outside the European Economic Area (e.g. the United States). In these cases, data is transferred on the basis of Standard Contractual Clauses (SCCs) or other protection mechanisms approved by the European Commission.

8. Cookies

XD Vintage uses cookies and similar technologies to make the website work properly, gain insight into website use and improve marketing and communication. Non-essential cookies are only placed after your consent via the cookie banner. You can change your preferences at any time or delete cookies via your browser settings.

9. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access and unwanted disclosure. All payments are processed securely via Shopify's secure payment systems.

10. Your rights

Under the GDPR you have the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, objection and data portability, and the right to withdraw your consent. You can submit a request via info@xdvintage.com.

11. Complaints

Do you have a complaint about how we handle your personal data? You can file a complaint with the Belgian Data Protection Authority (GBA/APD): www.dataprotectionauthority.be.