Our Privacy Policy

The private limited company "Fitlab" (trading as "CurveCatch"), registered under BE 0765.265.068 and based at Veltwijcklaan 85, 2180 Antwerp, is responsible for processing your personal data.

We collect the following types of personal data:
- Identity data: Name, address, e-mail address, telephone number.
- Payment data: Bank account number, payment card details (processed by our payment provider Shopify; we do not have access to full details).
- Order data: Information about your orders, such as items ordered, delivery address, and payment method.
- Return data: Information about your returns, such as items returned and the reason for return.
- Communication data: Information about your contact with our customer service, such as e-mails, chat messages, and telephone calls.
- Website data: IP address, browser type, operating system, pages visited, location data, browsing behaviour, cookies.
- Preference data: Information about your lingerie preferences, obtained via our online questionnaire, customer journey feedback, and checkout.
- Marketing data: E-mail address for sending newsletters and promotions (we are not currently collecting this data).

We collect your personal data for the following purposes:
- To fulfill our agreement: To process, deliver, and invoice your order.
- Customer service: To answer your questions and handle complaints.
- Returns processing: To process returns and issue refunds.
- Improving our services: To improve our website, products, and services.
- Personalized recommendations: To offer you lingerie that fits better based on your preferences and feedback.
- Legal obligations: To comply with legal requirements, such as storing invoices.

The legal grounds for processing your personal data are:
- Agreement Fulfilment: To process your order and deliver our services.
- Consent: For sending marketing communications (we are not currently requesting consent for marketing).
- Legitimate Interest: For improving our services, personalizing recommendations, and protecting our rights.
- Legal Obligation: To comply with legal requirements.

We only share your personal data with the following parties:
- Payment Processors: Shopify for processing online payments.
- Transport Companies: For delivering your order.
- IT Service Providers: For hosting our website and managing our IT systems.
- Collection Agency: Trivion for collecting invoices in case of non-payment.
- Government Authorities: If legally required.
- Suppliers: With whom we have signed an NDA.
- Marketing & Product Management Tools: Meta Ads, PostHog, Google Analytics.
We ensure these parties handle your data safely and confidentially.

We retain your personal data for an indefinite period.

You have the following rights regarding your personal data:
- Right of Access: You have the right to access the personal data we process about you.
- Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected.
- Right to Erasure: You have the right to have your personal data erased in certain cases, for example, when the data is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing: You have the right to limit the processing of your personal data in certain cases, for example, when you contest the accuracy of the data.
- Right to Object: You have the right to object to the processing of your personal data in certain cases, for example, when the processing is based on legitimate interest.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.
You can exercise your rights by contacting us via e-mail (hello@curvecatch.com). For the right of withdrawal, you may also contact us in writing using the model form in our general terms and conditions.

Our website uses functional, analytical, and tracking cookies. These are small text files placed on your computer. Cookies help us improve our website and personalize your experience. You can disable cookies in your browser settings.

Have questions about this Privacy Policy or want to exercise your rights? Please contact us:
CurveCatch Veltwijcklaan 85 2180 Antwerpen
E-mail: hello@curvecatch.com
Data Protection Officer (DPO):
E-mail: dpo@curvecatch.com

We may update this Privacy Policy from time to time.
The most recent version of the Policy is always available on our website.2
Date of last modification: November 25, 2024