Privacy policy

Last Updated: November 25, 2025


This Privacy Policy explains how ECH BV, a company established in Belgium and operating through the domain https://equestriancenterhendrikx.com/ (“we”, “us”, or “our”), collects, uses, discloses, and protects your personal data when you access or purchase through our website and related services (the “Services”).


For the purposes of the EU General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018, ECH BV acts as the Data Controller for the personal data we process through the Services.


By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

 


 

 

1. Identity of the Data Controller

 


ECH BV

Strabroekweg 30

3550 Heusden-Zolder

Belgium

Company Number / VAT Number: BE0726540391

Website: https://equestriancenterhendrikx.com/

Email: ech-dressage@hotmail.com

 


 

 

2. Personal Data We Collect

 


“Personal data” means any information that identifies or can reasonably identify an individual. We may collect and process the following categories of personal data:


 

2.1. Identity & Contact Information

 

 

  • Name

  • Billing and shipping address

  • Email address

  • Phone number

 


 

2.2. Financial & Transaction Data

 

 

  • Payment method (processed securely by third-party payment processors)

  • Transaction details, invoices, order history

  • Refunds, returns, and exchanges

 


We do not store full credit card numbers or payment credentials.


 

2.3. Account Data

 

 

  • Usernames and encrypted passwords

  • Preferences and account settings

 


 

2.4. Communication Data

 

 

  • Customer support inquiries

  • Emails, messages, chat logs

 


 

2.5. Technical & Device Data

 


Collected automatically through cookies and similar technologies:

 

  • IP address

  • Browser type and version

  • Device identifiers

  • Operating system

  • Interaction logs and browsing behaviour

 


 

2.6. Usage & Interaction Data

 

 

  • Pages visited

  • Wishlist and cart actions

  • Product interactions

  • Marketing preferences and engagement

 


 

2.7. Third-Party Sources

 


We may receive data from:

 

  • Shopify

  • Payment processors

  • Shipping and fulfilment partners

  • Analytics and advertising partners

  • Social media platforms (if you interact or log in through them)

 

 


 

 

3. Legal Bases for Processing

 


We process your personal data lawfully based on:

 

  • Performance of a contract (order fulfilment, account management)

  • Compliance with legal obligations (tax, accounting, fraud prevention)

  • Legitimate interests (security, service improvement, analytics, marketing)

  • Consent (e.g., marketing emails, non-essential cookies)

 


You may withdraw consent at any time.

 


 

 

4. How We Use Your Personal Data

 


We use your personal data for:


 

4.1. Service Delivery

 

 

  • Processing and fulfilling orders

  • Managing accounts and customer relationships

  • Handling returns, loyalty programs, and refunds

 


 

4.2. Personalisation & Analytics

 

 

  • Remembering your preferences

  • Recommending products

  • Improving website performance

 


 

4.3. Marketing & Advertising

 

 

  • Sending promotional emails (with your consent where required)

  • Retargeting and personalised advertising

  • Running campaigns with advertising partners

 


 

4.4. Security & Fraud Prevention

 

 

  • Securing the Site, payments, and user accounts

  • Detecting unauthorised or fraudulent activity

 


 

4.5. Compliance & Legal Obligations

 

 

  • Tax and accounting compliance

  • Responding to legal requests or disputes

 

 


 

 

5. How We Share Personal Data

 


We may disclose your personal data to:


 

5.1. Shopify (Platform Provider)

 


Our store is hosted on Shopify.

Shopify processes personal data to provide secure e-commerce, payments, analytics, and fraud detection.


In certain cases, Shopify acts as an independent data controller regarding cross-merchant analytics and advertising features.


Shopify’s own privacy practices apply:

You can review them via the Shopify Consumer Privacy Policy and Shopify Privacy Portal.


 

5.2. Service Providers

 


We share data with trusted partners such as:

 

  • IT and cloud providers

  • Payment processors

  • Shipping and logistics partners

  • Customer support tools

  • Analytics and marketing services

 


These parties act as processors under our instructions.


 

5.3. Advertising Partners

 


For targeted advertising, only where permitted and always in line with applicable laws.


 

5.4. Corporate Transactions

 


In case of a merger, sale, acquisition, or insolvency.


 

5.5. Legal Authorities

 


When required by law, court order, or regulatory request.


We do not sell your personal data.

 


 

 

6. International Transfers

 


While we operate from Belgium, certain processors—including Shopify—may transfer personal data outside the EEA.


When data is transferred internationally, we rely on:

 

  • European Commission Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Additional security measures

 


These mechanisms ensure your data remains protected.

 


 

 

7. Retention of Personal Data

 


We retain personal data only as long as necessary for:

 

  • Fulfilling orders and providing Services

  • Maintaining your account

  • Complying with Belgian legal obligations (e.g., 10-year accounting retention)

  • Resolving disputes or enforcing agreements

 


Once retention periods expire, data is deleted or anonymised.

 


 

 

8. Your Rights

 


Under GDPR and Belgian law, you have the following rights:

 

  • Right of access to your personal data

  • Right to rectification of inaccurate data

  • Right to erasure (“right to be forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object to processing, including marketing

  • Right to withdraw consent

 


We may request verification of your identity before acting on such requests.


You will not be disadvantaged for exercising your rights.

 


 

 

9. Cookies & Tracking Technologies

 


Our website uses cookies to ensure core functionality and enhance your shopping experience.


Categories include:

 

  • Essential cookies

  • Analytical cookies

  • Marketing cookies

 


Where required by law (e.g. EEA), non-essential cookies are used only with your consent.


A detailed cookie policy can be provided upon request.

 


 

 

10. Children’s Data

 


Our Services are not intended for individuals under the age of 18.

We do not knowingly collect data from minors.

If such data is discovered, it will be deleted promptly.

 


 

 

11. Security Measures

 


We implement appropriate technical and organisational measures, including:

 

  • Encrypted connections (HTTPS)

  • Secure payment processing via Shopify and payment partners

  • Access control and authentication

  • Continuous system monitoring

 


However, no online transmission is 100% secure.

 


 

 

12. Changes to This Policy

 


We may update this Privacy Policy to reflect changes in law or business operations.

Updates will be published on this page with a new “Last Updated” date.

Where legally required, you will be notified of material changes.

 


 

 

13. Contact Information

 


For questions, requests, or complaints regarding this Privacy Policy or data protection, contact us at:


ECH BV

Strabroekweg 30

3550 Heusden-Zolder

Belgium

Company Number / VAT: BE0726540391

Email: ech-dressage@hotmail.com

Website: https://equestriancenterhendrikx.com/


Complaints may also be filed with the Belgian Data Protection Authority:


Gegevensbeschermingsautoriteit (GBA)

Rue de la Presse 35

1000 Brussels

https://www.gegevensbeschermingsautoriteit.be