PRIVACY POLICY (GDPR-COMPLIANT)

Last updated: 11 December 2025

This Privacy Policy explains how No Headache SA collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (EU Regulation 2016/679 — GDPR) and applicable Belgian law.

By using this website, you agree to the terms of this Privacy Policy.

1. Data Controller

No Headache SA
500 Avenue Louise, 1050 Ixelles, Belgium
VAT: BE0430.126.506
Email: [email protected]
Phone: +32 (0)495 70 11 92

No Headache SA is responsible for processing personal data collected on this site.

2. Personal Data We Collect

We may collect the following categories of personal data:

2.1 Information you provide directly

• Name and surname

• Email address

• Postal address

• Phone number

• Payment or billing information (processed securely by payment providers)

• Preferences regarding artwork orders (size, framing, etc.)

2.2 Automatically collected data

• IP address

• Browser type and device information

• Website usage data (pages visited, session duration, etc.)

• Cookies (see Section 8)

2.3 Newsletter subscription

• Email address

• Consent to receive communications

3. Purpose of Data Processing

Your personal data is processed for the following legitimate purposes:

1 Processing and fulfilling your orders

2 Managing payments and invoicing

3 Shipping and delivery of artworks

4 Providing customer support and answering inquiries

5 Managing newsletter subscriptions and marketing communications (with consent)

6 Improving website performance and user experience

7 Fulfilling legal obligations (VAT, accounting, dispute resolution)

4. Legal Basis for Processing

We only process your personal data when legally permitted under GDPR:

• Performance of a contract (order, delivery, customer support)

• Your explicit consent (newsletter, cookies)

• Legitimate interest (website optimisation, fraud prevention)

• Legal obligation (tax and accounting records)

5. Data Sharing and Third Parties

Your data may be shared with trusted third parties solely for operational purposes:

• Payment providers (Stripe, PayPal, etc.)

• Printing and production partners (e.g., WhiteWall)

• Shipping carriers

• Email marketing services (e.g., Mailchimp, GoHighLevel)

• Website hosting providers

These partners act as data processors under GDPR and are contractually required to ensure appropriate data protection.

We never sell your personal data to third parties.

6. Data Retention

We keep your data only as long as necessary:

• Order & invoicing data: 10 years (legal requirement in Belgium)

• Customer support messages: 2 years

• Newsletter subscription: until you unsubscribe

• Analytics and cookies: according to cookie policy

• User accounts: until deletion request

7. Your Rights Under GDPR

You have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Delete your data ("right to be forgotten")

• Restrict processing

• Object to processing

• Withdraw consent at any time (e.g., newsletter)

• Data portability (receive your data in a readable format)

To exercise these rights, contact: [email protected].

You may also lodge a complaint with the Belgian Data Protection Authority (APD/GBA).

8. Cookies

This website uses cookies to:

• Improve user experience

• Enable website functionality

• Analyse website traffic

You may accept or refuse cookies when visiting the site.
For more details, please refer to the Cookie Policy (optional page available upon request).

9. Data Security

We take all reasonable technical and organisational measures to protect your data, including:

• Encrypted connections (HTTPS)

• Secure payment processing

• Restricted internal access

• Regular security monitoring

However, no system can guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy occasionally.
Any changes will be posted on this page with a new “Last updated” date.

11. Contact

For questions or GDPR requests:


[email protected]

+32 (0)495 70 11 92