Privacy policy

Last updated: 3 October 2026

We only collect what we need to make and deliver your order, we don't sell your data, and we don't use tracking or advertising cookies. Here's the detail.

Who is responsible

BENJA!, Jana Vander Aerschot (sole trader), Bennekensstraat 12, 2430 Eindhout, Belgium, enterprise number 1041.374.875. For anything about your data, e-mail support@benjaprints.be.

What we collect and why

  • Your order: name, shipping and billing address, e-mail address, phone number if you give it, and what you ordered (including your box builds). We need this to make, ship and support your order (performance of the contract).
  • Payment: whether and how you paid. Your card or bank details go straight to our payment provider Stripe; we never see or store them.
  • Your account, if you create one: your name, e-mail address and password (stored encrypted), so you can see your orders (your consent, which you can withdraw by deleting your account).
  • Your messages: e-mails you send us, to answer them.
  • Accounting: order and payment records we're legally required to keep (legal obligation).

We don't use your data for advertising, don't send newsletters without asking, and don't sell or rent your data to anyone.

Who we share it with

Only with companies that help us run the shop, and only what they need for that task:

  • Stripe (payments), Ireland, with transfers to the US under the EU-US Data Privacy Framework.
  • OVH (the server the shop runs on), France.
  • Backblaze (encrypted backups), data centre in the EU.
  • Resend (sending order e-mails) and ImprovMX (forwarding e-mails sent to us), which may process data in the US under the EU-US Data Privacy Framework or the EU's standard contractual clauses.
  • The carrier delivering your parcel: your name, address and, where needed, e-mail or phone number for delivery updates.

We may also have to share data when the law requires it, for example with the tax authorities.

How long we keep it

  • Orders and invoices: as long as Belgian accounting and tax law requires (up to 10 years).
  • Your account: until you delete it or ask us to.
  • E-mails with questions: up to 2 years after the question was handled.
  • Backups: up to 30 days, after which they're overwritten.

Cookies and local storage

We only use what the shop needs to work, so we don't ask for cookie consent:

  • Cart (_medusa_cart_id): remembers your cart for 30 days after your last visit.
  • Shop settings (_medusa_cache_id): keeps the shop fast, for 1 day.
  • Login (_medusa_jwt, and _medusa_pending_customer while you create an account): only when you use an account.
  • Language (_medusa_locale): remembers the language you picked, if you change it.
  • Stripe: during payment, Stripe sets cookies to prevent fraud.
  • The box builder stores builds you save for later in your own browser (local storage). They never leave your device.

Your rights

You can ask us to see, correct, delete or receive a copy of your data, to limit how we use it, or object to its use. Just e-mail support@benjaprints.be; we answer within a month. Some data we must keep for the law (such as invoices), even if you ask us to delete it.

Think we're not handling your data properly? Please tell us first. You can also file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

Security

The shop only works over a secure (HTTPS) connection, passwords are stored encrypted, and only we have access to the shop's data. See also our terms of sale.