PRIVACY POLICY
Latest update: January 2026
About This Policy
When you use our website, shop or interact with us, you share some personal information with us. This Privacy Policy explains how we collect, use and protect your personal data in line with Belgian and European data protection laws (GDPR).
"We", "our", "us" is used in reference to Simona Todorova as a Belgian-registered company, operating also with the commercial name Monn's Atelier.
This policy aims to explain and help you understand the following:
- What personal data we collect
- Why we collect it and on what legal basis
- Who we share it with
- How long we keep it
- Your rights as a customer and/or visitor
For full details, please see the sections below.
1. Who We Are (Controller)
Company name: Simona Todorova
(a Belgian-registered company, operating also with the commercial name Monn's Atelier)
Registered office: Vlamingenstraat 53 bus 31, 8500 Kortrijk, Belgium
Company number: 1020.710.313
Contact email: monns.atelier@gmail.com
2. Scope of This Privacy Policy
This Privacy Policy applies to personal data processed when you:
- Visit and browse our website
- Purchase products online and/or in person at events/markets
- Contact us for customer support or inquiries
Our website and services are intended for business-to-consumer (B2C) transactions. We do not currently offer business-to-business (B2B) sales. We do not collect job applications at this time.
3. What Data We Collect
We may collect and process the following personal data:
- Identity details: First and last name
- Contact details: Delivery address, email address, phone number
- Payment information: Processed by Shopify Payments (online) or SumUp (in person). We do not store card details ourselves.
We do not collect sensitive personal data (e.g., health, religion, biometrics).
4. Purposes and Legal Bases
We process your personal data for the following purposes:
- Data Type: Name, address, contact details - Purpose: Fulfill customer orders and deliveries - Legal Basis: Contract (Art. 6(1)(b) GDPR)
- Data Type: Payment data - Purpose: Process payments (online & in-person) - Legal Basis: Contract; no storage by us
- Data Type: Contact details - Purpose: Handle customer inquiries/support - Legal Basis: Legitimate interests (to respond and resolve issues)
5. Third-Party Processors
We share your data with carefully selected third parties that help us operate:
- Shopify Inc. (Ottawa, Canada) – Website hosting, e-commerce platform, analytics, order management. Privacy: https://www.shopify.com/legal/privacy
- Shopify Payments / Stripe – Online payment processing.
- SumUp – In-person card payment processing. Privacy: https://www.sumup.com/en-gb/privacy/
- Intime B.V. (Netherlands) – Shipping and delivery provider. Privacy: https://intime.delivery/files/PrivacyStatement.pdf
- Google (Gmail) – Customer support emails.
6. International Data Transfers
- Shopify is headquartered in Canada, which benefits from an EU adequacy decision.
- Shopify and Stripe may also transfer data to the United States and other countries under Standard Contractual Clauses (SCCs).
- As a Belgian-registered company, we process your data in accordance with EU GDPR.
7. Data Retention
We keep data only as long as necessary:
- Order and payment records: 10 years, in line with Belgian tax and accounting law.
- Customer support messages: up to 3 years, based on standard corporate practice, kept for service history and dispute resolution.
- Customer accounts: Not applicable (we do not offer customer accounts).
- Newsletter/marketing data: Not applicable (no newsletter or marketing subscriptions offered currently).
8. Security Measures
We take appropriate technical and organizational measures to safeguard your personal data, including encryption of data in transit (e.g., HTTPS) and regular data backups.
9. Children’s Privacy
The products we offer are available for use to all customers. Our products and designs may appeal to customers of all ages, including children. However, purchases of our products both online and in-person at events/markets, must be made by an adult (parent/guardian).
Our website is not intended for children to interact with independently, particularly those under 13 years old, in line with Belgian digital consent requirements.
10. Your Rights
You have the following rights under GDPR:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Withdraw consent (where applicable)
- Lodge a complaint with the Belgian Data Protection Authority (GBA/APD)
For any case where you want to exercise your right regarding the way your data is handled according to the list mentioned above, please do not hesitate to contact us first. We aim to respond to all valid requests within one month, extendable by two months for complex requests.
11. Changes to This Privacy Policy
Simona Todorova reserves the right to update this privacy policy at any time, for any reason, including to reflect legal or business changes. The latest version will always be available on our website, with the update date noted at the top. Continued use of the website constitutes acceptance of this policy.
12. Contact
For any privacy-related questions, please contact us by filling out our contact form here and selecting the category "Privacy Inquiry" .
Alternatively, you can also contact us directly via email at monns.atelier@gmail.com, making sure you add "Privacy Inquiry" or similar wording as the subject of the email.