YOUR DATA AT COLLECTOBOXEU.COM
Privacy Policy
We process personal data only where we have a valid legal basis to do so. We may process your personal data for the following purposes:
1. Who We Are
At CollectoBoxEU.com, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under applicable data protection legislation, including the General Data Protection Regulation (GDPR).
2. What Data We Process
Depending on how you use our website and services, we may process the following categories of personal data:
Orders & Webshop: name, billing and delivery address, email address, telephone number, order details, transaction information and information required to process and fulfil your order.
Customer Account: account information, login details and order history where you create a customer account.
Contact & Enquiries: name, email address, telephone number and any information you voluntarily provide when contacting us.
Newsletter & Marketing: email address and related subscription preferences where you choose to receive marketing communications from us.
Website & Analytics Data: IP address, browser and device information, website usage information, cookie identifiers and similar technical information, subject to your cookie preferences where required.
Payment Information: payment-related information necessary to process your transaction. Payment details may be processed directly by our payment service providers and are not necessarily stored by Collector Box.
We do not intentionally collect special categories of personal data through our webshop.
3. Purposes and Legal Basis for Processing
We process personal data only where we have a valid legal basis to do so. We may process your personal data for the following purposes:
Processing and fulfilling orders: necessary for the performance of a contract with you, including order confirmation, payment, delivery, returns and customer service.
Managing customer accounts: necessary to provide account-related services requested by you.
Responding to enquiries: based on our legitimate interest in communicating with customers and potential customers and providing customer support.
Accounting, tax and legal obligations: necessary to comply with applicable legal and regulatory obligations.
Website security and fraud prevention: based on our legitimate interest in protecting our website, business and customers.
Newsletter and direct marketing communications: based on your consent where consent is required by law. You may withdraw your consent at any time.
Analytics and non-essential cookies: based on your prior consent where required.
Where processing is based on our legitimate interests, we balance those interests against your rights and freedoms.
4. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and for as long as required under applicable law. In particular:
Order, invoice and transaction records are retained for the period required under applicable Belgian accounting, tax and commercial legislation.
Customer account data is retained for as long as your account remains active, unless longer retention is required for legal or contractual purposes.
Customer enquiries and correspondence are retained for as long as reasonably necessary to handle the enquiry and any related follow-up.
Newsletter and marketing data is retained until you unsubscribe or withdraw your consent, unless we are legally entitled or required to retain limited information demonstrating your previous consent or opt-out.
Cookie and analytics information is retained in accordance with the retention periods applicable to the relevant cookie or service, as further described in our Cookie Policy.
When personal data is no longer required, it will be deleted, anonymised or securely retained only where required by law.
5. Third-Party Sharing
We do not sell your personal data.
We may share personal data with trusted third parties where necessary to operate our business and provide our services. These may include:
Our website hosting and e-commerce platform, including Wix;
Payment service providers;
Shipping, courier and logistics providers;
IT, technical and website service providers;
Analytics and cookie service providers, subject to your consent where required;
Professional advisers such as accountants, legal advisers or insurers where necessary;
Public authorities, regulators or law enforcement bodies where disclosure is required by law.
These third parties may process personal data only to the extent necessary for the relevant purpose and are required to comply with applicable data protection obligations.
6. International Data Transfers
Some of our service providers may process or store personal data outside the European Economic Area (EEA).
Where personal data is transferred to a country outside the EEA, we take appropriate steps to ensure that the data continues to receive an adequate level of protection. Such transfers may be based on:
A European Commission adequacy decision;
Appropriate contractual safeguards, including Standard Contractual Clauses approved by the European Commission; or
Another lawful transfer mechanism recognised under applicable data protection legislation.
Where required, additional safeguards may be implemented to protect your personal data.
You may contact us if you would like further information about the safeguards applicable to a particular international transfer.
7. Your Rights
Under the GDPR, and subject to the conditions and limitations provided by law, you may have the right to:
Request access to the personal data we hold about you;
Request correction of inaccurate or incomplete personal data;
Request deletion of your personal data;
Request restriction of processing;
Object to certain processing of your personal data;
Receive certain personal data in a structured, commonly used and machine-readable format and request its transfer where the right to data portability applies;
Withdraw your consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of these rights, please contact: info@collectoboxeu.com
We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the competent supervisory authority, including the Belgian Data Protection Authority if applicable.
8. Cookies
Our website uses cookies and similar technologies for purposes such as website functionality, security, remembering preferences, analytics and, where applicable, marketing.
Strictly necessary cookies may be used without your consent where they are required for the operation of the website or to provide a service that you have expressly requested.
Non-essential cookies, including analytics or marketing cookies where applicable, are used only after obtaining your prior consent where required by law.
You can accept, reject or adjust your cookie preferences through our cookie consent tool. You may withdraw or modify your consent at any time.
For more information about the cookies used on our website, their purposes, providers and retention periods, please consult our Cookie Policy.
9. Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or misuse.
These measures may include access controls, secure systems, technical safeguards and appropriate organisational procedures.
However, no internet-based transmission or storage system can be guaranteed to be completely secure.
10. Automated Decision-Making
CollectoBoxEU.com does not use your personal data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
If this changes in the future, we will update this Privacy Policy and provide the information required under applicable data protection legislation.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing activities.
The most recent version will always be published on our website. Where appropriate, we may also notify users of significant changes.
12. Contact
For any questions, requests or concerns regarding this Privacy Policy or the way we process your personal data, please contact:
CollectoBoxEU.com / Fossils NH
Sint-Sebastiaanlaan 7
8600 Diksmuide
Belgium
Email: info@collectoboxeu.com
Fossils NH, enterprise number 0683.424.188, VAT number BE 0683.424.188
Last updated: June 15, 2026