Privacy Policy

Last updated: 20 August 2026

At Sarfy Creations, we respect your privacy and are committed to handling your personal information responsibly, securely and transparently.

This Privacy Policy explains how we collect, use, store and share personal data when you:

• visit sarfycreations.com;

• create a customer account;

• place an order;

• request a personalised or custom-made product;

• make a payment;

• arrange delivery;

• contact us;

• subscribe to marketing communications; or

• otherwise interact with Sarfy Creations.

Sarfy Creations processes personal data in accordance with applicable data-protection laws, including the General Data Protection Regulation (GDPR).

---

1. Who Is Responsible for Your Personal Data?

The data controller responsible for the personal information described in this Privacy Policy is:

Sarfy Creations
Bree
Belgium

Enterprise number: 1027.264.147
VAT number: BE 1027.264.147

Website: sarfycreations.com
Privacy & general enquiries: info@sarfycreations.com
Customer support: support@sarfycreations.com
Telephone: +32 492 980 072

For privacy-related questions or requests concerning your personal data, please contact:

info@sarfycreations.com

---

2. What Personal Data We Collect

The information we collect depends on how you interact with our website and services.

We only aim to collect information that is reasonably necessary for the purposes described in this Privacy Policy.

Identity Information

This may include:

• first name;

• last name;

• account username;

• company or business name, where provided; and

• other identification information necessary for an order or request.

Contact Information

This may include:

• email address;

• telephone number;

• billing address;

• delivery address;

• country;

• postal or ZIP code; and

• other contact information you provide.

Order Information

When you purchase from Sarfy Creations, we may process information including:

• order number;

• products purchased;

• quantities;

• prices;

• discounts;

• shipping method;

• delivery information;

• order status;

• order history;

• returns;

• exchanges;

• refunds; and

• related customer-service information.

---

3. Personalisation & Custom Order Information

If you purchase a personalised or custom-made product, we may collect the information required to create your order.

Depending on the product, this may include:

• names;

• dates;

• messages;

• custom wording;

• event information;

• personalised labels;

• photographs;

• artwork;

• logos;

• design files;

• colour or style choices; and

• other information or content supplied by you.

We use this information primarily to create and fulfil the personalised product you requested.

Please avoid submitting personal information that is unnecessary for your custom order.

If you provide personal information, photographs or other content relating to another person, you are responsible for ensuring that you have the appropriate authority or permission to provide that information to us for the requested purpose.

---

4. Customer Account Information

If you create an account on sarfycreations.com, we may process information such as:

• your name;

• email address;

• billing address;

• delivery address;

• telephone number;

• order history;

• saved account preferences; and

• account login information.

Passwords are not intended to be available to Sarfy Creations in readable form and should be securely processed by the website’s authentication system.

You are responsible for keeping your login credentials confidential.

---

5. Payment Information

Payments on sarfycreations.com are processed through third-party payment providers, including:

• Mollie

• Stripe

Depending on the payment method selected, these providers may process information such as:

• your name;

• billing details;

• payment method;

• transaction amount;

• card or bank information;

• transaction identifiers;

• payment status;

• device or technical information; and

• information required for authentication, fraud prevention or regulatory compliance.

Sarfy Creations does not ordinarily receive or store your complete debit or credit card number.

We may receive limited payment information from Mollie or Stripe, such as:

• whether payment was successful;

• transaction reference;

• amount paid;

• payment method;

• refund information; and

• information necessary to match the payment to your order.

Mollie and Stripe may process certain personal information under their own legal obligations and privacy policies.

---

6. Shipping & Delivery Information

Sarfy Creations uses Sendcloud to manage shipping, shipping labels, tracking and delivery services.

To fulfil an order, we may provide Sendcloud with information such as:

• customer name;

• recipient name;

• delivery address;

• email address;

• telephone number;

• parcel information;

• order reference; and

• information required for delivery.

Sendcloud may then make the necessary information available to the carrier responsible for delivering your parcel.

Depending on your destination and delivery method, carriers may include:

• bpost;

• Mondial Relay;

• DHL;

• PostNL;

• DPD; and

• other available international delivery partners.

These companies process personal information where necessary to transport, track and deliver your order.

---

7. Customer Service & Communications

If you contact us by:

• email;

• telephone;

• website contact form;

• customer-support form; or

• another communication channel,

we may process the information contained in your enquiry.

This may include:

• your name;

• email address;

• telephone number;

• order number;

• photographs;

• correspondence;

• complaint details;

• delivery information;

• return information; and

• other information you voluntarily provide.

We use this information to respond to your enquiry and provide customer support.

---

8. Returns, Refunds & Complaints

When you request a:

• return;

• withdrawal;

• refund;

• exchange;

• replacement;

• damaged-product claim; or

• complaint,

we may process information necessary to assess and resolve the request.

This may include:

• order details;

• your identity and contact information;

• reason for the request;

• photographs of a damaged or defective product;

• shipping information;

• return tracking information;

• payment information; and

• correspondence relating to the matter.

---

9. Information Collected When You Use Our Website

When you visit sarfycreations.com, certain technical information may be collected automatically.

This may include:

• IP address;

• device type;

• operating system;

• browser type;

• browser settings;

• date and time of access;

• pages visited;

• referring website;

• session information;

• security logs;

• cookie identifiers; and

• other technical information required to operate and protect the website.

Some of this information may be collected through cookies and similar technologies.

Please see our Cookie Policy for further information.

---

10. WooCommerce & WordPress

Our online store operates using WordPress and WooCommerce.

These technologies provide functionality including:

• product pages;

• shopping basket;

• customer accounts;

• checkout;

• order management;

• payment integration;

• customer communications; and

• other e-commerce functions.

Personal data entered through the store may therefore be processed through the WordPress/WooCommerce environment and related extensions or service providers necessary to operate the website.

---

11. Language & Translation Features

Sarfycreations.com may offer language-selection or website-translation functionality to make our content accessible to customers in different countries.

Translation or language tools may process limited technical information or remember your selected language.

Where third-party translation technology is used, information necessary to provide that service may also be processed by the relevant provider.

Any cookies or similar technologies associated with these features will be addressed in our Cookie Policy and cookie controls where applicable.

---

12. Marketing Communications

If you choose to subscribe to newsletters, promotions or other marketing communications, we may use information such as:

• your name;

• email address;

• marketing preferences; and

• information about your interaction with our communications where permitted.

Where consent is legally required, we will only send such marketing after obtaining the necessary consent.

You can unsubscribe from marketing emails at any time by:

• using the unsubscribe option provided in the message; or

• contacting info@sarfycreations.com.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications concerning an order you have placed.

---

13. Transactional Communications

If you place an order, we may send communications necessary to manage your purchase.

These may include:

• order confirmation;

• payment confirmation;

• order-status updates;

• shipping confirmation;

• tracking information;

• delivery notifications;

• custom-order questions;

• return or refund information; and

• customer-service messages.

These communications are part of providing the service you requested and are not treated as optional marketing communications.

---

14. Product Reviews

If product-review functionality is available and you submit a review, we may process:

• your name or chosen display name;

• rating;

• review text;

• submitted photographs where supported;

• email address; and

• technical information used to help prevent spam or misuse.

Information identified as public when submitting a review may be displayed publicly on the website.

Please do not include sensitive or unnecessary personal information in a public review.

---

15. Why We Process Your Personal Data

We process personal data only where we have an appropriate legal basis.

Depending on the activity, the legal basis may include:

Performance of a Contract

We process information where necessary to:

• process your order;

• receive payment;

• create personalised products;

• arrange delivery;

• communicate about your order;

• process returns;

• issue refunds; and

• provide requested customer services.

Legal Obligations

We may process or retain information where necessary to comply with obligations relating to:

• taxation;

• VAT;

• accounting;

• consumer protection;

• fraud prevention;

• regulatory requirements;

• legal claims; or

• other applicable laws.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

Examples may include:

• protecting the website against fraud and abuse;

• maintaining website security;

• preventing fraudulent transactions;

• improving customer service;

• managing business records;

• defending or establishing legal claims; and

• improving the operation of our store.

Consent

Where required, we may process personal information based on your consent.

This may apply to activities such as:

• certain marketing communications;

• non-essential cookies;

• analytics technologies; and

• certain advertising or tracking activities.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

---

16. How We Use Your Personal Data

We may use your personal information to:

• operate sarfycreations.com;

• create and manage customer accounts;

• process orders;

• create handmade and personalised products;

• process payments;

• detect or prevent fraudulent transactions;

• prepare and ship orders;

• provide tracking;

• communicate about purchases;

• provide customer support;

• process returns and refunds;

• resolve complaints;

• meet accounting and tax requirements;

• secure and maintain our website;

• remember website preferences;

• provide language functionality;

• send marketing where permitted;

• establish or defend legal claims; and

• comply with applicable law.

We do not use your information for purposes that are incompatible with the purposes for which it was collected unless permitted by law.

---

17. Who We Share Personal Data With

We do not sell your personal data.

However, operating an international online store requires us to share certain information with trusted service providers and other recipients where necessary.

These may include the categories described below.

Payment Providers

Including:

• Mollie

• Stripe

Information is shared or processed where necessary to:

• authorise payments;

• process transactions;

• issue refunds;

• prevent fraud; and

• comply with financial or regulatory requirements.

Shipping & Fulfilment Providers

Including:

• Sendcloud

and the carrier selected to deliver the order, which may include:

• bpost;

• Mondial Relay;

• DHL;

• PostNL;

• DPD; or

• another shipping provider.

Website & Technology Providers

This may include providers involved in:

• website hosting;

• WordPress;

• WooCommerce;

• website security;

• email delivery;

• backups;

• technical support;

• website translation;

• analytics, where enabled; and

• other technologies required to operate the store.

Professional Advisers

Where necessary, information may be provided to:

• accountants;

• bookkeepers;

• lawyers;

• insurers;

• tax advisers; or

• other professional advisers.

Authorities

We may disclose information where required or permitted by law to:

• tax authorities;

• courts;

• law-enforcement authorities;

• regulators;

• customs authorities; or

• other competent public authorities.

---

18. Service Providers & Their Own Responsibilities

Some third-party companies process personal data solely on our instructions.

Other providers may independently determine how certain information is processed because they have their own legal or regulatory obligations.

For example, payment providers, financial institutions and delivery carriers may process certain information as independent data controllers for activities such as:

• fraud prevention;

• payment regulation;

• financial compliance;

• delivery operations;

• security; and

• legal record keeping.

Where a third party acts as an independent controller, its own privacy policy will also apply to its processing.

---

19. International Data Transfers

Sarfy Creations is based in Belgium, but some of the technology and service providers used to operate our international business may process personal information in other countries.

This may include countries outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA and the destination does not benefit from an applicable adequacy decision, appropriate safeguards will be used where required by law.

These may include:

• European Commission Standard Contractual Clauses;

• an applicable adequacy decision;

• binding legal safeguards; or

• another transfer mechanism permitted by the GDPR.

---

20. How Long We Keep Personal Data

We do not intend to keep personal information for longer than necessary.

Retention periods depend on:

• why the information was collected;

• the nature of the information;

• contractual obligations;

• consumer-guarantee periods;

• tax and accounting requirements;

• fraud-prevention requirements;

• potential disputes; and

• other legal obligations.

Order & Accounting Records

Certain invoices, accounting records and supporting documents must be retained in accordance with Belgian tax and accounting requirements.

Relevant Belgian accounting and VAT documents may need to be retained for 10 years.

Customer Account Information

Customer-account information may be retained while the account remains active.

If an account is closed, some information associated with previous orders may still need to be retained to meet legal, accounting, tax, guarantee, fraud-prevention or dispute-resolution obligations.

Customer Service Records

Customer-support correspondence may be retained for a reasonable period after the enquiry has been resolved where necessary for:

• follow-up;

• quality control;

• dispute resolution; or

• legal purposes.

Marketing Information

Marketing information may be retained until you:

• unsubscribe;

• withdraw consent; or

• otherwise request that the relevant processing stop,

subject to retaining limited information where necessary to ensure that your opt-out preference continues to be respected.

Customisation Files

Personalisation files, photographs, artwork and other customer-provided materials will only be retained for as long as reasonably necessary for:

• producing the order;

• handling customer-service matters;

• managing potential disputes; or

• fulfilling another legitimate or legal requirement.

We do not intend to keep customisation material indefinitely simply because it was supplied with an order.

---

21. Cookies & Similar Technologies

Sarfycreations.com uses cookies and similar technologies.

Some cookies are necessary for functions such as:

• shopping basket;

• checkout;

• account login;

• security;

• payment;

• language preferences; and

• cookie preferences.

Other technologies may be used for:

• analytics;

• performance measurement; or

• marketing,

where enabled and legally permitted.

Where prior consent is required for a non-essential cookie or similar technology, it will not be activated until the appropriate consent has been obtained.

For full details, please see our Cookie Policy and the cookie settings available on the website.

---

22. Data Security

We take reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;

• unauthorised disclosure;

• alteration;

• loss;

• destruction;

• misuse; and

• other unlawful processing.

Measures may include, where appropriate:

• encrypted website connections;

• access controls;

• secure account authentication;

• restricted administrative access;

• website security measures;

• backups;

• software updates; and

• security controls provided by our payment, hosting and technology partners.

No website, online transmission or electronic-storage system can be guaranteed to be completely secure.

---

23. Data Breaches

If a personal-data breach occurs, we will assess the incident and take appropriate action in accordance with applicable data-protection law.

Where legally required, this may include notifying:

• the competent data-protection authority; and/or

• affected individuals.

---

24. Your GDPR Rights

Subject to the conditions and exceptions provided by law, you may have the following rights regarding your personal data.

Right to Be Informed

You have the right to receive clear information about how your personal data is collected and used.

Right of Access

You may ask us whether we process personal information about you and request access to that information.

Right to Rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to Erasure

In certain circumstances, you may ask us to delete personal information.

This right is not absolute. We may need to retain information where required by law or where another lawful basis permits continued retention.

Right to Restriction

In certain circumstances, you may ask us to restrict how your personal information is processed.

Right to Data Portability

Where applicable, you may request certain personal information you provided to us in a structured, commonly used and machine-readable format.

Right to Object

You may have the right to object to processing based on legitimate interests.

You have the right to object to the use of your personal information for direct marketing.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

---

25. How to Exercise Your Privacy Rights

To exercise a data-protection right, please contact:

info@sarfycreations.com

Please clearly explain:

• who you are;

• the right you wish to exercise; and

• any information that will help us locate the relevant data.

We may request additional information where reasonably necessary to verify your identity and protect your information from unauthorised disclosure.

We will respond without undue delay and generally within one month, as required by the GDPR.

In certain legally permitted circumstances, this period may be extended. If that happens, we will inform you.

Data-protection requests are generally handled free of charge.

A reasonable fee may be charged, or a request may be refused, where permitted by law if a request is manifestly unfounded or excessive.

---

26. Complaints About Personal Data

If you believe that we have not handled your personal information properly, we encourage you to contact us first so that we can investigate.

Email: info@sarfycreations.com

You also have the right to lodge a complaint with a competent supervisory authority.

For Sarfy Creations in Belgium, the relevant authority is:

Belgian Data Protection Authority
Gegevensbeschermingsautoriteit / Autorité de protection des données

You may also have the right to contact the supervisory authority in the EU or EEA country where you live, work or believe an infringement occurred.

---

27. Automated Fraud & Payment Checks

Our payment providers and financial partners may use automated systems to help:

• authenticate payments;

• detect suspicious transactions;

• prevent fraud;

• assess transaction risk; and

• comply with financial regulations.

These processes may involve information provided during checkout and technical information relating to the transaction.

Where Mollie, Stripe, a bank or another payment provider performs these activities independently, its own privacy information and legal obligations apply.

Sarfy Creations does not ordinarily make decisions producing legal or similarly significant effects about customers solely through its own automated profiling system.

---

28. Children’s Privacy

Sarfycreations.com is an online shop intended for customers capable of entering into a purchase contract or acting with the involvement of a parent or legal guardian where required.

Our services are not designed for the purpose of knowingly collecting unnecessary personal data from children.

If you believe a child has submitted personal information to us inappropriately, please contact:

info@sarfycreations.com

so that we can assess the situation and take appropriate action.

---

29. Third-Party Links

Our website may contain links to external websites or services.

Once you leave sarfycreations.com, the privacy practices of the external website or service are controlled by that third party.

We encourage you to review the privacy information provided by any external service you use.

---

30. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our website;

• products and services;

• payment systems;

• shipping services;

• technology providers;

• business operations; or

• legal requirements.

When the policy is materially updated, the revised version will be published on sarfycreations.com with a new Last updated date.

We recommend reviewing this page periodically.

---

31. Contact Us

For questions concerning this Privacy Policy or how Sarfy Creations processes personal data, please contact:

Privacy & General Enquiries
info@sarfycreations.com

Customer & Order Support
support@sarfycreations.com

Telephone
+32 492 980 072

Customer Service Hours

Monday–Friday: 09:00–17:00
Saturday–Sunday: 09:00–14:00

---

Sarfy Creations
Bree
Belgium

Enterprise number: 1027.264.147
VAT number: BE 1027.264.147
Website: sarfycreations.com