Privacy policy
Your privacy matters to us. This page explains which data we collect when you use our website, app or QR table ordering, why we do so, and what your rights are under the General Data Protection Regulation (GDPR).
Last updated: 01/10/20261Who is responsible?
The controller is the Be-Jack's branch you order from:
- Son Of Illyria vof (Be-Jack's Sint-Niklaas) – Houtbriel 30, 9100 Sint-Niklaas – Company number BE1000.003.682 – sn@bejacks.be – 03 770 70 80
- Targetbouw Bv (Be-Jack's Temse) – Pastoor Boelstraat 33, 9140 Temse – Company number BE1003.925.353 – temse@bejacks.be – 03 777 45 40
Questions? Email sn@bejacks.be.
2Which data?
- Ordering: name, phone, email, delivery address, order, chosen time and payment method.
- Account: email, password (encrypted), birthday (optional), addresses, favourites, allergies you select, points and discount codes.
- Payment: status and reference. We never receive card details.
- Delivery: while your order is on its way, the courier's location (not yours) and an estimated arrival time.
- Contact and reviews: your message or rating.
- Technical: IP address and logs for security, and cookies.
3Why and on what basis?
- Preparing and delivering your order – contract.
- Your account, points and personal discounts – contract.
- Invoicing and accounting – legal obligation.
- Security and fraud prevention – legitimate interest.
- Newsletter, offers and notifications – your consent, which you can withdraw at any time.
- One review request after an order – legitimate interest.
4Who do we share data with?
Only partners we need: our hosting provider, the payment provider (Mollie B.V., Netherlands), the email provider and the courier. Google Analytics and Meta only with your consent. We never sell data.
5Retention
- Orders and invoices: 7 years (accounting law).
- Account: until you delete it; inactive accounts after 3 years.
- Courier locations: max. 30 days.
- Newsletter: until you unsubscribe.
6Your rights
Access, correction, erasure, restriction, portability and objection. Much of this you can do yourself in My account → Settings; otherwise email us and we reply within 30 days. You may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels – www.dataprotectionauthority.be.
7Security
Encrypted connection (HTTPS), encrypted passwords, two-factor authentication for administrators and daily backups.