Privacy Policy

1. Data controller

Aliaj Interior, operating under the brand name SDB Studio, is the controller of your personal data. Registered office: Houtweg 54, 1140 Evere, Belgium. Enterprise & VAT number: BE 1001.57.25.10. Contact: hello@sdbstudio.be.

2. What data we collect

• Order data — name, delivery and billing address, email, phone, and your full vanity configuration.
• Professional data — company name and VAT number when ordering as a business.
• Contact & quote data — name, email, phone and the content of your message or saved design.
• Payment data — handled entirely by our payment provider Mollie. We never receive or store your card details.
• Technical data — strictly functional cookies / local storage used to remember your basket and design. No advertising or third-party tracking.

3. Why we process it & lawful basis

• To fulfil your order — performance of a contract (Art. 6(1)(b) GDPR).
• To answer inquiries and prepare quotes — our legitimate interest and your request (Art. 6(1)(b) and (f)).
• To meet accounting and tax obligations — legal obligation (Art. 6(1)(c)).
• To send occasional product updates — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. How long we keep it

Order and invoicing data is kept for the legally required period (7 years in Belgium). Contact and quote inquiries are deleted after 24 months of inactivity. Functional cookies expire as described in section 8.

5. Who we share it with

We share data only with processors necessary to deliver your order: Mollie (payment processing), our delivery partner (name and address only), our hosting provider, and — where you consent — our email provider. Each acts under a data-processing agreement. We never sell your personal data.

6. International transfers

Your data is processed within the European Economic Area wherever possible. If any processor operates outside the EEA, transfers are protected by adequacy decisions or Standard Contractual Clauses.

7. Data security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access, and payment handling delegated to PCI-DSS-compliant Mollie.

8. Cookies & local storage

This site uses only functional cookies and browser local storage necessary for the configurator, saved designs, and checkout to work. No advertising, profiling, or third-party tracking cookies are placed. You can clear them any time via your browser, and you control consent through our cookie banner.

9. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erase your data (“right to be forgotten”), subject to legal retention;
• Restrict or object to processing;
• Data portability;
• Withdraw consent at any time.

10. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you.

11. Children

Our services are intended for adults; we do not knowingly collect data from children under 16.

12. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The “last updated” date above indicates the latest revision. To exercise any right, contact hello@sdbstudio.be. You may also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

13. Account and sign-in data

When you create an account, we process your email address, an encrypted password and your name. If you sign in with Google, we receive your name, email address and profile identifier from Google to create or access your account — we never receive your Google password. You can delete your account at any time by contacting us.

14. Saved designs, basket and configurator data

To let you save and resume your vanity designs, your configuration and basket are stored locally in your browser and, if you are logged in, linked to your account. This data is used solely to provide the configurator and checkout, and is never sold or shared for advertising.

15. Marketing communications

We only send commercial emails (such as product news or offers) if you have given consent. Every marketing email contains an unsubscribe link, and you can withdraw consent at any time without affecting the lawfulness of earlier processing. Transactional emails — order confirmations and quotes you request — are not marketing and are sent to fulfil your request.

16. Website analytics and measurement

We may use privacy-friendly, aggregated analytics to understand how the site is used and to improve it. Where analytics rely on non-essential cookies, they are only activated with your consent via the cookie banner. We do not build advertising profiles about you.

17. Cookie consent and withdrawal

You control non-essential cookies through our cookie banner and can change or withdraw your choice at any time by reopening the banner or clearing cookies in your browser. Essential, functional storage required for the configurator, basket and checkout cannot be disabled without breaking those features.

18. Personal data breaches

We maintain measures to detect and respond to data breaches. In the event of a breach likely to result in a high risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours where required, and inform you without undue delay.

19. Links to third-party websites

Our site may link to third-party websites (for example, to order a finish sample). We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing any personal data.

20. Delivery and installation partners

To deliver your order, we share the minimum necessary data (name, delivery address and phone number) with our carrier or delivery partner. These partners process the data solely to perform the delivery and are bound by confidentiality and data-processing obligations.

21. Keeping your data accurate

You are responsible for providing accurate, up-to-date information, in particular your delivery and invoicing details. You can review and update your account information at any time, or contact us to correct any data we hold about you.

22. Contacting us and lodging a complaint

For any question or to exercise your rights, contact us at hello@sdbstudio.be; we aim to respond within one month. If you believe your data is processed unlawfully, you may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.