Privacy policy

Privacy Policy Bella Belts LLC

Table of Contents:

1. Introduction
2. The Data We Process
3. General Purpose of Processing and Legal Basis
4. Sharing with Third Parties
5. Cooperation in Tax and Criminal Investigations
6. Retention Periods
7. Your Rights
8. Security Measures
9. Cookies
10. Changes to the Privacy Statement
11. Complaints
12. Questions and Contact Information

Article 1 – Introduction
At www.bellabelts.com, we care deeply about your privacy. We therefore handle the data we receive from or about you with great care. This privacy statement describes what data we collect from you, disclose, store, and under what conditions we may share this data with third parties. We also explain how we store your data, how we protect your data from misuse, what security techniques we use, who can access the data, and what rights you have regarding the personal data you provide to us.

For the privacy statements of third parties, as well as affiliated companies, please refer to the relevant websites. Bella Belts is not responsible for the processing on these websites.

Bella Belts is located at Bella Belts Limited, Unit 1603, 16/F The L. Plaza, 367-375 Queen's RD Central, Sheung Wan, Hong Kong is responsible for the processing and storage of your personal data. If you have any questions about our privacy statement, you can contact our privacy contact person, whose contact details are at the end of this privacy statement.

Article 2 – The Data We Process
Performance of Contract For the performance of the contract you enter into with us, we need your first and last name, home or other physical address, email address, telephone number, and payment details. If necessary for the performance of the contract to which you are a party, we pass this data on to third parties such as payment services and delivery services.

Your email address is also used to approach you for a review after you have received the products you ordered from us.

Visits to Bella Belts and (Direct) Marketing When you visit Bella Belts, we store your IP address via the servers and with Shopify's webshop software. We do this by placing cookies. In some countries, including countries in the European Economic Area, this data may be considered personally identifiable information under privacy laws. This data is collected and stored to track the number of visits, the average time you (as a visitor) spend on Bella Belts, the pages viewed, and other usage data. We use this data to measure the use of our website and to improve the content of our website. We may also collect information that we obtain from third parties, including information from our partners and social media sites according to your settings on such websites. For more information on the personal data we process when visiting Bella Belts, please refer to Article 9 – Cookies, in this privacy statement.

Social Media Bella Belts can be found on various social media such as Facebook and Instagram. We may use your personal data when you use the features on these websites and/or apps, such as a "Facebook Like". If you use such a feature, we may obtain your personal data through our social media in question.

Additionally, buttons are included on Bella Belts to promote the web pages of our social media accounts. These buttons work through a code that comes from the social media platform. When you click on a button, this code places cookies, allowing the social media platform to receive your personal data. Think, for example, of your IP address. We refer to the privacy statements of the respective social media platforms which explain what personal data they collect.

Contact Form You can contact us via the contact form on the Bella Belts website. To serve you as well as possible, we ask you to fill in your name, email address, telephone number, and your message for us.

Newsletter Via our website, you can subscribe to our newsletter. Through the newsletter, we inform you about current offers, interesting specials, and news. To send our newsletter, we need your email address and your explicitly given consent.

In some cases, we only process personal data to the extent that you have given consent. This is the case, for example, when sending newsletters and other communications or participating in available interactive messages online. The consent you have given can be withdrawn at any time. For more information on how you can withdraw given consent, please refer to Article 7 - Your Rights, in this privacy statement.

Application Process Bella Belts collects and processes personal data of applicants. We collect, among other things, the name, gender, contact details, motivation letters, and resumes. These data are relevant for the application process and will be deleted no later than four weeks after the end of the procedure. If you give permission, Bella Belts can store your personal data longer in its administration so that contact can be made again in the future. In that case, Bella Belts will not keep your contact details longer than one year.

Contractors Bella Belts also processes personal data of contractors, including self-employed individuals, in the context of the contract for services. If we enter into a contract for services with a contractor via UpWork, further information on the processing of personal data can be found in the agreement that the contractor has entered into with UpWork.

Article 3 - General Purpose of Processing and Legal Basis
Bella Belts uses your data exclusively for our services, unless we indicate otherwise during collection. That is, the purpose of processing is always directly related to the assignment you provide. We do not use your data for purposes other than those mentioned above, do not pass them on, and do not provide them to parties, except as indicated below or if we are legally required to share the data with third parties. If you share data with us and we use this data to - other than at your request - contact you later, we will explicitly ask for your permission. Your data will not be shared with third parties, other than to meet accounting and other administrative obligations. We only process personal data if there is a legal basis for doing so. We process your personal data: Normally, we will only collect your personal data (i) when we need it to perform the agreement entered into, for example, when you purchase our products, (ii) when processing is in our legitimate interest and does not outweigh your rights, for example, to tailor our marketing to your wishes, or (iii) when we have your consent.

In some cases, we may also have a legal obligation to collect personal data from you or may need the personal data in another way to protect your vital interests or those of others.

If we collect and use your personal data based on our legitimate interests (or those of third parties), these interests generally relate to: managing our webshop and communicating with you as far as necessary to deliver our services, answering questions, improving our webshop, conducting marketing, or in view of detecting or preventing illegal activities. We may also have other legitimate interests; in that case, we will let you know what those legitimate interests are. If we collect sensitive information from you, such as special personal data that pertains to your health, or other data for which your consent is required, we will ask for your explicit consent to process this data. This consent can be withdrawn at any time. For more information on how you can withdraw consent, please refer to Article 7 – Your Rights, in this privacy statement.

Article 4 – Sharing with Third Parties
Bella Belts shares your personal data with carefully selected third parties if this is necessary for the performance of the agreement and/or to comply with any legal obligation. With companies that process your data on our behalf, we enter into a processing agreement to ensure the same level of security and confidentiality of your data. Bella Belts remains responsible for these processing operations. Bella Belts may transfer your personal data to processors or parties located in countries outside the European Economic Area (EEA). Outside the EEA, we will only transfer your personal data if there is an appropriate level of protection. Bella Belts uses model contracts approved by the European Commission for this purpose.

Shopify Our web store is developed with Shopify software. Personal data that you provide for our services are shared with this party. Shopify has access to your data to provide us (technical) support, they will never use your data for any other purpose. Shopify is required to take appropriate security measures based on the agreement we have with them. These security measures include the application of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information regarding your use of the software, no personal data is collected and/or stored. Shopify takes into account the applicable legal retention periods for (personal) data. We also send our newsletters and transactional emails via Shopify's web store software. All confirmation emails that you receive from our website and web forms are also sent via Shopify's servers.

At the bottom of every email that is automated via our website, you will see the ‘unsubscribe’ link. If you click on this, you will no longer receive emails from our website. This can severely reduce the functionality of our website. For further information on how Shopify processes, secures, and stores personal data, please refer to Shopify's privacy statement.

Day One For processing orders and delivering the products you have ordered, we engage Day One. Day One ensures that the products are delivered to an address specified by you in accordance with the order.

Google - Gmail We use the services of Google-Gmail for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. Gmail does not have access to our mailbox, and we treat all our email traffic confidentially.

For further information on how

Google processes, secures, and stores personal data, please refer to Google's privacy statement.

Mollie and PayPal - Payment Platform
For handling payments in our web store, we use the platform of Mollie. Mollie processes your name, address, place of residence details, and payment details such as your bank account number. In the case of an application for a deferred payment (credit facility), Mollie shares personal data and information regarding your financial position with credit rating agencies. All the above-mentioned safeguards regarding the protection of your personal data also apply to the parts of Mollie's services for which they engage third parties.

Since Mollie processes personal data at our request, Mollie is designated as a processor. For further information on how Mollie processes, secures, and stores personal data, please refer to Mollie's privacy statement.

Article 5 - Cooperation in Tax and Criminal Investigations
In certain cases, Bella Belts may be required by law to share your data in connection with tax or criminal investigations by governmental authorities. In such a case, we are obliged to share your data, but we will resist within the limits that the law allows us.

Article 6 - Retention Periods
We do not keep your personal data longer than necessary unless there is a legal obligation on us to keep your personal data longer. We keep your data as long as you are our customer. This means we keep your customer profile until you indicate that you no longer wish to use our services. Based on applicable administrative obligations, we must keep invoices with your (personal) data for seven years. However, employees no longer have access to your customer profile and documents that we have produced as a result of your assignment during this period.

As previously mentioned, you can create an account on Bella Belts. Inactive accounts will be deleted after a period of two years. If you have provided us with your email address (possibly via your account) so that we can keep you informed of our services, we will still retain your data for this purpose.

Article 7 - Your Rights
Under applicable Dutch and European legislation, you as the data subject have certain rights regarding the personal data that are processed by or on behalf of us. We explain below what rights these are and how you can invoke these rights. To prevent misuse, we generally send copies and copies of your data only to your email address already known to us. In the case that you wish to receive the data at a different email address or for example by post, we will ask you to legitimize. We keep an administration of handled requests; in the case of a forget request, we administer anonymized data. All copies and copies of data you receive in the machine-readable data format that we use within our systems.

Right of access You always have the right to view the data that we (let) process that relate to your person or that can be traced back to you. You can submit a request to that effect to our contact person for privacy matters. You will receive a response to your request within four weeks. If we need more time, we will let you know within that period. If your request is granted, we will send you a copy of all data with an overview of the processors who have this data under their control, stating the category under which we have stored this data.

Right to rectification You always have the right to have the data that we (let) process that relate to your person or that can be traced back to you, adjusted. You can submit a request to that effect to our contact person for privacy matters. You will receive a response to your request within four weeks. If we need more time, we will let you know within that period. If your request is granted, we will send you confirmation at the email address known to us that the data has been adjusted.

Right to erasure You can request us to erase your personal data from our systems in one or more of the following cases:

• the personal data are no longer necessary for the purposes for which we processed them;
• you withdraw your consent for (further) processing and there is no other basis for processing;
• you make a reasoned objection and there are no compelling reasons not to honor the objection;
• the personal data have been processed unlawfully by us;
• we must erase your personal data based on a legal obligation;
• we have collected the data through mobile telephony or internet services. You can submit a request for data erasure to our contact person for privacy matters. You will receive a response to your request within four weeks. If we need more time, we will let you know within that period. If your request is granted, we will send you confirmation at the email address known to us that the data has been adjusted.

Right to restriction of processing You always have the right to restrict the data that we (let) process that relate to your person or that can be traced back to you. You can submit a request to that effect to our contact person for privacy matters. You will receive a response to your request within four weeks. If we need more time, we will let you know within that period. If your request is granted, we will send you confirmation at the email address known to us that the data will be restricted as long as there is a reason for it.

Right to data portability You always have the right to have the data that we (let) process and that relate to your person or that can be traced back to you, carried out by another party. You can submit a request to that effect to our contact person for privacy matters. You will receive a response to your request within four weeks. If we need more time, we will let you know within that period. If your request is granted, we will send the personal data we have collected to the third party you have indicated, in a structured, common, and machine-readable form. In all likelihood, we can no longer continue the service in such a case because the secure linking of data files can no longer be guaranteed.

Right of objection and other rights You have the right in certain cases to object to the processing of your personal data by or on behalf of Bella Belts. If you object, we will immediately stop processing the data pending the handling of your objection. If your objection is justified, we will make copies and/or copies of data that we (let) process available to you and then permanently stop processing it. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that we already have given shape to this right. If you believe this is the case, please contact our contact person for privacy matters.

Article 8 – Security Measures
Bella Belts has technical and organizational security measures to protect personal data. Measures we use in various circumstances to protect the data we hold from loss, misuse, and alteration include: monitoring and logging, and encryption, secure access points to our servers (Tier III, ISO 27001, and PCI-DSS), vulnerability scans, and limited access rights for employees. However, no system is perfect or can guarantee that unauthorized access or theft of data is excluded. Despite the fact that Bella Belts has security measures to protect personal data, we always advise our visitors and customers to take measures themselves to protect their personal privacy (i.e., keep access codes and/or pin codes secret).

Article 9 - Cookies
We collect data for research to get a better understanding of our customers, so we can tailor our services to them. To this end, we use functional, analytical, and tracking “cookies” (text files placed on your computer) to help analyze how users use the site. The information generated by a cookie about your use of the website may be transferred to secure servers of Bella Belts or that of a third party. Placing functional and analytical cookies does not require permission. To the extent that we use tracking cookies, we do so after obtaining your consent. With tracking cookies, we can track information about how you use the website. From the information about your website visits, we can deduce your preferences and interests. Based on that, we can make you personalized offers.

If you do not want our website to store cookies on your computer, you can indicate this in the cookie notice that you see when you first visit our website. If you give consent for the placement of cookies, we will ensure that only those cookies are placed for which you have actually given consent. If you want to opt out of placing these cookies at a later time, you can adjust your browser settings accordingly.

Cookies are also placed on our website by third parties. These are, for example, advertisers and/or social media companies. We cannot guarantee that these third parties handle your personal data in a reliable or secure way. We advise you to read the privacy statements of the mentioned third parties before using their websites.

We also use pixels from social media platforms. These pixels ensure that we can show targeted advertisements to visitors to our websites on social media platforms and measure results. At your first visit to our website, we have already informed you about these cookies and asked for your consent for their placement. We advise you to read the privacy statements of the mentioned third parties social media platforms before using these websites. On the following page, there is an overview of the cookies: https://www.shopify.com/legal/cookies. The already placed cookies can be deleted via your own browser settings.

Article 10 – Changes to the Privacy Statement
We reserve the right to change our privacy policy statement at any time. However, you will always find the most recent version on this page. If the new privacy statement affects the way we already process data related to you, we will notify you by email.

Article 11 – Complaints
If you have a complaint about the use of your personal data, we would like to point you to the complaints procedure at the Dutch Data Protection Authority. This authority is authorized to hear the complaint.

Article 12 – Questions and Contact Information
Do you have any questions? You can submit them to us via the contact details below.

Bella Belts, January 2026 version