Privacy Policy
Last updated: 11 January 2026
1. Introduction
BICRAW Consulting BV ("we", "us", or "our"), operating as SmallShop, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our e-commerce platform service.
Company Details:
BICRAW Consulting BV
Bampslaan 1/2, 3500 Hasselt, Belgium
Enterprise Number: 0658.917.436
2. Information We Collect
We collect information that you provide directly to us:
- Account Information: Name, email address, password, and business details when you create an account.
- Shop Information: Business name, products, pricing, images, and other content you upload to your shop.
- Payment Information: Payment details are processed securely through Stripe. We do not store your full payment card details.
- Communications: Information you provide when contacting us for support.
We automatically collect:
- Usage Data: Information about how you use our service, including pages visited and features used.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP address, access times, and referring URLs.
3. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments and questions
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and fraud
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on:
- Contract: Processing necessary to provide our services to you.
- Legitimate Interest: Processing for our legitimate business interests, such as improving our services.
- Consent: Where you have given explicit consent for specific processing activities.
- Legal Obligation: Processing required to comply with applicable laws.
5. Data Sharing
We may share your information with:
- Service Providers: Third-party vendors who assist in providing our services (e.g., Stripe for payments, Clerk for authentication, cloud hosting providers).
- Legal Requirements: When required by law or to protect our rights.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
We do not sell your personal information to third parties.
6. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to certain processing activities.
- Restriction: Request limitation of processing.
To exercise these rights, contact us at the email address below.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.
8. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
9. Cookies
We use essential cookies required for the operation of our service (authentication, security). We do not use advertising or tracking cookies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
BICRAW Consulting BV
Bampslaan 1/2, 3500 Hasselt, Belgium
Email: privacy@smallshop.be