Privacy Policy
1 May 2026
24 May 2026
Data Controller
BEEShop is operated from Belgium. For all matters relating to data protection, you may contact us at:
Email: privacy@beeshop.app
This Privacy Policy is governed by the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
Data We Collect
| Category | Data | Source |
|---|---|---|
| Account data | Email address, hashed password (Argon2id) | Provided by you at registration |
| Profile data | Display name | Provided by you |
| Usage data | Shopping lists, list items, preferences | Generated through your use |
| Technical data | IP address, browser type, device information | Collected automatically |
| Analytics data | Page views, interactions (anonymised) | Google Analytics 4 (only with consent) |
Purposes and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Service | Art. 6(1)(b) — Performance of contract |
| Account authentication and security | Art. 6(1)(b) |
| Responding to enquiries | Art. 6(1)(b) |
| Analytics and service improvement | Art. 6(1)(a) — Consent |
| Legal compliance | Art. 6(1)(c) — Legal obligation |
| Protecting legitimate interests | Art. 6(1)(f) |
Data Recipients
- Hosting: Hetzner Online GmbH (Germany)
- Analytics: Google LLC (Google Analytics 4, only with your consent)
We do not sell your data. We do not share your data with advertisers.
International Transfers
Your data is stored within the European Economic Area (EEA) on Hetzner servers in Germany. Any transfers of personal data outside the EEA are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
Data Retention
| Data type | Retention period |
|---|---|
| Account data | Until you delete your account |
| Usage data | Until you delete your account |
| Technical logs | Maximum 90 days |
| Analytics data | 14 months |
Upon account deletion, all personal data is permanently erased within 30 days.
Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15) — obtain a copy of your personal data
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure (Art. 17) — request deletion of your data
- Right to restriction (Art. 18) — limit how we process your data
- Right to data portability (Art. 20) — receive your data in a structured format
- Right to object (Art. 21) — object to processing based on legitimate interests
- Right to withdraw consent (Art. 7(3)) — withdraw consent at any time
To exercise any of these rights, contact us at privacy@beeshop.app. We will respond within 30 days.
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Argon2id password hashing
- Server-side sessions with cryptographically random IDs
- HTTPS encryption for all data in transit
- Regular security updates
- Access controls limiting data access to authorised personnel
Data Provision
Providing your email address and password is necessary to create an account and use the Service. Without this data, we cannot provide you with an account.
Consent for analytics cookies is entirely optional and does not affect your ability to use the Service.
Children’s Privacy
The Service is not intended for children under the age of 16, in accordance with Article 8 of the GDPR. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.
Right to Lodge a Complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA):
Autorité de protection des données / Gegevensbeschermingsautoriteit Rue de la Presse 35, 1000 Brussels, Belgium Email: contact@apd-gba.be Website: www.dataprotectionauthority.be
Contact
For any questions regarding this Privacy Policy or your personal data, please contact us at:
Email: privacy@beeshop.app