Privacy Policy & Data Protection
Applicables à compter du 21/10/2026
1. Data controller
Your data is processed by Ilan TCG Belgium, a sole trader registered in Belgium under company number 0792.206.423, Rue de Fragnée 67/77, 4000 Liège.
If you have any questions about your data: [email protected]
2. Cookie Policy
Cookies are small text files stored in your browser when you visit our website. They enable the shop to function, secure your session and remember your choices.
We use various types of cookies:
- Operation and security (essential): logging into your account, your basket, payment, and protecting the website against bots and fraud. Without them, the shop cannot function.
Examples: WordPress and WooCommerce session cookies, Cloudflare security cookies, __stripe_mid and __stripe_sid (Stripe payments) - Consent (essential): remember your choices in the cookie banner.
Examples: ilan_cookie_consent, wp_consent_functional, wp_consent_preferences, wp_consent_statistics, wp_consent_marketing - Preferences (optional): retain your display settings, such as the language.
- Statistics (optional): measure website traffic in order to improve the site. They are only stored with your consent.
- Marketing (optional): are used to measure and personalise our campaigns. They are only stored with your consent.
Some services integrated into the website may also receive your IP address in order to function: font display (Adobe Fonts), address suggestion (Google Maps), payment (Stripe, Klarna, Alma).
You can change your preferences at any time via the consent banner displayed on the website or via your browser settings.
3. Privacy Policy
3.1 Collection and use of personal data
When you create an account or place an order on our website, we collect certain information about you:
- Identity: surname, first name
- Contact details: address, email, telephone number
- Order and payment details (your bank details are processed by our payment service providers, never by us)
- Purchase history on your account
This data is used exclusively for:
- process, dispatch and track your orders;
- to send you information relating to your purchases;
- send you our newsletter if you have given your consent;
- to prevent fraud and ensure the security of the website;
- automatically determine your eligibility for VIP pre-orders, based on your purchase history and average basket value.
Signing in with Apple, Google or Facebook: if you choose to sign in with one of these buttons, we receive from that service only your surname, your first name, your e-mail address and, where applicable, your profile picture. We never receive your password and have no access to any other data in your Apple, Google or Facebook account.
- this information is used only to create your account, to identify you when you next sign in and to contact you about your orders;
- it is stored with your account, under the same conditions as your other data (see 3.4), and is never sold or passed on to third parties;
- you can ask at any time for this data to be deleted by writing to [email protected].
3.2 Legal basis
We process your data on the following grounds:
- performance of the contract: managing your account, orders, deliveries and returns;
- our legal obligations: invoicing and bookkeeping;
- your consent: newsletter and optional cookies, which you can opt out of at any time;
- our legitimate interest: site security, fraud prevention and VIP access.
3.3 Data security
We take all necessary measures to ensure the security of your personal data:
- SSL encryption during payments and when transmitting sensitive information;
- secure data storage;
- access restricted to authorised persons only.
Payments are processed by certified service providers (Stripe, Klarna, Alma), and your bank details are never stored on our servers.
3.4 Data retention
We retain your personal data for a maximum of two years after your last transaction, unless there is a legal obligation to retain it for longer (accounting and tax records).
You can request that your data be deleted at any time.
3.5 Your rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- access to your data;
- correction;
- erasure («right to be forgotten»);
- restriction of processing;
- data portability;
- objection to the processing;
- withdraw your consent at any time.
To exercise your rights: [email protected]
If you feel that your rights have not been respected, you can lodge a complaint with the Data Protection Authority (Rue de la Presse 35, 1000 Brussels, autoriteprotectiondonnees.be).
3.6 Data sharing
We never sell your data on to third parties.
They are only shared with service providers necessary for processing your orders and for the website to function:
- payment: Stripe, Klarna, Alma;
- delivery: our shipping platforms, DPD;
- insurance for parcels: our parcel insurance providers, to insure parcels and handle claims (order number, tracking number, value of the parcel, name and delivery address);
- hosting and security: Hostinger, Cloudflare.
These service providers are subject to the same GDPR compliance obligations. If any of them process data outside the European Union, they do so in accordance with the safeguards set out in the GDPR.
3.7 Changes to the policy
We reserve the right to amend this privacy policy in order to bring it into line with changes to our services or legislation.
The date of the last update is always shown at the top of this page.
