Privacy Policy

This Privacy Policy describes how ONSEC S.A. (“ONSEC”, “we”, “us” or “our”) collects, uses and protects personal information when you visit https://onsec.net or purchase products from our store. We are committed to handling your data transparently and in line with the EU General Data Protection Regulation (GDPR) and other applicable laws.

1. Information we collect

We collect information you provide directly, including:

• Order information: name, shipping and billing address, email, phone number and country.
• Account information: if you create an account, your name, email and password hash.
• Payment information: processed directly by our payment processor (Stripe). We do not store full card numbers on our servers.
• Customer support: messages you send us and the contents of replies.

We also collect technical information automatically, such as IP address, browser type, operating system, referrer, pages visited and timestamps. This data is used to secure the website, diagnose problems and improve the shopping experience.

2. How we use your information

• To process and fulfil your orders, including shipping.
• To provide customer support, respond to enquiries and manage returns.
• To send service communications, such as order confirmations, shipping notifications and security alerts.
• To detect and prevent fraud, abuse and violations of our terms.
• To comply with legal obligations, including tax and accounting requirements.
• With your explicit consent, to send marketing communications you may opt out of at any time.

3. Legal bases for processing

We process personal data on the following legal bases: performance of a contract (order fulfilment); compliance with legal obligations; our legitimate interests in operating a secure, functioning business; and, where required, your consent.

4. Sharing your information

We share personal data only with:

• Payment processors (Stripe) to complete transactions.
• Shipping carriers and fulfilment partners to deliver your order.
• Service providers that help us run the website (hosting, analytics, email delivery), bound by confidentiality.
• Authorities when legally required to do so, to protect our rights, or to investigate fraud.

We do not sell your personal information.

5. International transfers

Your data may be transferred to and processed in countries outside the European Economic Area, including the United States. When we do so, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Data retention

We keep your personal data only as long as necessary for the purposes described above or as required by law. Order records are retained for a minimum of seven years for accounting purposes.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete or restrict processing of your personal data, to data portability, and to object to certain processing. You may also withdraw consent at any time where processing is based on consent. To exercise these rights, email us at [email protected].

8. Cookies

We use strictly necessary cookies to operate the store (cart, preferences, security) and, with your consent, analytics cookies to understand how the site is used. You can manage cookies via your browser settings.

9. Security

We use industry-standard safeguards including TLS encryption, hashed passwords, access controls and monitoring. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children

Our services are not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be announced on this page and, where appropriate, by email.

12. Contact

For privacy questions, write to the data controller, ONSEC S.A., Avenue Louise 54, Room S52, Brussels, Belgium, or email [email protected].