Privacy policy

Last updated on 23 September 2026.

1. Who processes your data?

The controller of your personal data is:

MoveOnUp bv, trading as Beauty Plan
Speureweg 22, 9830 Sint-Martens-Latem, Belgium
Company number 0790401728
Phone +32 475 37 27 80
Email info.beautyplan@gmail.com

We process your data in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy legislation.

2. Which data do we process?

  • Identification and contact details: your name, email address, phone number, billing and delivery address.
  • Order data: what you order, when, the amount, your order number, returns and refunds.
  • Payment data: the payment method and confirmation of your payment. Your full card number never reaches us; it is handled directly by the payment service provider.
  • Account data: your username, encrypted password and preferences, if you create an account.
  • Communication: what you write to us by email, via the contact form or social media.
  • Technical data: your IP address, device, browser and how you use the online shop, via cookies and similar technologies.

If you voluntarily tell us something about your skin so we can give you better advice, we use it only for that purpose and never for marketing.

3. What do we use it for, and on what basis?

  • Fulfilling your order – processing, delivery, returns, customer service. Basis: performance of our contract with you (Article 6.1.b GDPR).
  • Managing your account – if you create one. Basis: performance of the contract (Article 6.1.b GDPR).
  • Invoicing and accounting – issuing and keeping invoices, VAT obligations. Basis: our legal obligation (Article 6.1.c GDPR).
  • Answering your questions – by email, phone or message. Basis: our legitimate interest in helping you well, or performance of the contract (Article 6.1.f or 6.1.b GDPR).
  • Newsletter and offers – if you subscribe. Basis: your consent (Article 6.1.a GDPR). If you are already a customer, we may inform you about similar products on the basis of our legitimate interest (Article 6.1.f GDPR). Every email contains an unsubscribe link.
  • Security and fraud prevention – detecting and preventing misuse of the online shop. Basis: our legitimate interest (Article 6.1.f GDPR).
  • Improving the online shop – through usage statistics. Basis: your consent for non-essential cookies (Article 6.1.a GDPR).

4. How long do we keep it?

  • Order and invoice data: 7 years, as required by accounting legislation.
  • Account data: as long as your account exists. If you request deletion, we erase it, except for what we are legally required to keep.
  • Newsletter data: until you unsubscribe.
  • Emails and messages: up to 2 years after the last contact.
  • Technical data and cookies: according to the retention period of each cookie, with a maximum of 13 months for non-essential cookies.

5. Who do we share it with?

We never sell your data. We only pass it on to parties that help us run the online shop, and only for what they need to do so:

  • Shopify, which hosts the online shop and processes orders.
  • Our payment service provider, for processing your payment.
  • The parcel delivery service, for delivering your package.
  • Our email service, for sending our emails.
  • Our accountant and accounting software, for our bookkeeping.
  • Government or judicial authorities, when required by law.

A data processing agreement is in place with each of these parties, stating that they may only use your data on our behalf and in accordance with our instructions.

6. Is your data processed outside Europe?

Some of our service providers, including Shopify, process data outside the European Economic Area. Where that happens, the transfer is based on an adequacy decision of the European Commission or on the European Commission's standard contractual clauses, with additional safeguards where necessary.

7. Cookies

Our online shop uses cookies. Essential cookies make the shopping cart and checkout work; they cannot be switched off. For analytics and marketing cookies, we first ask for your consent via the cookie banner. You can change that choice at any time via your browser settings or via the banner.

8. Your rights

You have the right to:

  • see which data we hold about you;
  • have incorrect data corrected;
  • have your data erased, within the limits of what we are legally required to keep;
  • have processing restricted;
  • receive your data in a common format or have it transferred to another party;
  • object to processing based on our legitimate interest;
  • withdraw your consent, without affecting what happened before;
  • unsubscribe from our emails at any time.

To do so, send a message to info.beautyplan@gmail.com. We will reply within one month. To avoid giving data to the wrong person, we may ask you to verify your identity.

9. Automated decision-making

We do not make decisions about you based solely on automated processing that have legal effects for you. We do not carry out profiling in that sense.

10. Security

We take appropriate technical and organisational measures to protect your data, including a secure connection, restricted access and the security provided by the Shopify platform. No system is completely watertight; please never send us sensitive data via an unsecured channel.

11. Minors

Our online shop is not aimed at children. We do not knowingly collect data from persons under 16. If you notice that this has happened, let us know and we will erase it.

12. A complaint about your privacy?

Please let us know first via info.beautyplan@gmail.com. You also always have the right to lodge a complaint with the supervisory authority:

Belgian Data Protection Authority
Rue de la Presse 35, 1000 Brussels
Phone +32 2 274 48 00
Email contact@apd-gba.be
dataprotectionauthority.be

13. Changes

We may update this privacy policy, for example when our operations or the law change. The date at the top shows when it was last updated.