Legal / Updated 2026

Privacy policy

This policy explains how Tonicvaultcabints BV handles personal information on tonicvaultcabints.beauty.

1. Controller and scope

Tonicvaultcabints BV, company number 0794.218.563, Rue des Tisserands 18, 1000 Brussels, Belgium, is the controller for information collected through this website. You can contact us at [email protected]. This policy applies to visitors, people who contact us and people who use the site from any device.

2. Information we collect

When you use the contact form, we may receive your name, email address and message. We process that information to respond to your request and keep a limited record of the conversation. We may also receive technical information such as browser type, device category, approximate location derived from an IP address, referring page and security logs. We do not ask for special-category information and ask that you do not include it in a message.

3. Purposes and legal bases

We use contact details to answer enquiries and take steps at your request before entering a relationship. We use security information to protect the site and our systems, based on legitimate interests and legal obligations where applicable. Optional measurement cookies are used only after consent. You may withdraw consent at any time by clearing site storage and making a new choice when the banner appears.

4. Cookies and processors

Essential local storage remembers your cookie choice. If optional analytics are enabled in a future version, the relevant provider may process pseudonymous usage information as a processor or independent controller, depending on its service terms. We do not sell personal information. Hosting, email and security suppliers may process limited information under contractual confidentiality and security obligations. We require suppliers to provide appropriate safeguards for international transfers where relevant.

5. Retention and security

Contact correspondence is retained only as long as reasonably needed to answer the request, manage a relationship or demonstrate compliance. Security records are retained for a limited period appropriate to the risk. We use access controls, updates and proportionate safeguards, but no internet transmission can be guaranteed completely secure.

6. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You may also complain to the Belgian Data Protection Authority or another supervisory authority in your place of residence. We may need information to verify your identity and will respond within the period required by law.

7. GDPR and CCPA requests

European residents may exercise GDPR rights by emailing [email protected]. California residents may ask what personal information is collected, request deletion or correction, and exercise the right to opt out of sale or sharing; we do not sell personal information. We do not discriminate for exercising privacy rights. Authorised agents should include proof of authority.

8. Data protection contact

We do not currently appoint a separate statutory data protection officer. Privacy questions and rights requests should be sent to [email protected] or by post to the registered address above. We may update this policy when our processing changes and will publish the new effective date on this page.