Version of 25 October 2026

Privacy policy

This page explains what data we process when you visit www.racletteshop.be, order online, create your customer account or write to us, why, with whom, for how long, and how to exercise your rights.

1. Who is responsible for your data?

The data controller is the company that fulfils your order: MAJIL SRL (chaussée de Waterloo 589, 1050 Ixelles, company number 0681.491.019) for collections in Uccle and Ixelles, deliveries, quote requests and the newsletter, or LA PETITE VACHE SRL (chaussée de Louvain 69, 1210 Saint-Josse-ten-Noode, company number 0757.460.924) for collections in Saint-Josse.

Le Raclette Shop is part of the WeLoveCheeses group: the customer account, the newsletter and the loyalty programme are shared by the group's cheese shops, which act jointly for this processing. One single point of contact for all your questions: hello@racletteshop.be.

2. The data we process

• Order: surname, first name, e-mail, phone, products ordered, date and time slot, comments (including any allergies you choose to mention), amount;
• Delivery: address, postcode, municipality and access instructions;
• Invoicing: where applicable, company name, VAT number and billing address;
• Payment: payment status and reference. Your bank details are processed by Mollie and we do not have access to them;
• Customer account and loyalty: login e-mail, order history, loyalty cards and points, vouchers and codes used;
• Newsletter: e-mail and, if you provide them, first name and preferred shop;
• Contact and quote requests: contact details, company if any, date and details of your event;
• Technical data: IP address and connection information kept by our hosting provider for site security.

Please do not send us sensitive data unrelated to your request. If you tell us about an allergy, we use it solely to prepare your order.

3. Why, and on what legal basis?

• Preparing, charging for, handing over or delivering your order and keeping you informed: performance of the contract;
• Managing your customer account and loyalty programme: performance of the contract you enter into by activating them;
• Invoicing and keeping our accounts: legal obligation;
• Replying to your messages and to requests from businesses: pre-contractual measures or our legitimate interest in replying to you;
• Sending you our newsletter: your consent, given by ticking the box provided, which you can withdraw at any time using the unsubscribe link in every mailing;
• Ensuring site security and preventing fraud: our legitimate interest.

Fields marked as mandatory are required to process your order or request. We make no automated decisions concerning you and we do not carry out advertising profiling.

4. Who do we share your data with?

Your data are accessible only to the members of our team who need them, and to the following service providers, strictly to the extent necessary for their task:

• Cloudflare: website hosting and security;
• Zite (Fillout): online shop, customer account and management database for our cheese shops;
• Mollie (Netherlands): payment processing, as a separate controller for its own obligations;
• Billit (Belgium): preparing and sending invoices;
• Shippr (Belgium): home delivery, which receives your name, phone number and delivery address;
• Brevo (France): sending the newsletter, if you are subscribed;
• our accountants, and public authorities where required by law.

These providers act on our instructions or in accordance with their own legal obligations, and must protect your data appropriately. We do not sell or rent your data.

5. Transfers outside the European Union

Some providers, including Zite and Cloudflare, are established in the United States or may process data there. These transfers rely on a mechanism recognised by the GDPR: certification under the EU–US Data Privacy Framework where available, or the European Commission's standard contractual clauses. You can obtain further details by writing to us.

6. For how long?

• orders and customer account: for the duration of the business relationship, then 3 years after your last order, unless you ask us to delete them;
• invoices and accounting records: 7 years, as required by law;
• delivery addresses: deleted from the courier's tools once delivery is completed, and kept in your order history as above;
• newsletter: until you unsubscribe;
• messages with no commercial follow-up: 12 months; business contacts: 3 years after the last exchange;
• technical security logs: 6 months at most, unless there is an incident.

After that, the data are deleted or anonymised.

7. Cookies and storage in your browser

This site uses no advertising cookies and no social media trackers. Only with your consent (banner shown on your first visit) do we measure visits with Google Analytics 4 (Google Ireland Ltd): pages viewed, navigation, purchases (order number and amount, without your name or contact details). These statistics help us improve the site and are kept for 14 months. Without your consent, no Google Analytics script is loaded. You can give or withdraw consent at any time via the “Cookies” link at the bottom of every page; your choice is kept for 6 months.

Only information strictly necessary for the service you request is stored in your browser (local storage): the contents of your basket, your choice of collection or delivery and, if you wish, your contact details to speed up your next orders. You can clear them at any time in your browser settings. Our hosting provider may set a technical security cookie to block malicious bots.

Links to Google Maps, Instagram or Facebook load nothing until you click on them; once on those sites, their own policies apply.

8. Your rights

You may at any time request access to your data, or their rectification, erasure, restriction of processing or portability, object to processing based on our legitimate interest and withdraw your consent (newsletter), without affecting earlier processing.

Write to us at hello@racletteshop.be or by post to the address in Article 1. We may ask you to prove your identity, and we will reply within one month. You may also lodge a complaint with the Data Protection Authority, rue de la Presse 35, 1000 Brussels.

9. Security

We take appropriate technical and organisational measures to protect your data: encrypted connection across the whole site, access restricted to authorised persons, customer account login by one-time code. As no system is infallible, we adapt these measures to the risks and would inform you of any incident affecting you, as required by law.

10. Changes

We may update this policy to reflect legal or technical developments or changes to our services. The date of the latest version appears at the top of the page. See also our terms and conditions of sale.