Privacy Policy
Last updated: March 2026
1. Who We Are
Fearless Femmeco is operated by Cath, based in Belgium. We are committed to protecting your personal data and handling it in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian law. If you have any questions about how we handle your data, please contact us.
2. Data We Collect
We may collect the following personal data:
- Contact information — name and email address when you submit our contact form.
- Purchase data — billing details (name, email, payment method) processed by Stripe when you buy a product. We do not store full card details ourselves.
- Usage data — anonymised analytics such as pages visited, browser type, and device (via cookies, where you have consented).
- Communications — any messages or enquiries you send us.
3. How We Use Your Data
We use your data to:
- Process and fulfil your orders and deliver digital products
- Respond to your enquiries and provide customer support
- Send transactional emails related to your purchase
- Improve our website and services based on anonymised usage patterns
- Comply with legal obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing
Under GDPR, we process your data on the following bases:
- Contract — to process your purchase and deliver services you have requested.
- Consent — for cookies and any optional communications (you may withdraw consent at any time).
- Legitimate interests — to improve our website and prevent fraud.
- Legal obligation — where required by law.
5. Third-Party Services
We use the following third-party services that may process your data:
- Stripe — payment processing. Stripe’s privacy policy applies to payment data: stripe.com/privacy
- Vercel / hosting provider — website hosting and server logs.
6. Cookies
We use cookies to ensure the website functions correctly and to understand how visitors use our site. You can manage your cookie preferences via the banner shown on your first visit. For more detail on what cookies we use, see the banner options. You can also disable cookies in your browser settings at any time.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes outlined above or as required by law. Purchase records are kept for 7 years in accordance with Belgian accounting law. Contact enquiries are retained for up to 2 years unless a longer relationship is established.
8. Your Rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability — receive your data in a structured format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of our services after an update constitutes acceptance of the revised policy.
10. Contact
For any privacy-related questions or requests, please reach out via our contact page.