privacy-policy

Last updated: 25 October 2026

1. Who we are

This website and webshop are run by Tiger Association Support Group vzw, Oude Aarschotsebaan 5, 2221 Booischot, Belgium, enterprise number 0489.329.129 ("we", "us"). We are the controller of the personal data described in this policy.

For any question about your personal data, contact us at info@natotigers.org.

2. What data we process, why, and for how long

Webshop orders

  • Data: name, e-mail address, telephone number (if given), shipping and billing address, the products you order, payment method and payment status, and any comment you add.
  • Purpose: to process, ship and invoice your order, and to contact you about it.
  • Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR), and our legal accounting and tax obligations (Art. 6(1)(c) GDPR).
  • Retention: order and invoice data are kept for 10 years, as required by Belgian accounting and VAT law. Afterwards they are deleted.

Payments

  • PayPal: if you pay with PayPal, you enter your payment details on PayPal's own pages. We never see your card or account login details; we only receive the payment status and the transaction reference. PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) processes your data as an independent controller under its own privacy statement.
  • Bank transfer: we see the name and account number of the paying account on our bank statements, and keep these with our accounting records (10 years).

Contact form and e-mail

  • Data: your name, e-mail address and message.
  • Purpose: to answer your question.
  • Legal basis: our legitimate interest in answering questions (Art. 6(1)(f) GDPR), or steps taken at your request before an order (Art. 6(1)(b) GDPR).
  • Retention: as long as needed to handle your question, and at most 2 years afterwards.

User accounts

  • Data: user name, e-mail address, password (stored encrypted, we cannot read it), and the date of your last login.
  • Purpose: to give members access to restricted pages and to let customers view their orders.
  • Legal basis: performance of the contract or membership (Art. 6(1)(b) GDPR).
  • Retention: as long as the account exists. When an account is closed, we block it and delete the account data, except the order data we must keep (see above).

Security and technical logs

  • Data: IP address, date and time, the page requested, browser type, and error messages.
  • Purpose: to keep the website secure and working, and to prevent spam and abuse.
  • Legal basis: our legitimate interest in a secure website (Art. 6(1)(f) GDPR).
  • Retention: the website keeps only the most recent log entries (a rolling log of limited size); our hosting provider keeps its server logs for a limited period. Backups of the website database are kept for a few days and then overwritten.

3. Cookies

We only use cookies that are needed for the website to work. They do not require your consent:

  • Session cookie (name starts with SESS or SSESS): keeps your shopping cart and login. Deleted when you close your browser or log out.
  • cookie-agreed: remembers your choice in the cookie banner, for 100 days.

We do not use analytics, advertising or tracking cookies.

Embedded videos: some pages contain videos from YouTube or Vimeo. These are only loaded when you click "Load video" or accept cookies in the banner. At that moment, YouTube (Google) or Vimeo receive your IP address and may set their own cookies, under their own privacy policies. YouTube videos are loaded in "privacy-enhanced mode". You can withdraw your consent at any time with the "Cookie settings" button at the bottom of the page.

The fonts on this website are hosted on our own server; no data is sent to Google Fonts.

4. Who receives your data

We do not sell your data and do not use it for profiling or advertising. We only share it with:

  • our hosting provider Combell (Belgium), which hosts the website, the database and our e-mail;
  • PayPal, if you choose to pay with PayPal;
  • the postal or courier service that delivers your order (for example Bpost, POSTNL and DPD): your name and shipping address;
  • our accountant, for the bookkeeping;
  • authorities, only when the law requires it.

Your data is stored in the European Union. PayPal, YouTube (Google) and Vimeo may transfer data outside the EU under their own safeguards, as described in their privacy policies.

5. Your rights

You have the right to:

  • access the personal data we hold about you and receive a copy;
  • have incorrect data corrected;
  • have your data deleted, unless we must keep it by law (for example invoices);
  • restrict or object to the processing of your data;
  • receive your data in a structured, machine-readable format (data portability);
  • withdraw your consent at any time, where processing is based on consent.

Send your request to info@natotigers.org. We answer within one month. We may ask you to confirm your identity.

If you believe we do not handle your data correctly, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be, contact@apd-gba.be.

6. Changes

We may update this policy when our website or the law changes. The date at the top shows the latest version.