Privacybeleid

Last updated: 11 October 2026

At MH7 Timepieces we handle your personal data with the same care as our watches. This Privacy Policy explains which data we collect, why we use it, with whom we share it, and which rights you have under the General Data Protection Regulation (GDPR).

1. Who is responsible

The controller of your personal data is MH7 BV, trading as MH7 Timepieces, Averbodeweg 18/1, 3271 Scherpenheuvel-Zichem, Belgium, enterprise number 1015.517.348, email office@mh7group.com.

2. Which data we collect

Contact and delivery details: name, email address, billing and delivery address, and phone number if you provide one.
Order details: the watches you order, order history, returns and warranty claims.
Payment details: payment method and payment confirmation. Card details are processed directly by our payment providers; we never see or store your full card number.
Account details: if you create a customer account, your login details and preferences.
Communication: the content of messages you send us by email or through our contact form.
Newsletter: your email address, if you subscribe.
Technical and usage data: IP address, browser and device type, and how you use our website, collected through cookies and similar technologies (see our Cookie Policy).

3. Why we use your data and on which legal basis

To process and deliver your order, handle payments, returns and warranty claims, and keep you informed about your order. Legal basis: performance of the contract.
To answer your questions and provide personal advice. Legal basis: performance of the contract or steps prior to it, or our legitimate interest in providing good service.
To send you our newsletter. Legal basis: your consent, which you can withdraw at any time via the unsubscribe link in every email.
To secure our store and prevent fraud, including automated fraud checks by our platform and payment providers. Legal basis: our legitimate interest in protecting our business and customers.
To analyse and improve our website. Legal basis: your consent for analytics cookies.
To show you relevant advertisements, including on other websites and social media, based on your activity in our store. Legal basis: your consent for marketing cookies, which you can withdraw at any time.
To comply with legal obligations, such as accounting and tax rules. Legal basis: legal obligation.

4. Who we share your data with

We never sell your personal data. We only share it where necessary with:

Shopify, the platform that hosts our online store and processes orders on our behalf;
payment providers, to process your payment securely;
our suppliers and carriers, to prepare and deliver your order;
IT and email service providers that support our business;
our accountant and public authorities, where the law requires it.

These parties may only use your data for the purposes for which we provide it.

Shopify's own processing. To help protect and improve our store, we use certain enhanced Shopify features that rely on data from your interactions with our store, with other merchants and with Shopify. For those purposes, Shopify processes your data as an independent controller and is responsible for it, including for responding to requests to exercise your rights. More information is available in the Shopify Consumer Privacy Policy and at privacy.shopify.com.

5. Transfers outside the EU

Some of our service providers, including Shopify, may process data outside the European Economic Area, for example in Canada or the United States. In that case, appropriate safeguards are in place, such as an adequacy decision of the European Commission or the European Commission's standard contractual clauses.

6. How long we keep your data

Order and invoice data: as long as required by Belgian accounting and tax law (currently up to 10 years).
Customer account: until you delete your account or ask us to delete it.
Newsletter: until you unsubscribe.
Messages and enquiries: up to 2 years after our last contact, unless they relate to an order.
Cookies: as described in our Cookie Policy.

7. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses an encrypted (HTTPS) connection, and payments are processed through secure, certified payment providers.

8. Your rights

You have the right to:

access the personal data we hold about you;
have incorrect data corrected;
have your data deleted, where there is no legal reason for us to keep it;
restrict the processing of your data;
object to processing based on our legitimate interest, and to direct marketing at any time;
receive your data in a structured, commonly used format (data portability);
withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email office@mh7group.com. We will respond within one month. We may ask you to verify your identity.

9. Complaints

If you believe we are not handling your data correctly, please contact us first. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be, or with the supervisory authority in your country of residence.