Privacy policy
What data Kiraia uses, why, and how to exercise your rights.
Last updated: Wednesday 16 September
1. Data controller
Kiraia is the controller of the data collected on this website, in accordance with the General Data Protection Regulation (GDPR).
2. Data collected
- Identity and contact: first name, last name, email address, phone (optional), language.
- Orders: dresses booked or bought, dates, amounts due and paid at the counter.
- Dresses offered: description, photos, drop-off and withdrawal history.
- Messages and reviews you write on the website.
- Technical data: connection logs and error reports.
3. What we do not collect
No bank details: you pay at the hub counter. No postal address: there is no delivery.
4. Purposes and legal bases
- Managing your account, orders and dresses (performance of the contract).
- Sending you the emails about your orders, in your language (performance of the contract).
- Moderating messages and reviews, preventing fraud (legitimate interest).
- Keeping accounting records (legal obligation).
5. Who sees your data
- The hub team, to prepare pickups, returns and payments.
- Other members only see your first name and last-name initial in messages; reviews are published without a name.
- Our technical providers: website hosting (Vercel), database and files (Supabase), email delivery, error monitoring. They act on our instructions.
- Public authorities, when the law requires it.
6. Retention
Your data is kept while your account is active. Once the account is deleted, your identity is erased; orders and accounting records are kept without your name for the legal period.
7. Your rights
You can access, correct, erase or port your data, and object to certain processing. You correct your details and delete your account yourself from your settings. For any other request, write to the hub. You can also contact the Belgian Data Protection Authority.
8. Local storage and cookies
The website uses your browser's storage for your session, your cart and your language. No advertising cookies are used.
9. Security
Access is password-protected and limited by role; every sensitive action on a dress or an order is logged.