Privacy Policy

Last updated: 15 October 2026

This privacy policy explains which personal data we collect when you visit mikeandbecky.be, shop with us or contact us, why we do it, who we share it with and which rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

1. Who is responsible

The controller responsible for processing your personal data is:

JUMBB SRL (trading as MIKE&BECKY)
Rue Papenkasteel 78
1180 Uccle
Belgium
Phone: +32 498 44 06 40
Email: info@mikeandbecky.be

Our chocolate is made at our production site: MIKE&BECKY Production, Campus CERIA, Rue des Grives 25, 1070 Anderlecht, Belgium.

For any question about your data or to exercise your rights, write to info@mikeandbecky.be.

2. Visiting our website

Hosting and server logs

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in the EU. When you open a page, the server automatically records technical data: IP address, date and time, the page requested, the referring page, browser and operating system. We need this to deliver the website, keep it secure and investigate attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Log files are deleted after 30 days at the latest, unless they are needed to investigate a security incident. Hetzner processes this data on our behalf under a data processing agreement.

Content delivery network (jsDelivr)

Some technical script files are loaded from jsDelivr (cdn.jsdelivr.net), a free public content delivery network for open-source files. Your browser connects to jsDelivr to download these files, which transmits your IP address. jsDelivr uses global network providers, so this connection may be handled outside the EU. Legal basis: our legitimate interest in a fast, reliable website (Art. 6(1)(f) GDPR).

3. Cookies and consent

Cookies are small text files stored in your browser. We use:

Necessary cookies, for example to keep the contents of your shopping cart, to keep you logged in to your customer account and to remember your cookie choices. They are required for the shop to work and are set without consent (Art. 6(1)(b) and (f) GDPR, Art. 129 of the Belgian law of 13 June 2005 on electronic communications).
Optional cookies and similar technologies for statistics and marketing (see sections 4 and 7). These are only used if you agree in our cookie banner (Art. 6(1)(a) GDPR).

Our cookie banner runs on our own website (WebToffee GDPR Cookie Consent plugin). Your choice is stored in a cookie in your browser (wt_consent), and an anonymised record of your consent is kept in our website database so we can prove it (Art. 6(1)(c) GDPR). No consent data is sent to the plugin provider.

You can change or withdraw your consent at any time via the cookie settings link at the bottom of every page, and you can delete cookies in your browser settings.

4. Shopping in our online shop

Orders and customer account

When you place an order, we process your name, billing and shipping address, email address, phone number (if provided), the products ordered, the order value and the payment status. If you create a customer account, we also store your login details and order history. We need this data to process your order, deliver it, send you order and shipping emails, handle returns and meet our legal obligations. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligations under tax and accounting law (Art. 6(1)(c) GDPR).

Our shop runs on WooCommerce, installed on our own server. Order data is not shared with the WooCommerce developer.

Order attribution

To understand which channels bring us customers (for example a search engine, social media or a newsletter), our shop records the source of your visit (referring website, campaign parameters, device type) and stores it with your order. This uses cookies and is only active if you consent to statistics cookies (Art. 6(1)(a) GDPR).

Payment (Mollie)

Payments are processed by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands. When you pay, we pass your name, email address, order number and amount to Mollie. You enter your payment details (card, Bancontact or other methods) directly with Mollie, not on our website. Mollie and, where applicable, your bank or card issuer process this data to carry out the payment and prevent fraud. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Mollie is a licensed payment institution and also acts as a controller for its legal obligations. More information: mollie.com/privacy.

Shipping (Sendcloud and carriers)

To create shipping labels and track parcels, we use Sendcloud B.V., Stadhuisplein 10, 5611 EM Eindhoven, the Netherlands. We pass your name, shipping address, email address and, if provided, phone number to Sendcloud and to the carrier that delivers your parcel (for example bpost, PostNL or DHL), so they can deliver it and notify you about the delivery. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Sendcloud processes the data on our behalf under a data processing agreement.

Wholesale portal (Odoo)

Business customers order through our wholesale portal at mikeandbecky-pro.odoo.com, which runs on Odoo, provided by Odoo SA, Chaussée de Namur 40, 1367 Grand-Rosière, Belgium. The company and contact details you enter there are processed to manage your account and orders (Art. 6(1)(b) GDPR). Odoo processes the data on our behalf.

5. Contact form and email

If you contact us via the contact form or by email, we process the data you send us (name, email address, your message and any other details you provide) to answer your request. Legal basis: pre-contractual measures or the contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR). We delete enquiries when they are fully handled, unless we have to keep them for legal reasons.

Spam protection (Google reCAPTCHA)

To protect the contact form against spam and bots, we use Google reCAPTCHA v3, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA analyses how the form is used (for example IP address, time spent on the page, mouse movements and browser information) and sends this data to Google. Data may be transferred to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework. More information: policies.google.com/privacy.

6. Newsletter (Mailchimp)

You can subscribe to our newsletter about new bars, origins and offers, for example by ticking the newsletter box in the checkout. This box is never pre-ticked. After subscribing, you receive an email with a confirmation link (double opt-in). Legal basis: your consent (Art. 6(1)(a) GDPR).

We send the newsletter with Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp, 405 N Angier Ave NE, Atlanta, GA 30308, United States, an Intuit company. When you subscribe, we share your email address, name and, if you are a customer, your order details (products, order value, order date) with Mailchimp, so we can send content that is relevant to you. Mailchimp also records whether a newsletter is opened and which links are clicked, so we can see how our newsletters perform.

Mailchimp processes the data on our behalf under a data processing agreement. Data is transferred to the United States. The Rocket Science Group LLC is certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses are included in the data processing agreement as an additional safeguard.

You can unsubscribe at any time using the link in every newsletter or by emailing info@mikeandbecky.be. We then remove you from the newsletter list. Order data we must keep for legal reasons is not affected. More information: intuit.com/privacy/statement.

7. Marketing and measurement

The following technologies are only used if you agree to marketing cookies in our cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings.

Meta Pixel (Facebook and Instagram)

We use the Meta Pixel, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It tells Meta when you view products, add them to your cart or complete a purchase on our website. We use this to measure our advertising on Facebook and Instagram and to show our ads to people who may be interested in them. Meta may link this information to your Facebook or Instagram account. For this processing, we and Meta are joint controllers (Art. 26 GDPR); Meta is responsible for providing you with information about its processing and for handling your rights requests regarding the data it holds. Data may be transferred to Meta Platforms, Inc. in the United States, which is certified under the EU-U.S. Data Privacy Framework. More information: facebook.com/privacy/policy.

Mailchimp site tracking

If you have subscribed to our newsletter, Mailchimp’s tracking script can connect your visits and purchases on our website to your newsletter profile, so we can send you more relevant emails and see which newsletters lead to orders. Provider and data transfers: see section 6.

8. Maps on our store locator (Google Maps)

Our store locator shows embedded maps from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a map is displayed, your browser connects to Google, which receives your IP address and the page you are viewing, and may set cookies. Data may be transferred to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR). More information: policies.google.com/privacy.

9. Links to social media

Our website contains simple links to our profiles on Instagram, Facebook and other platforms. These are plain links, not embedded plugins: no data is sent to these platforms when you visit our website. Only when you click a link and open the platform does its own privacy policy apply.

10. Who receives your data

We only share your personal data where this is necessary for the purposes described above: with the service providers named in this policy (hosting, payment, shipping, newsletter, cookie consent, spam protection, maps, advertising), with carriers for delivery, and with authorities or advisers (for example our accountant) where we are legally required to. We do not sell your personal data.

Where data is transferred to countries outside the European Economic Area, this happens on the basis of an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework or the decision for the United Kingdom) or the European Commission’s Standard Contractual Clauses.

11. How long we keep your data

Order and invoice data: as long as required by Belgian tax and accounting law (currently up to 10 years).
Customer account: until you delete it or ask us to delete it; order data remains stored for the legal retention period.
Contact enquiries: until the enquiry is fully handled, unless a longer period is legally required.
Newsletter: until you unsubscribe.
Cookie consent record: 12 months, after which we ask again.
Server logs: see section 2.

12. Your rights

You have the right to:

Access the personal data we hold about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data, where there is no legal reason for us to keep it (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability: to receive the data you gave us in a common, machine-readable format (Art. 20 GDPR)
Object to processing based on our legitimate interest, and at any time to direct marketing (Art. 21 GDPR)
Withdraw your consent at any time, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, email info@mikeandbecky.be. We answer within one month.

You also have the right to lodge a complaint with a supervisory authority. In Belgium, this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.

13. Is providing data required?

Visiting our website does not require you to give us any personal data. To place an order, we need your name, address and email address; without them we cannot deliver your order. Subscribing to the newsletter and accepting optional cookies are always voluntary.