Privacy Policy

Privacy Policy

Last updated: 25 October 2026

1. Who we are

Drilor Jewelry is operated by Drilon Brahimi, a sole trader established in Belgium. Drilon Brahimi is the controller responsible for the personal data described in this policy.

Business address: Mercatorstraat 52/2, 9100 Sint-Niklaas, Belgium
Enterprise number (BCE/KBO): 1041.945.393
VAT number: BE1041.945.393
Email: info@drilor.com
Website: https://www.drilor.com

We process personal data in accordance with the European General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”), and applicable Belgian data-protection legislation.

2. Personal data we collect

Contact enquiries

When you use our contact form, we collect your first name, surname, email address, subject and message.

We also process information you choose to provide when corresponding with us by email.

Orders placed by email

Our website presents our work and jewelry collections without offering online checkout. You may contact us by email to discuss or place an order.

For these orders, we process the information necessary to manage the purchase, including your name, contact details, order details, billing and delivery addresses, and payment information visible when we receive your bank transfer.

We do not collect payment-card details through this website.

Website visits

Our website is hosted by Squarespace. When you visit, technical information is processed, including your IP address and information about your browser, device and network.

Website statistics may include pages visited, referral sources, approximate location, visit times and interactions with the website. Optional analytics cookies are subject to your consent.

Fonts and spam protection

Our website uses Adobe Fonts to display fonts and Google reCAPTCHA to help protect the contact form against spam and automated abuse. These services involve processing technical information, as explained below.

We do not currently offer customer accounts or newsletter subscriptions.

3. Why we process your personal data

We use personal data for the following purposes:

PurposeLegal basis under the GDPRResponding to general enquiriesOur legitimate interest in communicating with people interested in our workDiscussing an order at your requestTaking steps at your request before entering into a contractManaging orders, payments, delivery and after-sales servicePerformance of a contractMaintaining required tax and accounting recordsCompliance with legal obligationsOperating and securing our website, displaying its content and preventing spamOur legitimate interest in providing a functioning website and protecting our business and visitorsUsing optional analytics cookiesYour consent

Where consent is required for storing or accessing information on your device, our legitimate interests do not replace that consent requirement.

We do not use your enquiry or order details to subscribe you to marketing emails.

Information marked as required on our contact form is needed to handle your request. Without the information necessary for an order, we may be unable to process payment, arrange delivery or fulfil the purchase.

4. Service providers and other recipients

We use the following providers to operate our website and manage communications:

Squarespace

Squarespace hosts our website, processes contact-form submissions and stores submissions and associated contact details. It also provides website analytics.

Squarespace processes information on our behalf and certain technical information for its own purposes, as explained in its Privacy Policy.

Google Workspace

Contact-form notifications and emails sent to info@drilor.com are received and stored through Google Workspace.

Adobe Fonts

Our website uses Adobe Fonts to display fonts. Providing this service involves Adobe receiving technical information, including your IP address and information identifying the website requesting the fonts.

See the Adobe Fonts Privacy Policy.

Google reCAPTCHA

Our contact form uses Google reCAPTCHA to help distinguish genuine enquiries from spam and automated submissions. This service processes technical information about your device, browser and interactions with the website.

See Google’s Privacy Policy and Terms of Service.

Order-related recipients

Where necessary, we share relevant information with banks to manage payments and delivery providers to deliver orders.

Information may also be disclosed to authorities where legally required, or to professional advisers where necessary to meet our obligations or establish, exercise or defend legal claims.

We do not sell your personal data.

5. International transfers

Our providers may process personal data outside the European Economic Area, including in the United States.

Such transfers must be covered by an applicable adequacy decision or another lawful transfer mechanism, such as the European Commission’s Standard Contractual Clauses, together with any additional safeguards required.

[Before publication: confirm and identify the transfer mechanisms applicable to Drilor’s Squarespace, Google Workspace, reCAPTCHA and Adobe Fonts services, with links to the relevant documentation.]

You can contact info@drilor.com for information about the safeguards applicable to your personal data and how to obtain a copy.

6. How long we keep personal data

Ordinary enquiries

We keep enquiries that do not result in an order for up to 12 months after our last exchange, unless the information is no longer needed sooner.

This retention rule applies to enquiry records held in our email service and in Squarespace.

Orders and after-sales correspondence

We retain order-related information for as long as necessary to fulfil the order and handle relevant guarantees, complaints or legal claims.

Tax and accounting records

Invoices and records subject to Belgian VAT retention obligations are generally kept for 10 years, calculated from 1 January of the year following their issue, subject to any applicable special rules.

Disputes

Where necessary, we retain relevant records for the period required to establish, exercise or defend a legal claim.

Cookies

Cookie durations are described in our Cookie Policy.

We review retained personal data and delete or anonymise it when it is no longer necessary.

7. Cookies and analytics

Our website uses necessary cookies to support its operation and optional analytics cookies to help us understand website usage.

Non-essential cookies are configured to remain restricted until you consent. The cookie banner allows you to:

  • Accept optional cookies.

  • Decline optional cookies.

  • Manage your preferences.

You can change or withdraw your consent through the Cookie Preferences button.

Declining optional cookies does not prevent you from browsing our website. Squarespace may still process technical information needed to operate and secure the website and provide limited statistics.

Please consult our Cookie Policy for further information.

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration and loss.

No internet transmission or storage system can guarantee absolute security.

9. Your data-protection rights

Subject to the conditions and exceptions in the GDPR, you may:

  • Request access to your personal data.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your data.

  • Request restriction of processing.

  • Request data portability where applicable.

  • Object, on grounds relating to your particular situation, to processing based on legitimate interests.

  • Withdraw consent where processing relies on it.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, email info@drilor.com. We may request proportionate information where necessary to verify your identity.

We normally respond within one month. If an extension is permitted because of the complexity or number of requests, we will inform you within the first month and explain the reason.

10. Complaints

You may lodge a complaint with the Belgian Data Protection Authority:

Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35 / Drukpersstraat 35
1000 Brussels, Belgium
Website: https://www.dataprotectionauthority.be

You may also complain to the competent supervisory authority in the EU Member State of your habitual residence, place of work or the alleged infringement.

11. Changes to this policy

We update this policy when our website, processing activities or legal obligations change.

The current version is published on this page with its revision date.