Preamble

The purpose of this privacy policy is to explain, with complete transparency, how Mum’s Papilles & Care collects, uses, and protects the personal data of the data subjects, as well as to inform them of the measures implemented to guarantee its confidentiality and security.

Mum’s Papilles & Care places a special importance on respect for privacy and the responsible processing of personal data, in compliance with applicable regulations, and notably Regulation (EU) 2016/679 on data protection (GDPR).

This policy is subject to modification or update at any time, particularly in the event of changes in legislation, regulations, or the practices of Mum's Papilles & Care. It is therefore recommended that you consult it regularly to review the most recent version.

1. The data controller

The controller of the personal data collected and processed in the context of the use of the website www.mumspapillescare.be and of the proposed services is Madame Cindy Tilman.

The activity is carried out under the business name Mum’s Papilles & Care.

Data controller:

Mrs. Cindy Tilman
Address: Clos de l’Aronelle 19, 1474 Genappe (Belgium)
Phone: +32 496 50 31 35
Email address: contact@mumspapillescare.be

Mum’s Papilles & Care is operated as a limited liability company (SRL), registered with the Crossroads Bank for Enterprises under company number BCE 1040.338.361 and subject to VAT under number BE 1040.338.361.

Considering the nature and scale of the activity, no data protection officer (DPO) has been appointed.

Any question relating to the processing of personal data may be addressed directly to the data controller via the contact details mentioned above.

As the data controller, Ms. Cindy Tilman undertakes to comply with the obligations set out in the applicable data protection regulations, in particular by guaranteeing the rights of data subjects, ensuring the security and confidentiality of the data processed, and maintaining the required records, where applicable.

2. Collected data, purposes, and collection methods

Mum’s Papilles & Care ensures that it only collects and processes personal data that is adequate, relevant, and strictly necessary for the purposes pursued, in accordance with the data minimization principle set out in the GDPR.

The collection methods and the categories of data processed may vary depending on the purposes of the processing.

The treatments applied are described below.

2.1 Customer and Order Management

Purpose of the processing

Customer relationship management, including in particular order management, customer accounts, contracts, invoicing, accounting, and delivery tracking.

Collected data

• Identification data: last name, first name; ;
• Contact details: postal address, email address, phone number;
• Order data: ordered products, any preferences, order dates and terms; ;
• Billing and accounting data; ;
• Delivery details: address and specific instructions.

Collection methods

• Online order forms; ;
• Creation and management of a customer account, where applicable; ;
• Email or telephone exchanges.

2.2 Contact Request Management

Purpose of the processing

Respond to information, contact, or inquiry requests submitted via the website or by email.

Collected data

• Last name and first name ;
• Email address; ;
• Phone number (if applicable); ;
• Message content.

Collection methods

• Contact form on the website; ;
• Email or phone communications.

2.3 Newsletter management

Purpose of the processing

Sending information, news, and communications related to the activities of Mum’s Papilles & Care.

Collected data

• Email address.

Collection methods

• Voluntary newsletter subscription form.

2.4 Site navigation

Purpose of the processing

Improving site performance, measuring audience, and optimizing the user experience.

Collected data

• Navigation data (IP address, cookies, browsing data), under the conditions described in the article relating to cookies.

Collection methods

• Use of the website and deposit of cookies, with the user's consent when required.

3. Legal bases justifying data processing

The processing of personal data includes any operation performed on such data, such as their collection, recording, use, storage, or deletion.

In accordance with Regulation (EU) 2016/679 (GDPR), any processing of personal data is based on a specific legal ground.

The processing carried out by Mum's Papilles & Care is based on the legal grounds described below.

The table below sets out the processing carried out, the purpose of this processing and the legal basis justifying said processing.

4. Data retention period

Personal data is kept only for the period necessary for the purposes for which it was collected, in compliance with applicable regulations.

In particular:

• Data related to customer management, orders, and commercial relations are kept for a maximum period of five (5) years from the last interaction or the last order, barring any legal obligation requiring a longer retention period, particularly regarding accounting and tax matters.
• The data necessary for compliance with legal and accounting obligations are kept for the period required by applicable legislation, and then archived or deleted in accordance with the rules in force; ;
• The data collected as part of contact requests is kept for a maximum period of twelve (12) months from the last exchange; ;
• Data used for newsletter purposes is kept until the consent is withdrawn by the data subject (unsubscribe); ;
• Browsing data and cookies are kept for a maximum period of thirteen (13) months, in accordance with applicable regulations.

Upon the expiry of these periods, the data are deleted or anonymized, barring any legal obligation requiring longer retention.

5. Communication of data to third parties

The personal data collected by Mum’s Papilles & Care is processed confidentially and is neither sold, rented, nor transferred to third parties for commercial purposes.

5.1. Sharing in the context of the activity

Certain personal data may be disclosed, solely when necessary, to duly authorized service providers or subcontractors operating within the scope of Mum’s Papilles & Care's activities, such as in particular:

• the accountant ;
• the IT and hosting service providers of the website; ;
• secure payment service providers ;
• messaging or newsletter service providers; ;
• delivery services or logistics providers, where applicable.

The website www.mumspapillescare.be is hosted by Infomaniak.

Technical management, maintenance and administration of the site are provided by the company Wapix, represented by Charly Misme.

Payments can be made by bank transfer or via the secure payment system available on the website.

No banking data is stored by Mum’s Papilles & Care. Transactions are processed by secure payment providers.

In this context, these service providers may be required to access certain personal data exclusively for technical reasons. They only have access to the data strictly necessary for the performance of their duties and are contractually required to respect the confidentiality and security of the data, in accordance with applicable data protection regulations.

5.2. Legal Obligations

Personal data may also be disclosed to the competent administrative, tax, or judicial authorities when such disclosure is required by law, regulation, or a judicial decision.

5.3. Protection of rights

Mum’s Papilles & Care may be required to disclose certain personal data when acting in good faith and such disclosure is necessary to:

• To comply with a legal or regulatory obligation; ;
• Protect one's rights, security, or that of users; ;
• Prevent or detect any fraud or misuse of services.

5.4. List of subcontractors

Mum’s Papilles & Care keeps an up-to-date list of its subcontractors.

For security reasons, this list is only provided upon direct request by the person concerned.

Any request may be sent to the data controller via the contact details mentioned in this privacy policy.

6. Data transfer outside the European Union

Personal data are processed and hosted within the European Union.

Mum’s Papilles & Care does not transfer data outside of the European Union.

If, exceptionally, a transfer were to take place to a country located outside the European Union, it would only be carried out in compliance with the safeguards provided for by the GDPR, notably in the presence of an adequacy decision by the European Commission or appropriate safeguards such as standard contractual clauses.

The data subject can obtain further information on these safeguards by contacting the data controller.

7. Rights of data subjects

In accordance with applicable data protection regulations, any person concerned by the processing of their personal data has the following rights:

• Right of access: obtain confirmation as to whether or not personal data is being processed and, where applicable, access such data; ;
• Right to rectification: request the correction of inaccurate, incomplete, or outdated data; ;
• Right to erasure (right to be forgotten): request the deletion of personal data when it is no longer necessary for the purposes for which it was collected or when consent is withdrawn; ;
• Right to restriction of processing: request the temporary suspension of the processing of certain data, in particular in the event of a dispute regarding their accuracy or lawfulness; ;
• Right to object: to object, on grounds relating to your particular situation, to processing based on legitimate interest; ;
• Right to data portability: to receive the personal data provided in a structured, commonly used format, or to request their transmission to another data controller, where technically feasible.
• Right to lodge a complaint: lodge a complaint with the Data Protection Authority (DPA) when the data subject considers that the processing of their personal data does not comply with the applicable regulations; ;

When processing is based on consent, such consent may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Exercise of rights

For any questions regarding the exercise of these rights, the data subject may contact the data controller at the following address:

contact@mumspapillescare.be

Mum's Papilles & Care is committed to responding to any request as quickly as possible and, at the latest, within the legal timeframe of one month from its receipt.

However, these rights are not absolute. In certain cases, Mum’s Papilles & Care may be required to retain certain data or to limit the exercise of these rights in order to comply with a legal or regulatory obligation. In such an event, the data subject will be duly informed.

8. Complaints and appeals

For any questions relating to the processing of their personal data or the exercise of their rights, the data subject is invited to contact the data controller as a priority.

Requests can be sent:

by email to the following address: contact@mumspapillescare.be

or by post to the following address:

Mum’s Papilles & Care
Clos de l’Aronelle 19,
1474 Genappe (Belgium)

This period may be extended by an additional two months in the event of a complex request or a high volume of requests. In such cases, the data subject will be informed of this extension within one month of receipt of their request.

In any case, Mum’s Papilles & Care strives to respond to requests while respecting the rights and freedoms of other individuals concerned.

Without prejudice to any other administrative or judicial remedy, the data subject also has the right to lodge a complaint with a competent supervisory authority, namely:

Data Protection Authority (DPA)
35 Press Street
1000 Brussels - Belgium
Phone: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: www.autoriteprotectiondonnees.be

Additional information regarding complaints and remedies is available on the Data Protection Authority website.

The data subject may also lodge an appeal with the competent courts, in particular before the court of first instance of their place of residence.

9. Data Security and Privacy

Mum’s Papilles & Care implements appropriate technical and organizational measures to ensure the security and confidentiality of the personal data processed and to protect it against any loss, destruction, alteration, disclosure, or unauthorized access.

These measures take into account in particular the nature of the data processed, the risks presented by the processing, and the state of technical knowledge.

As such, Mum's Papilles & Care ensures in particular that:

• Limit access to personal data strictly to authorized individuals and service providers who need access for the performance of their duties; ;
• Use computer tools, hosting services, and secure payment solutions; ;
• Mettre en place des mots de passe robustes et des dispositifs de protection adaptés ;
• Ne conserver que les données strictement nécessaires à l’activité.

En cas de violation de données à caractère personnel susceptible d’engendrer un risque pour les droits et libertés des personnes concernées, Mum’s Papilles & Care s’engage à notifier l’autorité de contrôle compétente et, le cas échéant, les personnes concernées, conformément à la réglementation en vigueur.

10. Cookies

The website www.mumspapillescare.be utilise des cookies et autres traceurs similaires afin d’assurer son bon fonctionnement, d’améliorer l’expérience utilisateur et, le cas échéant, de mesurer l’audience.

Lors de la première visite sur le site, un bandeau d’information permet à l’utilisateur d’accepter, de refuser ou de paramétrer l’utilisation des cookies, conformément à la réglementation applicable.

Pour plus d’informations sur les types de cookies utilisés, leurs finalités et les modalités de gestion des préférences, l’utilisateur est invité à consulter la Politique en matière de cookies disponible sur le site internet.

Il peut à tout moment modifier ses préférences en matière de cookies via les paramètres disponibles sur le site.

11. Droit applicable et juridiction compétente

La présente politique de confidentialité est régie par le droit belge.

En cas de litige relatif à l’interprétation ou à l’exécution de la présente politique, et à défaut de résolution amiable, les tribunaux compétents seront ceux de l’arrondissement judiciaire du domicile du responsable du traitement, sauf disposition légale impérative contraire.

12. Mise à jour de la présente charte

La présente politique de confidentialité peut être amenée à évoluer afin de tenir compte des modifications légales, réglementaires ou de l’évolution des pratiques de Mum’s Papilles & Care.

Toute modification sera publiée sur le site internet. Il est dès lors recommandé de consulter régulièrement la présente politique afin de prendre connaissance de sa version la plus récente.

13. À propos de nos images

Nos photographies présentent les plats et l’univers réel de Mum’s Papilles & Care. Certaines peuvent être retouchées ou adaptées à l’aide de l’intelligence artificielle. Certains visuels peuvent également être créés à partir de nos photographies originales avec l’aide de l’IA.

Dernière mise à jour : Juillet 2026