Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how Guide Crafted ("we", "us", "our") collects, uses, and protects your personal data when you visit guidecrafted.com or buy one of our digital guides. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.

1. Who is responsible for your data (controller)

The data controller is:

• Louis Verbeke (sole trader / eenmanszaak — student entrepreneur)
• Belgium — registered address available on request via the email below
• Company number (KBO/CBE): 1037.679.373 — VAT: BE1037679373 (VAT-exempt)
• Email: support@guidecrafted.com

You can contact us about anything in this policy using the email above.

2. What data we collect, why, and on what legal basis

| Data | Purpose | Legal basis (GDPR Art. 6) | |---|---|---| | Name, email, billing country, payment confirmation | Process your order and deliver your guide by email | Performance of a contract (Art. 6(1)(b)) | | Email address (newsletter) | Send our newsletter, if you opted in | Consent (Art. 6(1)(a)) | | Order history, support correspondence | Customer support, refunds, legal/accounting obligations | Legal obligation (Art. 6(1)(c)) & legitimate interest | | Cookies & similar technologies (analytics, marketing) | Measure and improve the site; ad attribution | Consent (Art. 6(1)(a)) — see section 5 | | Technical data (IP, device, pages viewed) | Security, fraud prevention, aggregated statistics | Legitimate interest (Art. 6(1)(f)) / consent for non-essential analytics |

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects on you.

3. Who we share data with (processors)

We only share data with service providers who process it on our behalf, under a data processing agreement:

• Shopify — checkout, payments, and order management
• Google (Google Analytics) — website analytics (only with your analytics consent)
• Microsoft (Clarity) — usage analytics / heatmaps (only with your analytics consent)
• Meta Platforms (Meta Pixel & Conversions API) — ad measurement (only with your marketing consent)
• Klaviyo — newsletter and email delivery (only if you subscribed)
• Vercel — website hosting

Payment card details are handled directly by Shopify's PCI-compliant payment processors; we never see or store full card numbers.

4. International transfers

Some of these providers are based in or process data in the United States. Where data is transferred outside the EEA, we rely on appropriate safeguards — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguards using the contact details above.

5. Cookies and tracking

When you first visit, a cookie banner lets you accept or refuse non-essential cookies by category:

• Necessary — always on; required for the cart, security, and your preferences.
• Analytics — Google Analytics, Microsoft Clarity, and Shopify analytics. Off until you opt in.
• Marketing — Meta Pixel and ad-attribution cookies. Off until you opt in.
• Personalization — remembers preferences and recommendations. Off until you opt in.

No analytics or marketing cookies are set until you give consent. You can change or withdraw your choices at any time via the "Cookie settings" link in the footer.

6. How long we keep your data

• Order and invoice data: for as long as required by accounting and tax law (in Belgium, generally 7 years).
• Newsletter data: until you unsubscribe.
• Analytics/marketing data: for the retention period set in each tool (e.g. Google Analytics, max 14 months), or until you withdraw consent.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate data;
• request erasure ("right to be forgotten");
• request restriction of processing;
• object to processing based on legitimate interest or direct marketing;
• data portability (receive your data in a portable format);
• withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these, email us at support@guidecrafted.com. We respond within one month.

You also have the right to lodge a complaint with your data protection authority. In Belgium this is the Gegevensbeschermingsautoriteit / Autorité de protection des données (gegevensbeschermingsautoriteit.be).

8. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version.