Version of 25 October 2026
Privacy policy
This page explains what data we process when you visit www.lapetitevache.be, order online, create your customer area or write to us, why, with whom, for how long, and how to exercise your rights.
In case of discrepancy between translations, the French version prevails.
1. Who is responsible for your data?
The website is shared by our two cheese shops, which are operated by two companies:
- La Petite Vache SRL, chaussée de Louvain 69, 1210 Saint-Josse-ten-Noode, company number 0757.460.924: for orders collected in Saint-Josse and customers of that cheese shop;
- MAJIL SRL, chaussée de Waterloo 589, 1050 Ixelles, company number 0681.491.019: for orders collected in Uccle, deliveries and customers of the Uccle cheese shop.
Each company is the controller of the data relating to its own orders and customers. For the website itself, the customer area and general enquiries, they act jointly. A single point of contact for all your questions: info@lapetitevache.be.
2. The data we process
- Order: surname, first name, e-mail address, phone number, products ordered, date and time slot, comments (including any allergies you choose to report), amount;
- Delivery: address, postcode, municipality, GPS coordinates of the verified address and access instructions;
- Current basket: if you entered your e-mail address when ordering, the contents of your unfinished basket, to remind you of it once;
- Billing: where applicable, company name, VAT number and billing address;
- Payment: payment status and reference. Your bank details are processed by Mollie and we have no access to them;
- Customer area and loyalty: login e-mail address, order history, loyalty cards and points, vouchers and codes used;
- Newsletter: e-mail address, first name and the cheese shop you order from most often, to send you the news relevant to you;
- Contact and trade: contact details, cheese shop concerned, subject, date and number of guests of an event, company and content of your message;
- Conversations with Marguerite, the website's assistant: your questions, her answers, the page viewed, the language and a random conversation identifier, without your name, e-mail or IP address. Please do not enter any personal data in it;
- Technical data: IP address and connection information kept by our hosting provider for the security of the website.
Please do not send us sensitive data unrelated to your request. If you tell us about an allergy, we use it solely to prepare your order.
3. Why, and on what basis?
- Preparing, taking payment for, handing over or delivering your order and keeping you informed: performance of the contract;
- Managing your customer area and your loyalty programme: performance of the contract you enter into by activating them;
- Invoicing and keeping our accounts: legal obligation;
- Replying to your messages and to enquiries from professionals: pre-contractual measures or our legitimate interest in replying to you;
- Reminding you once about your unfinished basket, 15 minutes after your last change: our legitimate interest in helping you complete an order you started. You can object with one click using the link in the reminder;
- Sending you our newsletter: your consent, given by ticking the box provided, which you can withdraw at any time using the unsubscribe link in every mailing;
- Answering your questions with Marguerite and improving her answers and our FAQ based on anonymous conversations: our legitimate interest. Her answers are generated automatically for information only; only the website and our cheesemongers are authoritative on prices and availability;
- Ensuring the security of the website and preventing fraud: our legitimate interest.
Fields marked as mandatory are necessary to process your order or request. We do not take any automated decisions concerning you and we do not carry out advertising profiling.
4. Who do we share your data with?
Your data is accessible only to the members of our team who need it, and to the following service providers, solely to the extent necessary for their task:
- Cloudflare: hosting and security of the website;
- Google Ireland: audience measurement (Google Analytics), only with your consent;
- Zite (Fillout): online shop, customer area and management database of our cheese shops;
- Mollie (Netherlands): payment processing, as a separate controller for its own obligations;
- Billit (Belgium): issuing and sending invoices;
- Shippr (Belgium): home delivery, which receives your name, phone number and delivery address;
- Brevo (France): sending e-mails relating to your orders, the basket reminder, contact form messages and the newsletter, if you have subscribed;
- OpenAI (United States): generating Marguerite's answers. OpenAI receives the text of the conversation, without your IP address or contact details, and does not use it to train its models;
- OpenStreetMap (OSMF foundation, United Kingdom) and komoot (Germany, Photon service): displaying maps of our cheese shops and address suggestions as you type. They receive your IP address and, for suggestions, the text typed in the address field;
- our accountancy firm, and public authorities where required by law.
These providers act on our instructions or under their own legal obligations, and must protect your data appropriately. We neither sell nor rent your data.
5. Transfers outside the European Union
Some providers, notably Zite, Cloudflare and OpenAI, are established in the United States or may process data there. These transfers rely on a mechanism recognised by the GDPR: certification under the EU–US Data Privacy Framework where it exists, or the European Commission's standard contractual clauses. You can obtain further details by writing to us.
6. For how long?
- orders and customer area: for the duration of the business relationship, then 3 years after your last order, unless you ask for deletion;
- invoices and accounting records: 7 years, as required by law;
- delivery addresses: deleted from the courier's tools once delivery has been made, kept in your order history as above;
- newsletter: until you unsubscribe;
- unfinished baskets: 90 days; your objection to reminders is kept for as long as you do not withdraw it;
- messages not leading to business: 12 months; trade contacts: 3 years after the last exchange;
- conversations with Marguerite: 12 months;
- technical security logs: 6 months at most, except in the event of an incident.
After that, the data is deleted or anonymised.
7. Cookies and storage in your browser
On your first visit, a banner lets you accept all, reject all or choose by category. You can change your choice at any time using the “Cookies” link at the bottom of every page. Your choice is kept for six months, after which you are asked again.
- Essential (always active, no consent required): contents of your basket, choice of collection or delivery, contact details and address pre-filled for your next orders, storage of your cookie choice, current conversation with Marguerite and its random identifier, and a technical cookie from our hosting provider to block malicious bots;
- Audience measurement (with your consent): visitor statistics;
- Marketing (with your consent): measuring the effectiveness of our advertising on social networks.
Audience measurement: we use Google Analytics 4 (Google Ireland Ltd), only if you accept this category. It measures pages viewed, where visits come from and orders placed (number and amount, without your personal details), with “_ga” cookies kept for up to 14 months; IP addresses are not stored by Google Analytics 4. Data sharing with Google for its own products and ad personalisation are switched off. No marketing tool is installed at present: that category stores nothing, even if you accept it. You can withdraw your consent at any time via the “Cookies” link at the bottom of the page.
Links to Google Maps, Instagram or Facebook load nothing until you click on them; once on those sites, their own policies apply.
8. Your rights
You may at any time request access to your data, its rectification, erasure, restriction of processing or portability, object to processing based on our legitimate interest and withdraw your consent (newsletter), without affecting prior processing.
Write to us at info@lapetitevache.be or by post to one of the addresses in Article 1. We may ask you to prove your identity, and we will reply within one month. You may also lodge a complaint with the Data Protection Authority, rue de la Presse 35, 1000 Bruxelles.
9. Security
We take appropriate technical and organisational measures to protect your data: encrypted connection across the whole website, access limited to authorised persons, login to the customer area with a one-time code. As no system is infallible, we adapt these measures to the risks and would inform you of any incident affecting you, as required by law.
10. Changes
We may amend this policy to reflect legal or technical developments or changes to our services. The date of the latest version appears at the top of the page. See also our terms and conditions of sale.
