The website www.lendfers.be (hereinafter: the “Website”) is the trade ordering platform of:

Lendfers BV (hereinafter “Lendfers”, “we”, “us” and “our”)
Dumortierlaan 115
8300 Knokke-Heist
Belgium
Company and VAT number: BE 0880.438.316

E-mail: info@lendfers.be
Telephone: +32 50 60 76 53

Lendfers BV is the company behind the brands Oscar Luxury (handmade scented candles and refills) and Monroe Life (patchwork sheepskin rugs). Through the Website we sell exclusively to trade customers: retailers, hospitality businesses, interior architects and other companies. Our consumer web shops oscar.luxury and monroe.life have a separate privacy policy, which you will find on those websites.

Do you have a question about your privacy? Please feel free to contact us. We will reply as soon as possible.

1. Why this privacy policy?

Anyone who visits the Website (hereinafter: the “Visitor”) or registers as a trade customer and orders from us (hereinafter: the “Partner”) almost always shares certain personal data with us. Personal data is any information that allows us to identify you directly or indirectly as a natural person, such as your name, e-mail address or telephone number. Even when you act on behalf of a company, the details of the contact person remain personal data.

We process your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016, hereinafter the “GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

With this privacy policy we inform you about which personal data we process, why we do so, how long we keep it and which rights you have. We may amend this privacy policy, for example when our services or the legislation change. We will notify our Partners of important changes by e-mail or through a notice on the Website. The most recent version is always available on this page; we recommend that you consult it regularly.

2. Who processes your personal data?

2.1 Controller

Lendfers BV determines which personal data is collected and for what purpose and by what means it is processed. Lendfers is therefore the “controller” within the meaning of the GDPR. For all questions about the processing of your personal data, please contact info@lendfers.be.

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, use or disclosure. The Website runs exclusively over a secure connection (https), the administration area is protected and the Website’s software is updated regularly. Access to customer and order data is limited to the staff and service providers who need it for their tasks. We store your password only in encrypted form and we will never ask you for it.

2.2 Processors

Lendfers uses carefully selected “processors”: companies that process personal data on our behalf and in accordance with our instructions, and that are obliged to safeguard the security and confidentiality of that data. These fall into the following categories:

  • companies for the hosting, maintenance, security and technical support of the Website, including Automattic (Jetpack and related WooCommerce services) and Cloudflare (protection of forms and the login page against spam and abuse);
  • companies for administrative purposes, such as our accounting firm and our invoicing and accounting software;
  • companies for logistics purposes, such as the transport and courier companies that deliver your order;
  • companies for payment purposes, such as our bank and, when you choose to pay online, the payment service provider that handles the payment;
  • companies for sending e-mails and commercial communications;
  • companies for analysing the use of the Website (visitor statistics).

Where the GDPR requires it, we conclude a data processing agreement with these processors, so that they apply the same data protection standards as Lendfers.

Some of these service providers are established outside the European Economic Area (EEA), in particular in the United States. Personal data is transferred to a country outside the EEA only if the European Commission has recognised that country as providing an adequate level of protection, if the recipient is certified under the EU-US Data Privacy Framework, or if we have concluded the European Commission’s standard contractual clauses with the recipient and, where necessary, put additional safeguards in place.

3. On which legal bases do we process your personal data?

We process personal data exclusively on one of the following legal bases under the GDPR:

  • the performance of the contract with the Partner, or taking steps at your request prior to entering into that contract: handling your registration as a Partner, managing your account, processing and delivering orders and answering your questions;
  • compliance with legal obligations, in particular the accounting, tax and VAT obligations connected with the business relationship with the Partner (invoicing, retention of accounting records, verification of VAT numbers);
  • our legitimate interest in answering requests and questions from Visitors and Partners, in selling exclusively to trade customers and checking applications accordingly, in keeping the Website secure and functioning properly, in preventing fraud and abuse, and in protecting our rights in the event of a dispute;
  • our legitimate interest in keeping our Partners informed about our brands, collections, new products and offers (direct marketing to existing customers), from which you can unsubscribe at any time free of charge;
  • your explicit consent, for example when you sign up as a Visitor for commercial communications or if we were to place non-essential cookies. You can withdraw consent at any time.

4. Which personal data do we process?

Lendfers collects and processes only the personal data that is relevant and necessary for the purposes for which it is processed. Which data we process about you depends on how you use the Website: a Visitor generally shares far less data than a Partner who has an account and places orders.

Partners

  • identification data: surname and first name of the contact person, position, username and (encrypted) password;
  • contact details: e-mail address, telephone and mobile number;
  • company details: company name, VAT number (company number), country and type of business (e.g. retailer, hospitality, interior architect), and, upon approval of your application or your first order, the delivery and invoicing address;
  • order and invoicing data: products ordered, order history, invoices, delivery information and payment tracking;
  • payment data: when you pay by bank transfer we see your account number and the payment reference on our bank statement; when you pay online, the payment service provider processes your card or account details and we receive only confirmation of the payment;
  • personalisation data: the texts, names or logos you provide for personalised products, such as your own text on the label of a candle;
  • communication data: the content of our e-mails, telephone calls, WhatsApp messages and other contacts, for example in the context of customer service, complaints or after-sales;
  • electronic identification data: IP address, browser and device data, time of visit, cookies and log files.

We collect this data when you register as a Partner, when we assess your application, when you place an order and when you communicate with us. Additional data may also be collected later, for example in the event of a complaint, a return or a change to your details.

Visitors

  • identification and contact details that you provide yourself when you ask us a question by e-mail, telephone, WhatsApp or a form on the Website: surname, first name, company name, e-mail address and telephone number;
  • electronic identification data: IP address, browser and device data, time of visit, cookies and log files.

If you contact us via WhatsApp, WhatsApp (Meta) also processes certain data about that contact in accordance with its own privacy policy.

Under no circumstances do we collect sensitive personal data, such as data on racial or ethnic origin, political opinions, religious or philosophical beliefs, health or sexual orientation. We therefore ask you not to share such data with us.

You provide most of your personal data to us yourself and thus retain a degree of control over it. Where the required data is missing, inaccurate or incomplete, Lendfers may suspend or refuse a registration, order or other processing.

5. For which purposes do we use your personal data?

The processing of your personal data is necessary for the proper functioning of the Website and for our services to trade customers. We process your data exclusively for the following specific purposes.

Partners

  • assessment of your application: checking whether your company qualifies as a trade customer, including by verifying your VAT number through VIES, the European Commission’s VAT Information Exchange System;
  • management of your account and of the business relationship: administration, order management, deliveries, invoicing, monitoring of payments and of the payment terms granted, customer service, complaints and after-sales;
  • production of personalised products according to the data you provide;
  • commercial communications about our brands, collections, new products and offers; you can unsubscribe at any time via the link in every e-mail or by sending us a message.

Visitors

  • answering your questions and requests, for example when you ask for information about working with us as a Partner;
  • commercial communications, only if you have expressly consented to them; you can withdraw that consent at any time.

Visitors and Partners

  • the management of disputes and the protection of our rights;
  • the protection of the Website and of Lendfers against fraud, abuse and infringements.

We also use cookies to make the Website function properly, to recognise you as a logged-in Partner, to remember your shopping cart and language choice, and to detect and fix errors. You can read more about this in section 11. When you visit the Website we also collect some data for statistical purposes, such as the presumed region, the time of the visit and the pages viewed, in order to improve the use of the Website. These statistics are aggregated and cannot be traced back to you.

6. Who receives your personal data?

Your personal data is primarily used internally within Lendfers BV, for our brands Oscar Luxury and Monroe Life. We never sell your personal data and do not pass it on to third parties, except:

  • to the processors mentioned in section 2.2, to the extent necessary for them to carry out their assignment;
  • where the transfer is necessary for the performance of the contract, for example to the carrier that delivers your order;
  • where we are legally obliged to do so, for example towards the tax authorities or judicial authorities;
  • where you have given us your explicit prior consent to do so.

7. How long do we keep your personal data?

We do not keep your personal data for longer than is necessary for the purposes for which it was collected, or than is required by law. Specifically:

  • data of your Partner account: for as long as your account is active and thereafter for up to ten years after your last order or your last contact with us, in line with the statutory retention period for accounting records and the limitation period for contractual claims; after that we delete or anonymise it;
  • registrations that were not approved or not completed: no longer than twelve months after the application;
  • orders, invoices, proof of payment and other accounting records: ten years, in accordance with Belgian accounting and VAT legislation;
  • data for personalised products: as part of your order history, so that you can easily reorder; you can ask us to delete it earlier;
  • questions and messages from Visitors: up to twelve months after the last communication, unless a business relationship results from it;
  • data for commercial communications: until you unsubscribe or withdraw your consent;
  • technical log files and security data: no longer than twelve months;
  • cookies: the retention period of each cookie is set out in section 11.

As soon as the retention period has expired or you validly exercise your right to erasure, we delete the data from our systems or anonymise it. Deleted data may remain temporarily in backups, which are overwritten according to a fixed cycle.

8. What are your rights?

8.1 Right to lawful and secure processing

Your personal data is always processed for the legitimate purposes set out in section 5, in an appropriate, relevant and proportionate manner, and is not kept for longer than necessary to achieve those purposes.

8.2 Right of access

You have the right to obtain confirmation from us as to whether or not we process personal data concerning you and, where that is the case, to access that data and receive a copy of it, together with information about the purposes, the categories of data, the recipients, the retention period and the source of the data. As a Partner, you can also consult most of your data directly in your account on the Website.

8.3 Right to rectification

Inaccurate or incomplete data can be corrected or completed. As a Partner, you can change most data yourself in your account (“My account”); for other changes, for example to your company name or VAT number, please send us a request. We ask you to keep your details up to date, so that invoices and deliveries are correct.

8.4 Right to erasure

In the following cases you can ask us to erase your personal data:

  • the data is no longer necessary for the purposes for which it was collected;
  • you withdraw your consent and there is no other legal basis for the processing;
  • you have validly objected to the processing;
  • the data is being processed unlawfully;
  • the data must be erased to comply with a legal obligation.

Data that we are legally required to keep, such as invoices and accounting records, cannot be erased before the end of the statutory retention period. After erasure, data may remain temporarily in backups.

8.5 Right to restriction of processing

In certain cases you can ask us to restrict the processing of your personal data: while we verify the accuracy of data you contest, where the processing is unlawful but you do not want the data erased, where you need the data for a legal claim, or while we assess whether our legitimate interest overrides your objection.

8.6 Right to object

You can object at any time to the processing of your personal data for direct marketing; we will then stop that processing immediately. You can also object, on grounds relating to your particular situation, to other processing based on our legitimate interest. We will then cease the processing, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is necessary for a legal claim.

8.7 Right to data portability

You have the right to receive the personal data that you have provided to us and that we process on the basis of the contract or your consent in a structured, commonly used and machine-readable format, and, where technically possible, to have it transmitted directly to another controller.

8.8 Right to withdraw your consent

Where processing is based on your consent, you can withdraw that consent at any time, for example for commercial e-mails or non-essential cookies. Withdrawal does not affect the lawfulness of the processing carried out before the withdrawal. Data that we need for the performance of a contract or for a legal obligation may continue to be processed after withdrawal.

8.9 No automated decision-making

We do not make any decisions based solely on automated processing, including profiling. Every application to become a Partner is assessed by a member of the Lendfers team.

9. How can you exercise your rights?

To exercise your rights, send a written request to Lendfers BV, Dumortierlaan 115, 8300 Knokke-Heist, Belgium, or an e-mail to info@lendfers.be. To prevent someone else from requesting your data, we may ask you to prove your identity, for example by replying from the e-mail address of your account or by providing a copy of your identity document on which you have masked the unnecessary details (such as your national register number and photo).

We will respond as soon as possible and at the latest within one month of receiving your request. For complex or numerous requests, this period may be extended by two months; we will inform you if this is the case. Exercising your rights is in principle free of charge.

10. Complaints

If you have comments or complaints about the way we handle your personal data, we ask you to report them to us first via info@lendfers.be, so that we can find a solution together.

If you remain dissatisfied afterwards, you have the right to lodge a complaint with the supervisory authority. For Lendfers BV this is the Belgian Data Protection Authority:

Data Protection Authority (Gegevensbeschermingsautoriteit)
Drukpersstraat 35, 1000 Brussels, Belgium
+32 (0)2 274 48 00
contact@apd-gba.be
www.dataprotectionauthority.be

If you are established in another Member State of the European Union, you can also contact the supervisory authority of your own country.

11. Cookies

A cookie is a small text file that is placed on your computer, tablet or smartphone when you visit the Website. The Website primarily uses essential cookies, without which the Website does not function properly:

  • cookies of the web shop software (WooCommerce) that remember your shopping cart and your session (including woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session; up to 2 days);
  • WordPress cookies that recognise you as a logged-in Partner (including wordpress_logged_in and wordpress_sec; until the end of your session, or 14 days if you tick “Remember me”);
  • a cookie that stores your language choice (pll_language; 1 year);
  • Cloudflare cookies that protect the login page and forms against spam and abuse (including __cf_bm; 30 minutes).

If you choose to pay online at checkout, the payment service provider may place its own cookies to secure the payment; these are covered by its privacy policy.

We do not place any advertising or tracking cookies. Should we use non-essential cookies in the future, for example for statistics or marketing, we will first ask for your consent via a cookie banner.

You can refuse or delete cookies through your browser settings. Please note that some functions of the Website, such as logging in and the shopping cart, may then no longer work.

12. Changes

We may amend this privacy policy. The most recent version is always available on this page.

Version: 27 September 2026