Privacy Policy | Order Online

Last updated: 4 November 2026

At Fewa Fish we take your privacy seriously. This policy explains what personal data we collect when you visit fewafish.be, shop with us online or in store, order as a business customer or use the Fewa Fish app, why we do so, and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian privacy law.

1. Who we are

The controller responsible for your personal data is:

Fewa Fish BV

Wingepark 37, 3110 Rotselaar

Enterprise number (KBO/VAT): [BE1005129539]

Email: info@fewafish.be

For any question about this policy or your personal data, email us at info@fewafish.be.

2. What data we collect and why

We only collect the data we need for the purposes below. For each purpose we state the legal basis under Article 6 of the GDPR.

2.1 Visiting our website

Data: IP address, browser and device type, pages visited, language preference, date and time of your visit, and your cookie choice.
Why: to show the website correctly, remember your language and shopping cart, keep the site secure and fix technical problems.
Legal basis: our legitimate interest in running a secure, working website. For optional cookies: your consent (see Cookies).

2.2 Contact form and business enquiries

Data: name, email address, phone number (optional), company name (business form), subject and your message.
Why: to answer your question, prepare a quote or follow up on your request.
Legal basis: steps taken at your request before entering into a contract, or our legitimate interest in answering your questions.

2.3 Customer account and online orders

Data: name, email address, phone number, billing and delivery address, password (stored encrypted, never visible to us), the products you order, your choice of click & collect or delivery, order history, wishlist and invoices.
Why: to create and manage your account, process and prepare your order, deliver it or have it ready for pickup, send order confirmations and updates, invoice you and handle questions, returns or complaints.
Legal basis: performance of our contract with you. Keeping invoices and accounting records: our legal obligation.

2.4 Payments

Data: payment method, amount, transaction reference and payment status.
Why: to process your payment and link it to your order or invoice.
Legal basis: performance of our contract with you, and our legal obligation to keep accounting records.

Online payments are handled by our payment provider [name of payment provider, e.g. Mollie or Stripe]. Your card or bank details are entered on their secure systems; we never see or store your full card number.

2.5 Business customers (restaurants and companies)

Data: company name, VAT number, billing and delivery addresses, names and contact details of your contact persons, customer-specific prices, order history, invoices and payment status.
Why: to manage our business relationship, process and deliver your orders, invoice you, follow up on payments and give you access to your business account in our webshop and app.
Legal basis: performance of our contract with your company, our legal obligations (accounting and tax), and our legitimate interest in maintaining the business relationship.

2.6 Orders by phone, SMS, WhatsApp or email

Data: your phone number or email address, your name and the content of your messages or order.
Why: to receive and process your order and to communicate with you about it.
Legal basis: performance of our contract with you or your company.

If you contact us via WhatsApp, WhatsApp (operated by Meta) also processes your data under its own privacy policy.

2.7 The Fewa Fish app

The Fewa Fish app for iOS and Android lets you browse our range, order, follow your orders and view and pay your invoices.

Data: your account details (name, email address, phone number, addresses), orders, order history, invoices and payment status, and technical data needed to run and secure the app, such as device type, operating system version, app version and error logs. If you allow notifications, we also store a device token so we can send you order updates.
Why: to provide the app's features, show your own prices and order history, send you order updates and keep the app working and secure.
Legal basis: performance of our contract with you or your company, and our legitimate interest in a secure, working app. Notifications: your consent, which you can withdraw at any time in your phone's settings.

When you download the app, Apple (App Store) or Google (Google Play) processes data under their own privacy policies.

2.8 News and offers

Data: name and email address.
Why: to inform you about our products, promotions and news.
Legal basis: your consent, or, if you are already a customer, our legitimate interest in informing you about similar products.

Every marketing email contains an unsubscribe link, and you can opt out at any time by emailing us. We never sell your personal data.

2.9 Google reviews

If you click the link to leave a Google review, you are taken to Google. Google processes your data under its own privacy policy, and your review is publicly visible on Google.

3. Cookies

Cookies are small text files stored on your device when you visit a website. When you first visit fewafish.be, our cookie banner asks for your choice.

Essential cookies are needed for the website to work: keeping you signed in, remembering your shopping cart and language (for example session_id and frontend_lang), and remembering your cookie choice. These are always active, because the website does not work without them.
Optional cookies, such as cookies that help us understand how visitors use the website, are only placed if you click "I agree". If you choose "Only essentials", we do not place them.

You can change your choice at any time by deleting the cookies for fewafish.be in your browser settings; the banner will then appear again on your next visit.

4. Who we share your data with

We only share your data when this is needed for the purposes above, and only with parties that protect it properly:

Our software and hosting provider: our website, webshop and business administration run on Odoo, hosted by [Odoo S.A. / name of your hosting provider].
Payment provider: to process online and in-app payments (see 2.4).
Delivery: our own drivers, or a delivery partner where needed, receive your name, delivery address and phone number to deliver your order.
Our accountant and other professional advisers, for bookkeeping and legal or tax obligations.
IT and app service providers who help us build, maintain and support our website and app.
Authorities, such as the tax authorities, when we are legally required to share data.

Service providers that process data on our behalf may only use it on our instructions and are bound by a data processing agreement.

5. Transfers outside the EU

We aim to keep your data within the European Economic Area (EEA). Some providers we work with, such as Google, Apple or Meta (WhatsApp), may process data outside the EEA. In that case the transfer is protected by appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. How long we keep your data

We do not keep your data longer than necessary:

Data	Retention period
Orders, invoices and accounting records	10 years, as required by Belgian accounting and tax law
Customer account (webshop and app)	As long as your account is active. We delete or anonymise accounts that have not been used for 3 years, except data we must keep by law.
Business customer contact persons	For the duration of the business relationship and up to 3 years after it ends
Contact form and quote requests	Up to 2 years after our last contact, unless they lead to an order or contract
Marketing emails	Until you unsubscribe or withdraw your consent
Cookies	Session cookies until you close your browser; other cookies for a maximum of 12 months

7. How we protect your data

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses an encrypted (HTTPS) connection, passwords are stored encrypted, payment details are handled by our payment provider, and only staff who need your data for their work have access to it.

8. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you and receive a copy;
Rectify data that is incorrect or incomplete;
Erase your data, unless we must keep it by law (for example invoices);
Restrict how we process your data;
Object to processing based on our legitimate interest, and to direct marketing at any time;
Data portability: receive the data you gave us in a commonly used format, or have it sent to another company;
Withdraw your consent at any time, where processing is based on consent. This does not affect processing that took place before.

To exercise your rights, email info@fewafish.be. We may ask you to confirm your identity. We will respond within one month; for complex requests this may be extended by two more months, in which case we will let you know. Exercising your rights is free of charge.

9. Complaints

If you are not satisfied with how we handle your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit / Autorité de protection des données

Drukpersstraat 35, 1000 Brussels, Belgium

Phone: +32 2 274 48 00

Email: contact@apd-gba.be

Website: www.dataprotectionauthority.be

10. Children

Our webshop and app are intended for adults and businesses. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this privacy policy, for example when we add new services or when the law changes. The latest version is always available on this page, with the date of the last update at the top. If we make important changes, we will inform you by email or through the app.

Contents