Privacy policy

Last updated: 19.03.2026

We are committed to ensuring a high level of data protection that safeguards your privacy when you use our website. We aim to ensure that you feel secure when your personal data is processed by us.

This Privacy Policy explains how Mylky BV (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you visit our website, make a purchase, contact us, or otherwise interact with our services. It also explains what your rights are regarding your personal data and how you can exercise those rights.

We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

If you have any questions about this Privacy Policy or the processing of your personal data, please feel free to contact us. Our contact details can be found at the bottom of this page.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

Personal data we collect

To provide our products and services, we may collect and process different types of personal data when you interact with our website or brand.

Information you provide to us

When you place an order, contact us, or interact with our services, you may provide us with information such as:

  • Name
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment details (processed securely through our payment providers)
  • Order information
  • Customer support messages or inquiries
  • Account information, if you create an account

Information collected automatically

When you visit our website, certain information is collected automatically to help us operate and improve our website and services. This may include:

  • IP address
  • Device and browser information
  • Website activity and usage data
  • Referring URLs
  • Cookie identifiers

For more information about how we use cookies and similar technologies, please see our Cookie Policy.

Information from trusted partners

In some cases, we may receive personal data from partners that help us operate our business, such as:

  • Payment service providers
  • Shipping and logistics partners
  • Marketing and analytics platforms
  • Customer service tools

These partners process personal data only as necessary to help us deliver our products and services.

How we use your personal data

We use personal data to operate our business, provide our services, and improve your experience with Mylky. Specifically, we may use your personal data for the following purposes:

Processing and fulfilling orders

To process payments, ship your products, manage returns, and send order confirmations and delivery updates.

Customer support

To respond to your questions, provide assistance, and communicate with you regarding your orders or other requests.

Improving our website and services

To understand how visitors use our website so we can improve functionality, user experience, and our products.

Marketing communications

If you subscribe to our newsletter or otherwise give consent, we may send you emails about new products, offers, or updates. You can unsubscribe at any time.

We may still send transactional or service-related communications concerning your orders even if you opt out of marketing messages.

Security and fraud prevention

To detect, prevent, and investigate fraud, misuse, or other unlawful activities.

Legal and regulatory obligations

To comply with applicable laws, regulations, and accounting requirements.

Legal basis for processing

Under the General Data Protection Regulation, we must have a valid legal basis to process your personal data. Depending on the situation, we rely on one or more of the following legal grounds:

Contractual necessity

We process personal data when it is necessary to fulfill an order or provide a service you have requested.

Legal obligation

In some cases, we are required to process or retain certain information to comply with legal or regulatory obligations, such as tax and accounting requirements.

Legitimate interests

We may process personal data when it is necessary for our legitimate business interests, such as improving our services, analyzing website usage, and preventing fraud or misuse.

Where we rely on legitimate interests, we carefully assess that such interests are not overridden by your fundamental rights and freedoms.

Consent

Where required, we process personal data based on your consent, for example when you subscribe to our newsletter or accept certain cookies. You can withdraw your consent at any time.

The specific legal basis depends on the purpose for which the personal data is processed, as described in the section “How we use your personal data”.

Sharing Personal Data

We may share personal data with third-party service providers that help us operate our business and provide our services. These may include:

  • Payment processors
  • Logistics and shipping providers
  • Website hosting providers
  • Marketing and email service providers
  • Analytics providers
  • Customer support platforms

These parties process personal data on our behalf and only according to our instructions and applicable data protection laws.

We do not sell, rent, or trade personal data to third parties for marketing purposes.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA).

When personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission and, where necessary, additional supplementary safeguards.
  • Transfers to countries recognized as providing adequate data protection
  • Other legally approved safeguards

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations.

Examples of retention periods may include:

  • Order information: retained for up to 7 years to comply with accounting and tax obligations.
  • Customer service communications: retained for as long as necessary to handle your request and for a limited period thereafter for dispute management and service improvement.
  • Marketing data: retained until you unsubscribe or withdraw consent

After the applicable retention period, personal data is securely deleted or anonymized.

Your Rights

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

  • The right to access your personal data
  • The right to request correction of inaccurate data
  • The right to request deletion of your data
  • The right to restrict processing
  • The right to data portability
  • The right to object to certain processing activities
  • The right to withdraw consent at any time

To exercise any of these rights, please contact us at support@mylky.co.

You have the right to lodge a complaint with the Belgian Data Protection Authority or with the supervisory authority in your country of residence

Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

These measures include secure servers, encrypted connections (HTTPS), and access controls.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations.

The latest version will always be available on our website with the updated revision date.

Data controller:

Mylky BV, a private limited liability company incorporated under Belgian law, acting as data controller.

Company number: 1002 835 983

Adress: Bremstraat 54, 3620 Lanaken, Belgium

E-mail: support@mylky.co