Last updated: June 2026
1. Who we are
MagicFancyWorks is responsible for processing personal data as described in this privacy policy.
Controller: MagicFancyWorks
Address: Churchilllaan 150 bus 2, 2900 Schoten, Belgium
Contact: contact form
2. What data do we collect?
- Name and email address — via PayPal when ordering
- Shipping address — only for physical products
- Order details — product, amount, order ID, language, order type and invoice details you enter
- Newsletter data — email address and consent status if you subscribe to the newsletter
- IP address and browser data — automatically via Cloudflare (hosting and security)
3. Why do we collect this data?
- To process and deliver orders: performance of a contract
- To send you a download link: performance of a contract
- To send a newsletter: consent via double opt-in
- To contact you in case of problems: legitimate interest
- To comply with legal obligations: legal obligation
- To secure the shop and prevent fraud: legitimate interest
4. How long do we keep data?
- Order and invoice data: 7 years (legal/accounting obligation)
- Newsletter data: until you unsubscribe or the confirmation expires
- Download links: 24 hours, then automatically deleted
- Server logs (Cloudflare): maximum 30 days
5. Who do we share data with?
- PayPal — for payment processing
- Resend — for sending emails
- Cloudflare — for hosting, delivery and security
We never sell your data to third parties.
These service providers may process data outside the EEA subject to their own contractual and technical safeguards.
6. Your rights
Under GDPR, you have the right to access, rectification, erasure, restriction, portability, and objection.
Contact us at contact.
7. Security
- HTTPS connection (SSL/TLS) for all communication
- No storage of payment data (PayPal handles this)
- Secured Worker secrets for sensitive information
8. Cookies
See our Cookie Policy for more information. We use necessary cookies and local storage for language preference, cart state and consent status.
9. Complaints
For complaints: gegevensbeschermingsautoriteit.be