Last updated: 24 June 2026

Not Just Salt BV ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. It applies to your use of our website notjustsalt.com (the "Website") and our products and services. This policy is provided in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or "GDPR") and applicable Belgian data protection law.

Who we are

The party responsible for processing your personal data (the data controller) is Not Just Salt BV, with registered office at Plantin en Moretuslei 155A, 2140 Borgerhout, Belgium, company number BE 1022.450.472. If you have any questions about this policy or how we handle your data, you can contact us at info@itsnotjustsalt.com.

What personal data we collect

We only collect the data we need to run our webshop and serve you. Depending on how you interact with us, this may include data you provide directly to us, such as your name, email address, delivery and billing address, and phone number; information about your orders, including the products you purchase and your order history; payment information, which is processed securely by our payment providers (we do not store full card details ourselves); your account details and preferences if you create an account; any information you share when you contact us; and your marketing preferences, such as your consent to receive our newsletter.

We also collect some data automatically when you use the Website, including technical data such as your IP address, browser type and device information; usage data such as the pages you visit and the actions you take on the Website; and data collected through cookies, as described in the Cookies section below.

We do not intentionally collect special categories of data such as health data. Please do not send us sensitive personal information unless we specifically request it and there is a clear legal basis for it.

Why we use your data and our legal basis

Under the GDPR we must have a valid legal basis for everything we do with your data. We process your data to fulfil and deliver your orders, handle payments, and provide customer service, which is necessary to perform our contract with you. We process it to create and manage your account, again to perform our contract with you. We send you our newsletter and promotional emails only on the basis of your consent, which you can withdraw at any time. We process certain data to comply with legal obligations such as accounting, tax, and consumer law requirements. And we process technical and usage data to improve our Website, analyse how it is used, and keep it secure, on the basis of our legitimate interests, balanced against your rights. Non-essential cookies, such as advertising cookies, are used only on the basis of your consent.

How long we keep your data

We keep your personal data only for as long as necessary for the purposes described above, or as required by law. Order and invoice data is retained for 7 years, in line with Belgian accounting and tax requirements. Account data is kept for as long as your account is active and is deleted after 5 years of inactivity, or sooner if you ask us to delete it. Newsletter data is kept until you unsubscribe or withdraw your consent.

Cookies and tracking technologies

Our Website uses cookies and similar technologies. Cookies are small files stored on your device. Essential cookies are necessary for the Website to function, for example to remember the contents of your shopping cart, and these do not require consent. Non-essential cookies, such as advertising and tracking cookies (including the Meta pixel, which helps us measure and improve our advertising on platforms like Facebook and Instagram), are only placed with your prior consent, which you give through the cookie banner when you first visit the Website. You can change or withdraw your cookie preferences at any time through the cookie settings on our Website, or by adjusting your browser settings.

Who we share your data with

We do not sell or rent your personal data. We share it only with the parties that help us operate, and only as far as necessary. These include our payment providers Stripe and PayPal, which process payments securely; our delivery partner CareFulfil, which handles shipping and delivery of your orders; our webshop and hosting platform Shopify, which runs the Website; our email and marketing platform Klaviyo, which sends the communications you have consented to; and Meta, in connection with the advertising pixel described above. We may also share data with our professional advisors, such as our accountant, and with public authorities where we are required to do so by law. All of these partners are bound by agreements requiring them to protect your data and to use it only on our instructions.

International data transfers

Some of our service providers may process data outside the European Economic Area, for example certain providers such as Meta, Stripe, or Klaviyo that are based in or transfer data to the United States. Where this happens, we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data continues to be protected to EU standards.

Your rights

Under the GDPR you have a number of rights regarding your personal data. You have the right to access the data we hold about you; the right to have inaccurate or incomplete data corrected; the right to have your data erased in certain circumstances, also known as the right to be forgotten; the right to restrict how we process your data; the right to receive your data in a structured, machine-readable format and to have it transferred; the right to object to processing based on our legitimate interests, and to object to direct marketing at any time; and the right to withdraw your consent at any time where our processing is based on consent, without affecting the lawfulness of processing carried out before you withdrew it. To exercise any of these rights, contact us at info@itsnotjustsalt.com, and we will respond within the timeframes required by law, generally one month.

If you believe we have not handled your data correctly, you also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussel, contact@apd-gba.be, www.gegevensbeschermingsautoriteit.be.

How we protect your data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access, including secure encrypted connections (HTTPS/SSL), access controls, and secure hosting through our platform providers. While no method of transmission over the internet is completely secure, we work to protect your data using industry-standard practices.

Children's privacy

Our Website and products are intended for adults and are not directed at children. We do not knowingly collect personal data from children under the age of 16 without parental or guardian consent. If you believe we have inadvertently collected data from a child, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version, and we encourage you to review this page periodically. Where changes are significant, we will communicate them as appropriate.

Contact

For any questions, requests, or concerns about this Privacy Policy or your personal data, please contact Not Just Salt BV, Plantin en Moretuslei 155A, 2140 Borgerhout, Belgium, or email us at info@itsnotjustsalt.com.