OnlyOneOff

Privacy Policy

We collect what we need to make and deliver your order, and nothing we could do without.

Last updated: October 2026

Who is responsible

The data controller is:

Alexandre Englebert (sole proprietorship, trading as OnlyOneOff), Rue Epinette 38, 5032 Gembloux, Belgium — VAT BE 0677.621.709.

For any privacy question or request, write to contact@onlyoneoff.com.

What we collect, and why

• Order details — your name, email address, shipping address, phone number if you give one, the pieces and sizes you bought, and the name you ask us to print on the inside label. We use them to take payment, make and ship your order, and handle after-sales requests. Basis: performing our contract with you.
• Account — your email address and the date you last signed in. Basis: your request to create an account.
• After-sales requests — your messages and any photos you send when you report a problem. Basis: performing our contract with you.
• Newsletter — your email address, only if you tick the box. Basis: your consent, which you can withdraw at any time from your account or from any newsletter.
• Accounting records — invoices and payment references, kept as the law requires.

We do not collect card numbers: payment happens on Stripe's pages. We do not sell or rent your data.

Advertising measurement

We advertise on Meta (Facebook and Instagram). To know which ads lead to orders, our server tells Meta when an order is placed: the amount, the pieces bought, and a scrambled (hashed) form of your email address and delivery city, which Meta can only match against people it already knows. If you came to this site by clicking one of our ads, we also tell Meta the steps you took here (a product viewed, added to cart, checkout started), together with the click identifier from the ad, your IP address and your browser type. We do not place any Meta script or cookie on this site, and we send nothing about visitors who did not arrive from an ad. You can ask us not to share your orders with Meta by writing to us.

Cookies

This site uses a single cookie, strictly necessary for it to work: it remembers your cart, your reservation and whether you are signed in. It expires after 30 days. We place no advertising or third-party cookies, which is why there is no cookie banner.

To know how many people visit, we count page views ourselves, without cookies and without any outside analytics service. Visitors are told apart for a single day by a scrambled fingerprint of their IP address and browser, which cannot be turned back into either and is deleted within two days.

Who we share it with

Only the companies that help us run the shop, and only what each one needs:

• Stripe — payment processing and fraud prevention.
• Printful — production and shipping of your order (name, address, items), and the carrier that delivers it.
• Meta — advertising measurement, as described above.
• MailerLite — delivery of the newsletter, only if you subscribed (your email address).
• MailerSend — delivery of our emails (your email address and the content of the message). Emails may record whether they were delivered and opened.
• Our hosting provider — the server this site runs on.

Some of these companies process data in the United States. Where data leaves the European Economic Area, it is covered by the safeguards the law provides, such as standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

Order and accounting records: for as long as tax and accounting law requires, up to ten years. Account: until you ask us to delete it. After-sales messages and photos: two years after the request is closed. Newsletter subscription: until you unsubscribe. Sign-in links expire after 30 minutes and are stored only in hashed form.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to us and we will answer within one month. If you are in the European Union you may also complain to your data protection authority; in Belgium, the Autorité de protection des données.

If you live in California or another US state with a privacy law, you have comparable rights to know, correct and delete your data, and we will not treat you differently for using them. We do not sell or share personal information as those laws define it.

Children

This shop is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will say so on this page and, where appropriate, by email.