Privacy Policy — Noble Ark BV

Last updated: 11 August 2026

Noble Ark BV places great importance on protecting your personal data. This Privacy Policy explains which personal data we collect, why we collect it, how we use it, with whom we may share it, and what rights you have.

This Privacy Policy applies to the website, online store, online account environment, and other services provided by Noble Ark BV (collectively, the “Services”).

Noble Ark BV processes personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Belgian legislation.

By using our website or Services, you acknowledge that you have read this Privacy Policy.

1. Who Are We?

The data controller responsible for processing your personal data is:

Noble Ark BV
Registered office: John Kennedylaan 33, 2520 Ranst, Belgium
Company number: BE1029424574
Email: info@noble-ark.com
Website: noble-ark.com

Noble Ark BV determines the purposes and means of processing your personal data and is therefore the data controller for the processing activities described in this Privacy Policy.

If you have any questions about the processing of your personal data or wish to exercise your privacy rights, you can contact us using the email address above.

2. What Personal Data Do We Collect?

Depending on how you use our Services, we may process different categories of personal data.

2.1 Identification and Contact Information

This may include:

• first and last name
• company name
• billing address
• shipping address
• email address
• telephone number
• VAT number, where applicable
• other contact information you provide to us

2.2 Account Information

When you create an account, we may process:

• username
• email address
• password information
• account preferences
• order and account history
• information about products and Services associated with your account

Passwords are not stored in plain text but are processed using appropriate security measures.

2.3 Order and Transaction Information

When you place an order or carry out another transaction, we may process:

• products ordered
• quantities
• prices
• order number
• order and delivery information
• billing information
• payment status
• return and refund information
• previous orders and transactions

2.4 Payment Information

Payments may be processed by external payment service providers.

Noble Ark BV does not necessarily receive or store all complete payment details, such as the full number of a payment card. Depending on the payment method selected, payment information may be processed directly by the relevant payment service provider.

2.5 Communication Information

When you contact us, for example by email, through a contact form, or via customer service, we may process the information you provide during that communication.

2.6 Technical and Usage Information

When you visit our website, certain technical information may be collected automatically, including:

• IP address
• device type
• operating system
• browser type
• language settings
• pages visited
• date and time of your visit
• referring website
• information about your interaction with our website

Some of this information may be collected through cookies and similar technologies. For more information, please refer to our Cookie Policy.

3. How Do We Use Your Personal Data?

We process your personal data only for specific and legitimate purposes.

3.1 Processing and Fulfilling Orders

We use personal data to:

• process your order
• process payments
• deliver products
• issue invoices
• process returns and refunds
• keep you informed about the status of your order
• provide customer service
• perform our agreement with you

The primary legal basis for this processing is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.

3.2 Creating and Managing Your Account

When you create a personal account, we use your personal data to:

• create and manage your account
• provide you with access to your personal account environment
• display your selected or available products
• maintain your order history
• store your preferences
• protect the security of your account

Depending on the specific processing activity, the legal basis may be the performance of a contract or our legitimate interests.

3.3 Personalised Services

Noble Ark BV may use personal data to better tailor the Services to your use and preferences.

This may include:

• displaying products relevant to your account
• remembering your preferences
• improving the user experience
• personalising certain parts of our website or account environment

Where consent is required, we will request your consent in advance.

3.4 Customer Service and Communication

We may use your data to:

• answer questions
• provide support
• provide information about your order
• resolve issues relating to your account or order
• communicate with you regarding our Services

Depending on the nature of the communication, the legal basis may be the performance of a contract, a legal obligation, or our legitimate interests.

4. Marketing and Commercial Communications

Where you have provided consent, we may use your personal data to send you commercial communications, for example via:

• email
• SMS
• other electronic communication channels

These communications may relate to products, offers, news, promotions, or other commercial information from Noble Ark BV.

Where permitted by applicable law, we may rely on our legitimate interests for certain forms of direct marketing. In all cases, you have the right to object to direct marketing at any time and free of charge.

You can, for example, unsubscribe by using the “unsubscribe” link included in a marketing email.

If you withdraw your consent to marketing, this will not affect the lawfulness of processing carried out before your consent was withdrawn.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

These technologies may be used for purposes including:

• ensuring the technical operation of the website
• remembering preferences
• analysing the use of our website
• improving our Services
• marketing and personalised advertising

Where legally required, non-essential cookies will only be placed after you have provided your consent.

You can manage your cookie preferences through our cookie settings.

For more information, please refer to our separate Cookie Policy.

6. Legal Bases for Processing

We process personal data only when there is a valid legal basis for doing so.

Depending on the circumstances, this may include:

Performance of a Contract

Where processing is necessary to perform a contract with you, for example to process and deliver an order.

Legal Obligation

Where we are legally required to process certain personal data, for example to comply with accounting, tax, or other legal obligations.

Legitimate Interests

Where processing is necessary for a legitimate interest pursued by Noble Ark BV or a third party, provided that your interests, fundamental rights, and freedoms do not override those interests.

When relying on this legal basis, we carry out a balancing assessment in accordance with applicable law.

Consent

Where required by law, we will request your prior, specific, informed, and unambiguous consent.

You may withdraw your consent at any time. Withdrawal of consent must be as easy as giving consent.

7. Who Do We Share Your Personal Data With?

We do not sell your personal data.

We may share your personal data with third parties where this is necessary for the purposes described above and where there is a valid legal basis for doing so.

This may include:

Shopify

Our online store is powered by Shopify. Shopify may process personal data in connection with providing, securing, and improving the online store infrastructure.

Payment Service Providers

When you make a payment, personal data may be processed by the payment service provider used for the relevant payment method.

Shipping and Logistics Partners

To deliver your order, we may share necessary information, such as your name, shipping address, and contact details, with carriers and logistics providers.

IT and Technical Service Providers

We may use external service providers for purposes including:

• hosting
• cloud storage
• website management
• IT security
• software services
• technical support
• data analysis

Marketing and Analytics Partners

Where legally permitted and, where required, after obtaining your consent, we may use external services for analytics, marketing, and advertising.

Professional Advisers

We may share personal data with professional advisers, such as accountants, lawyers, or other advisers, where necessary for our business operations or to comply with legal obligations.

Government Authorities

We may disclose personal data where we are legally required to do so or where this is necessary to protect or exercise our legal rights.

8. Data Processors

Where third parties process personal data on behalf of Noble Ark BV, we will enter into appropriate data processing agreements where required by law.

Such processors may only process personal data in accordance with our instructions and for the purposes for which they have been engaged.

We take appropriate measures to ensure that personal data is processed and protected appropriately.

9. International Transfers of Personal Data

Some of our service providers may process personal data outside Belgium or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that such transfers are carried out in accordance with Chapter V of the GDPR.

Depending on the circumstances, transfers may be based on:

• an adequacy decision issued by the European Commission
• Standard Contractual Clauses (SCCs) approved by the European Commission
• other legally permitted transfer mechanisms

Where required, we can provide you with additional information regarding the safeguards used for such transfers.

10. How Long Do We Retain Your Personal Data?

We do not retain your personal data for longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The exact retention period depends on the nature of the data and the purpose for which it is processed.

Examples include:

• Order and invoice data: for the statutory accounting and tax retention period
• Account data: for as long as your account remains active, unless we are legally required to retain certain data for a longer period
• Customer service communications: for as long as necessary to handle your request or case and to address potential disputes
• Marketing data: until you unsubscribe or object, or until the data is no longer necessary
• Technical data and cookies: in accordance with applicable cookie settings and retention periods

When personal data is no longer necessary, it will be deleted or anonymised unless legal obligations require longer retention.

11. Security

Noble Ark BV takes appropriate technical and organisational measures to protect personal data against:

• unauthorised access
• loss
• destruction
• alteration
• disclosure
• other forms of unlawful processing

Although we take reasonable security measures, no method of electronic storage or transmission can guarantee complete security.

12. Your Rights Under the GDPR

Depending on the circumstances and applicable legal requirements, you may have various rights regarding your personal data.

Right of Access

You have the right to request information about which personal data we process about you and to receive a copy of such data.

Right to Rectification

You have the right to have inaccurate or incomplete personal data corrected.

Right to Erasure

In certain circumstances, you may request that your personal data be deleted.

This right is not absolute. For example, we may be legally required to retain certain data.

Right to Restriction of Processing

In certain circumstances, you may request that the processing of your personal data be temporarily or partially restricted.

Right to Object

Under certain circumstances, you may object to the processing of your personal data.

In particular, you have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing. Following such an objection, your personal data may no longer be processed for those purposes.

Right to Data Portability

Where the legal requirements are met, you have the right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format and, where technically feasible, to have that data transmitted directly to another data controller.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent supervisory authority if you believe that your personal data is not being processed in accordance with applicable data protection law.

13. How Can You Exercise Your Rights?

You can submit a request by contacting us at:

Email: info@noble-ark.com

When submitting your request, please preferably include:

• your name
• the email address associated with your account or known to us
• the right you wish to exercise
• sufficient information for us to process your request

We may request additional information to verify your identity. This is intended to prevent personal data from being disclosed to an unauthorised person.

We process requests relating to your privacy rights in accordance with the applicable legal deadlines. In principle, a request must be handled within one month. In complex cases, this period may, subject to the conditions of the GDPR, be extended by a maximum of two additional months.

14. Complaints to the Belgian Data Protection Authority

If you believe that we are not processing your personal data correctly, we recommend that you contact us first so that we can attempt to resolve the issue.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (DPA).

Data Protection Authority
Drukpersstraat 35
1000 Brussels
Belgium
Tel.: +32 (0)2 274 48 00
Email: contact@apd-gba.be

15. Children's Data

Our Services are not specifically directed at children.

We do not knowingly collect personal data from children where we know that they do not have the legal capacity to provide valid consent where consent is required.

If you believe that a child has provided personal data to us without the required consent, please contact us so that we can take appropriate measures.

16. Automated Decision-Making and Profiling

We may use certain personal data to personalise our Services, for example by making products or content more relevant to you.

We will not subject you to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, unless there is a valid legal basis for doing so and such processing is permitted under the GDPR.

Where such processing takes place and you have rights under applicable law, we will provide you with the information required by the GDPR.

17. Links to Third-Party Websites

Our website may contain links to websites, applications, or services operated by third parties.

We are not responsible for the privacy practices, content, or security of third-party websites.

We recommend that you carefully review the privacy policy of any third-party website you visit.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business operations, technology, or applicable legislation.

When we make changes, we will publish the updated version on this page and update the “Last updated” date at the top of this Privacy Policy.

We recommend that you review this Privacy Policy regularly.

19. Contact

If you have any questions about this Privacy Policy, how we process personal data, or if you wish to exercise any of your privacy rights, please contact us:

Noble Ark BV
Registered office: John Kennedylaan 33, 2520 Ranst, Belgium
Company number: BE1029424574
Email: info@noble-ark.com

Last updated: 11 August 2026