Privacy policy
PRIVACY POLICY
Last updated: April 2026
Controller: WOWHOOKAH
Contact: info@wow-hookah.com
Website: www.wow-hookah.com
---
1. INTRODUCTION
WOWHOOKAH ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable European privacy law.
By using our website or making a purchase, you acknowledge that you have read and understood this policy.
---
2. WHO WE ARE
WOWHOOKAH is the data controller responsible for your personal data collected through www.wow-hookah.com.
For any privacy-related enquiry or request, contact us at:
info@wow-hookah.com
---
3. WHAT DATA WE COLLECT
We collect the following categories of personal data:
A. Data you provide directly
— Full name
— Email address
— Delivery address and billing address
— Phone number (if provided)
— Payment information (processed securely by Shopify Payments — we do not store card details)
— Any message or communication sent to us via email or contact form
B. Data collected automatically
— IP address
— Browser type and version
— Pages visited and time spent on the site
— Device type (desktop, mobile, tablet)
— Referral source (how you arrived on our site)
— Cookies and similar tracking technologies (see Section 8)
C. Data collected via email subscription (popup)
— Email address submitted voluntarily through our community signup popup
— Date and time of subscription
— Source of subscription (popup form)
---
4. WHY WE COLLECT YOUR DATA — LEGAL BASIS
We process your personal data only when we have a valid legal basis to do so.
Purpose: Processing your order
Data used: Name, address, email, payment information
Legal basis: Performance of a contract (Article 6(1)(b) GDPR)
Purpose: Sending order confirmations and shipping updates
Data used: Email address, order details
Legal basis: Performance of a contract (Article 6(1)(b) GDPR)
Purpose: Handling returns, warranty claims, and customer support
Data used: Name, email, order details, photos provided
Legal basis: Performance of a contract / Legitimate interest (Article 6(1)(b) and (f) GDPR)
Purpose: Sending community emails and marketing communications
Data used: Email address
Legal basis: Consent (Article 6(1)(a) GDPR) — you may withdraw consent at any time
Purpose: Improving our website and user experience
Data used: Browsing data, cookies
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
Purpose: Complying with legal obligations (accounting, tax)
Data used: Transaction data, invoices
Legal basis: Legal obligation (Article 6(1)(c) GDPR)
---
5. EMAIL MARKETING & COMMUNITY COMMUNICATIONS
If you subscribed to our community via the popup form on our website, you consented to receive emails from WOWHOOKAH, which may include:
— Product news and updates
— Setup tips and guides
— Exclusive offers for community members
You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any email, or by contacting us at info@wow-hookah.com.
Unsubscribing from marketing emails does not affect transactional emails related to your orders.
---
6. HOW LONG WE KEEP YOUR DATA
Order and transaction data: 7 years (legal accounting obligation under Belgian/European law)
Customer support communications: 3 years from last interaction
Email marketing subscriptions: Until you unsubscribe or request deletion
Website analytics data: 26 months maximum
Cookie data: As specified in our Cookie section below
---
7. WHO WE SHARE YOUR DATA WITH
We do not sell your personal data to third parties. We share your data only with trusted service providers who process it on our behalf, under strict data processing agreements:
— Shopify Inc. — e-commerce platform, payment processing, order management (servers located in the USA — covered by Standard Contractual Clauses)
— Shopify Payments / Stripe — secure payment processing
— Shipping carriers — delivery of your order (name, address, phone number)
— Email service providers — sending transactional and marketing emails
All third-party processors are contractually required to process your data only for the purposes we specify and in compliance with GDPR.
---
8. COOKIES
Our website uses cookies — small text files stored on your device — to ensure the site functions correctly and to improve your experience.
Essential cookies: Required for the website to function (shopping cart, session management). Cannot be disabled.
Analytics cookies: Used to understand how visitors use our site (pages visited, time spent). Collected anonymously where possible.
Marketing cookies: Used to show relevant content. Only placed with your consent.
You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the website.
---
9. YOUR RIGHTS UNDER GDPR
As a resident of the European Economic Area, you have the following rights regarding your personal data:
Right of access — You can request a copy of the personal data we hold about you.
Right to rectification — You can ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — You can ask us to delete your personal data, subject to legal retention obligations.
Right to restriction of processing — You can ask us to limit how we use your data in certain circumstances.
Right to data portability — You can request your data in a structured, machine-readable format.
Right to object — You can object to processing based on legitimate interest, including for direct marketing purposes.
Right to withdraw consent — Where processing is based on consent (e.g. marketing emails), you can withdraw it at any time without affecting prior processing.
Right to lodge a complaint — You have the right to lodge a complaint with your national data protection authority. In Belgium, this is the Data Protection Authority (APD/GBA): www.dataprotectionauthority.be
To exercise any of these rights, contact us at:
info@wow-hookah.com
We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing the request.
---
10. DATA SECURITY
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is hosted on Shopify, which maintains industry-standard security certifications (PCI DSS compliant for payment data).
No method of transmission over the internet is 100% secure. If you have reason to believe your data has been compromised, contact us immediately at info@wow-hookah.com.
---
11. INTERNATIONAL DATA TRANSFERS
Shopify Inc. is based in Canada and the United States. Data transfers outside the European Economic Area are covered by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, ensuring your data receives a level of protection equivalent to that required by GDPR.
---
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
For significant changes, we will notify you by email if you are subscribed to our community.
---
13. CONTACT & COMPLAINTS
For any question, request, or complaint regarding your personal data:
Email: info@wow-hookah.com
Website: www.wow-hookah.com
If you are not satisfied with our response, you have the right to contact the Belgian Data Protection Authority:
Autorité de protection des données (APD)
www.dataprotectionauthority.be