Privacy statement

1. Data controller

TechCo, trading as HerstelMijniPhone.be, is the data controller. Address: Mechelsesteenweg 320, 2820 Bonheiden. Company number: BE0538.661.190. Email: info@herstelmijniphone.be.

2. Which data do we collect?

• Bookings: name, email, optional phone number, device, repair, appointment time, colour, notes, promo code, screen-protector choice and case status.
• Optional unlock code: only when you provide it to allow functions to be tested after the repair.
• Blog comments: name, email, comment and consent. The email address is never published; comments are moderated before publication.
• Contact requests, administrator identity, change logs and limited technical security information.

Never enter an Apple ID password, payment details or other sensitive information in free-text fields.

Booking emails

When our email service is connected, you receive a confirmation and info@herstelmijniphone.be receives a notification. These include your appointment, contact details, repair, price, extras, notes and any unlock code you provided. The customer email includes a personal management link. We send these emails through PHP mail on our one.com hosting. Email content is encrypted in the sending queue and removed from that queue when the service confirms submission. Google Calendar cleanup does not delete emails from recipients’ mailboxes.

3. Purposes and legal bases

• Preparing and carrying out your appointment and repair: contract or steps at your request before entering into a contract.
• Following up functional messages, questions, complaints and warranty matters: contract and legitimate interest in case management.
• Invoicing and statutory duties: legal obligation.
• Securing the website, calendar and administration: legitimate interest.
• Public blog comments: your consent.

4. Retention periods

• Unlock codes remain encrypted in our booking system and also appear in the description of our connected private Google Calendar event. Completion or cancellation does not automatically delete the code from our booking system. Cancellation removes the Google event. Other bookings synchronised from this website, including the description containing the code, are removed from three calendar months after the booked appointment date. The website checks daily in the background during a visit; without visitors, the check waits for the next visit. The repair record’s retention period also applies to the code.
• Booking and repair records: generally no more than 24 months, longer when needed for warranty, complaint or legal claims.
• Contact requests: no more than 12 months after completion.
• Unpublished blog comments: no more than 6 months; published comments until the article is removed or a valid request is received.
• Technical logs: generally 30 days; admin logs no more than 24 months. Statutory documents are kept for the applicable period.

5. Recipients and Google Calendar

We only share data with providers needed for hosting, database management, communications, calendar coordination, accounting or payment, and with public authorities when required by law. Data is not sold.

If Google Calendar is connected, we synchronise the reference, device, repair, location, time, screen-protector choice and any surcharge, and the unlock code / PIN you provide. The code appears in the description of an event marked as private. Contact details and free-text notes remain outside the calendar event. The connection uses limited OAuth permission and can be withdrawn.

Where processing takes place outside the European Economic Area, we use a valid transfer mechanism and appropriate safeguards.

Billit invoicing and administrator notifications

If you request a business invoice, we collect the business name, VAT number where applicable, billing address and optionally a separate billing email. When a VAT number is entered, only that number is sent to Billit to look up the company name and address in KBO/VIES. You can check and change the details found. A lookup does not create an invoice. These details are stored encrypted with the booking and shared with Billit alongside repairs and amounts when the invoice is created, to fulfil your request and our legal invoicing obligations. Deleting a booking does not delete an invoice that must be retained in Billit.

The administrator can enable notifications on their own devices. These contain your name, device, repairs and appointment date and time; a contact notification includes only the sender and the fact that a message arrived. This information may appear on the lock screen. Unlock codes, contact details and free-text notes are excluded. This follow-up serves our legitimate interest in managing bookings. Depending on the browser, notifications use Google, Microsoft, Mozilla or Apple push services and are encrypted for transport. Our sending queue stores them encrypted until processing, for at most 48 hours; notifications on a device remain until dismissed or removed.

6. Your rights

You can request access, correction, deletion, restriction or portability. You may object and withdraw consent by contacting info@herstelmijniphone.be. We may request reasonable identification and generally respond within one month.

You can also complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels.

Statistics and review invitations

To improve and monitor the website, we retain daily request totals by page group, language, broad source and limited error code for 400 days. These counts contain no IP address, visitor identifier, complete URL or entered information. No analytics cookies or browser storage are used and individual visitors are not tracked. Do Not Track and Global Privacy Control are respected. Previously consented sessions are aggregated after 48 hours during scheduled cleanup. Operational statistics use existing booking records. After collection, the administrator may approve one email inviting you to share your honest experience on Google. It is not sent without that approval, and no tracking pixel is used.

7. Security and changes

We restrict access to authorised persons, secure connections, encrypt sensitive device codes and log administration actions. No method is entirely risk-free. The date at the top identifies the latest version.