Privacy policy
Last updated: 28 October 2026
1. Who is responsible for your data?
Storywall is a trade name of Kojin Consult VOF, Dorp 28 bus 2, 1750 Lennik, Belgium, company and VAT number BE 0538.626.845, RPR Brussels (hereinafter "Storywall", "we"). We are the controller of the personal data we process via storywall.be and through our customer contacts. For any privacy question, you can reach us at hello@storywall.be.
This privacy policy explains which personal data we process, why, on which legal basis, with whom we share it, how long we keep it and which rights you have.
2. Which data, for what purpose and on which legal basis?
| Purpose | Data | Legal basis |
|---|---|---|
| Designing your order, discussing the digital proof with you, having it printed and delivered | Name, email address, delivery and billing address, phone number (optional), order details, and the photos and details you provide for your design (for example a child's name, date, time and place of birth, the name of your house or pet) | Performance of the contract with you, or steps taken at your request before ordering (Art. 6(1)(b) GDPR) |
| Payment, invoicing and accounting | Order and billing details, payment status and payment method. We do not see full card details; these are processed by the payment provider. | Legal obligation (Art. 6(1)(c) GDPR) |
| Customer service, questions and complaints | Your messages to us and our replies | Performance of the contract and our legitimate interest in following up questions properly and being able to defend our rights (Art. 6(1)(b) and 6(1)(f) GDPR) |
| Newsletter and notification of our opening | Email address | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link |
| Analytics and marketing cookies, including the Meta pixel and Microsoft Clarity | See sections 5 and 6 | Your consent via the cookie banner (Art. 6(1)(a) GDPR) |
| Securing the webshop and preventing fraud | Technical data such as IP address and browser data | Our legitimate interest in protecting the webshop and our customers (Art. 6(1)(f) GDPR) |
You are not obliged to provide us with data. Without the data needed for your design, payment and delivery, however, we cannot carry out your order. We do not take decisions about you based solely on automated processing.
3. Children's data
Our webshop is aimed at adult customers. For personalised artworks, such as birth posters, adult customers may also provide data about a child, such as a name, date of birth, place of birth or photo. We use this data exclusively to design the requested artwork and to handle the order.
Only provide the data and photos needed for the chosen design and that you are allowed to use for this purpose. Where consent from a parent, guardian or other person concerned is required by law, that consent must be in place. Placing an order or approving a digital proof does not give us permission to use this data or these images for advertising or as a public example. For that, we always ask for your express consent in advance.
4. AI and digital design software
We turn the photos and details you provide into an artwork in our drawing style using digital design software and AI image technology. For your photos and details we use exclusively Google services: Google Workspace, including Gemini, within our business account, and the paid Gemini API of Google Cloud. Google acts as our processor under a data processing agreement and, according to its business terms, does not use this data to train AI models. Google does keep prompts and results for a limited period to detect abuse.
We do not enter your photos and details into AI services that use input data to train their models. If we want to use another service for your images, we will update this privacy policy beforehand.
Every result is checked by us and refined where necessary. You always receive a digital proof first: nothing is printed until you approve it. Some of the mood images on our website and social media, showing artworks in an interior, are AI-generated and contain no customer data.
5. With whom do we share your data?
We share your data only with service providers that process it on our behalf (processors), and only to the extent necessary:
- Shopify: hosting of the webshop, orders, customer data, payments and emails about your order and our newsletter.
- Globo Product Options (PowerfulForm Technology Company Limited, Vietnam): the option forms and photo uploads on the product pages. Globo stores uploaded files with its hosting partner DigitalOcean in the United States. Globo may process these files only to make our webshop work, according to our written instructions, and not for its own purposes such as promotion or training AI.
- Google (Workspace: Gmail, Drive and Gemini; Google Cloud: Gemini API) of Kojin Consult: email, storage and design processing within our business account.
- Gelato: printing and shipping your artwork. Gelato only receives the approved print file and your delivery details.
- The carrier delivering your parcel: name and delivery address.
- Our accountant: billing details, for our statutory accounting and tax obligations.
We do not sell your data. We only provide data to public authorities where the law requires us to.
Relationship with Shopify. For certain features of its own, such as Shop Pay and fraud prevention across multiple stores, Shopify acts as a controller itself. More information, and how to exercise your rights there, can be found in the Shopify consumer privacy policy and at privacy.shopify.com.
Social media. If you visit our Facebook or Instagram page, we are jointly responsible with Meta Platforms Ireland Ltd. for the page statistics Meta provides to us. Meta is the first point of contact for that processing; see Meta's privacy policy.
Meta pixel. On storywall.be we use the Meta pixel of Meta Platforms Ireland Ltd., but only if you consent to marketing cookies in the cookie banner. The pixel records what you do in our webshop, such as pages and products viewed, adding to your cart, starting checkout and a purchase with the order value, together with technical data such as your IP address, browser data and a cookie ID. This lets us measure whether our ads on Facebook and Instagram work and show them to people for whom they may be relevant. We are jointly responsible with Meta for collecting and transmitting this data via our webshop; Meta is solely responsible for its further use. Your photos and design details are never shared via the pixel. You can withdraw your consent at any time via the cookie preferences link at the bottom of every page. You exercise your rights towards Meta via Meta's privacy policy.
Microsoft Clarity. On storywall.be we use Microsoft Clarity of Microsoft Ireland Operations Ltd. (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), but only if you consent to analytics cookies in the cookie banner. Without that consent, Clarity is not loaded. Clarity shows us how visitors use our webshop: where they click, how far they scroll and where they get stuck, including through heatmaps and recordings of a visit. To do so, Clarity records your clicks, mouse and scroll movements and the pages you view, together with technical data such as your IP address, device, browser, approximate location and a cookie ID. We have set up Clarity so that all text on our pages is masked and the form you use to personalise your design, including the photos you upload, is fully hidden. We use these insights only to improve our webshop and do not link them to your order or customer details.
We are jointly responsible with Microsoft for collecting this data via our webshop. In addition, Microsoft uses the data as an independent controller for its own purposes, including improving its products and services and creating user profiles for advertising, including via Microsoft Advertising. Microsoft is solely responsible for that further use. More information, and how to exercise your rights towards Microsoft, can be found in the Microsoft privacy statement. You can withdraw your consent at any time via the cookie preferences link at the bottom of every page.
6. Cookies
We place strictly necessary cookies, for example for your shopping cart, language and currency, security and remembering your cookie choice, without consent. We only place analytics and marketing cookies, including the Meta pixel cookie (_fbp, up to 90 days), if you consent to them in the cookie banner. If you consent to analytics cookies, Microsoft Clarity places the cookies _clck (up to 1 year) and _clsk (1 day) to recognise your visit as one session. If you also consent to marketing cookies, Microsoft may additionally place its own cookies, such as MUID and CLID (up to approximately 13 months), which Microsoft uses among other things for advertising. Refusing is as easy as accepting. You can change or withdraw your choice at any time via the cookie preferences link at the bottom of every page (under "Terms and Policies"). More information about the cookies Shopify places, including their purpose and duration, is available at shopify.com/legal/cookies.
7. How long do we keep your data?
| Data | Retention period |
|---|---|
| Photos and design details you provide (including children's data) | We delete them from our own systems no later than 30 days after delivery of your artwork. For photos you upload via the product page, we instruct Globo to delete them within that same period. Copies in Globo's backups are then automatically overwritten within 30 days. |
| Photos you upload without placing an order | A photo is stored as soon as you select it on the product page, even if you do not order afterwards. We have such uploads deleted periodically, at least once a month. You can also ask for deletion at any time via hello@storywall.be. |
| Approved final design (print file) | 2 years after delivery, for a reprint or a claim under the statutory guarantee. At your request, we delete it earlier. |
| Order, billing and payment details | 10 years, as required by Belgian tax and accounting retention obligations |
| Customer service correspondence | 2 years after our last contact |
| Newsletter | Until you unsubscribe |
| Microsoft Clarity | Recordings of visits up to 30 days; heatmaps and a sample of recordings up to 9 months. For Microsoft's own use, the periods in the Microsoft privacy statement apply. |
| Cookies | As stated in section 6 and in Shopify's cookie information |
8. Transfers outside the European Economic Area
Some service providers also process data outside the European Economic Area. Shopify, Google, Meta and Microsoft may process data in, among others, the United States and Canada. Photos you upload via the product page are stored by Globo (Vietnam) in the United States. Transfers only take place to countries with an adequacy decision of the European Commission or with appropriate safeguards. For Globo, these are the European Commission's standard contractual clauses (Decision 2021/914, Module Two: controller to processor); for Shopify, Google, Meta and Microsoft, also the EU-U.S. Data Privacy Framework. For Microsoft Clarity, our contracting party is Microsoft Ireland Operations Ltd., which additionally uses standard contractual clauses for transfers to Microsoft Corporation in the United States. You can request a copy of those safeguards from us.
If you would rather not upload your photos via the product page, please contact us at hello@storywall.be before ordering. You can then send them to us by email and they will not be stored by Globo.
9. Security
We take appropriate technical and organisational measures to protect your data, such as secure connections and restricted access to our accounts. No system is completely invulnerable. Please do not send us sensitive data we do not need.
10. Your rights
You have the right of access to your data, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on our legitimate interest. If you have given consent, you can withdraw it at any time; this does not affect processing carried out before the withdrawal.
You exercise your rights via hello@storywall.be. We reply within one month. We may ask you to confirm your identity.
11. Complaints
If you have a complaint about how we handle your data, please let us know first via hello@storywall.be. You always have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.
12. Changes
We may update this privacy policy, for example when we engage a new service provider. The date at the top shows the latest version. We will inform you of important changes.