Privacy policy.
Which personal data we use, why, and what you can do about it.
Last updated: 26 October 2026 · Version 1.0
1. Who is responsible
Nicolas Mathantu, self-employed (indépendant), trading as Joygreen, Avenue Bois le Comte 24, 4140 Sprimont, Belgium, enterprise number 0784.873.025, runs this website under the brand Casapino and is responsible for your personal data. Contact: support@lacasapino.com.
We have not appointed a data protection officer, as we are not required to. Write us at the address above for anything about your data.
2. In short
- We only collect what we need to sell, deliver and look after your tree, and, if you agree, to improve our site and our ads.
- Analytics and advertising tools only run if you accept them in the cookie banner. You can change your mind at any time in Cookie settings.
- We never sell your personal data.
3. What we collect and why
| What for | Which data | Why | Legal basis |
|---|---|---|---|
| Your order | Name, email, delivery and billing address, phone number (optional), products, order history | To take, deliver and invoice your order | Contract (Art. 6(1)(b) GDPR); legal obligation for invoices (Art. 6(1)(c)) |
| Delivery | Name, address, email, phone number (if given) | To let DPD deliver and send you its delivery-day and one-hour notices | Contract (Art. 6(1)(b)) |
| Payment | Payment details, handled by the payment provider; we never see your full card number | To take payment and prevent fraud. If you pay later with Klarna, Klarna may check your creditworthiness under its own privacy policy | Contract; legitimate interest in preventing fraud (Art. 6(1)(f)) |
| Returns, withdrawal and warranty | Order details, your message, photos you send | To collect returns, process withdrawals and refunds, handle warranty claims | Contract; legal obligation (Art. 6(1)(c)) |
| Customer service | Name, email, your message and anything you send us by email or through the messages on our site | To answer you | Contract or legitimate interest in answering your request |
| Emails from us | Email address, name, what you looked at or bought on our site | Our newsletter, offers, reminders about a cart you left, back-in-stock alerts | Your consent (Art. 6(1)(a)). For customers, emails about similar products may rely on our legitimate interest; you can always opt out |
| Text messages | Phone number | Offers and reminders by SMS | Your consent (Art. 6(1)(a)) |
| Order emails | Email address | Order confirmation and shipping updates | Contract (Art. 6(1)(b)) |
| Analytics | Pages viewed, clicks, device and browser data, approximate location, session recordings (with form fields masked) | To understand how the site is used and improve it | Your consent (Art. 6(1)(a)), via the cookie banner |
| Advertising | Pages viewed, products added to cart, purchases, device identifiers | To measure our ads and show you relevant ads on Google, Meta, Pinterest and TikTok | Your consent (Art. 6(1)(a)), via the cookie banner |
| Business enquiries and partner applications | Name, company, email, phone, your message, profile links | To answer quotes and review applications | Steps before a contract; legitimate interest |
4. Who we share it with
We work with the providers below. They process your data on our behalf and under our instructions, or, where they decide on their own purposes (for example payment providers, or advertising platforms for their own ad services), under their own privacy policies.
| Provider | Company | What they do for us | Where data may go |
|---|---|---|---|
| Shopify | Shopify International Ltd., Ireland | Hosts our shop, checkout and order data | Ireland, Canada, USA |
| Shopify Payments | Shopify, with Stripe and the card and wallet providers you choose (such as Visa, Mastercard, Apple Pay, Google Pay, Bancontact, iDEAL, Wero, EPS) | Payment processing and fraud prevention | EU, USA |
| PayPal | PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg | Payment, if you choose PayPal (under its own privacy policy) | EU, USA |
| Klarna | Klarna Bank AB, Sweden | Payment and pay later, if you choose Klarna (under its own privacy policy) | EU |
| DPD | DPD Polska and the DPD company in your country | Delivery and return pickups | EU |
| Our production partner | Manufacturer in Poland | Packs and ships your order | Poland |
| Klaviyo | Klaviyo, Inc., USA | Emails and text messages | USA |
| Google Analytics 4 and Google Ads | Google Ireland Ltd. | Analytics and ad measurement (with consent) | Ireland, USA |
| Microsoft Clarity | Microsoft Ireland Operations Ltd. | Session recordings and heatmaps (with consent) | Ireland, USA |
| Meta (Facebook, Instagram) | Meta Platforms Ireland Ltd. | Ad measurement and audiences (with consent) | Ireland, USA |
| Pinterest Europe Ltd., Ireland | Ad measurement and audiences (with consent) | Ireland, USA | |
| TikTok | TikTok Technology Ltd., Ireland | Ad measurement and audiences (with consent) | Ireland, outside the EEA |
| Shopify Inbox | Shopify | Messages you send us through our site | Ireland, Canada, USA |
| Google Workspace | Google Ireland Ltd. | Our email inbox | Ireland, USA |
We may also share data with authorities when the law requires it, and with our accountant and lawyers when needed.
5. Advertising and audiences
If you accept marketing cookies, the pixels of Google, Meta, Pinterest and TikTok record what you do on our site, for example the products you look at or buy. We use this to measure our ads and to show our ads to people who visited us, or to people similar to our customers.
When you have given consent, we also send these events directly from our server to the platforms (for example Meta Conversions API and Google enhanced conversions), with your email address in hashed (scrambled) form, so we can measure results more reliably.
We may also upload hashed email addresses of our customers and subscribers to these platforms, to show our ads to them or to similar people, or to exclude them from ads. You can object at any time by writing to us.
We use Google Consent Mode: if you decline, Google receives no cookies or identifiers from us, only anonymous signals to estimate results.
6. Returns
We handle returns ourselves and store returned products in Germany. Only what is needed to match the return to your order is kept with it.
7. Data outside the EU
Some providers are based in, or give access to staff in, countries outside the European Economic Area, mainly the USA and Canada. We only use them when your data is protected by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework for certified companies, or Canada) or by the EU Standard Contractual Clauses.
8. How long we keep it
- Order and invoice data: 10 years, as Belgian accounting and tax rules require.
- Customer service messages: 3 years after the last contact.
- Warranty claims: until the end of the 10-year warranty, plus 1 year.
- Email and SMS marketing: until you unsubscribe, then only the record that you unsubscribed.
- Analytics and advertising data: as set out in Cookie settings; consent itself for up to 6 months.
9. Your rights
You can ask us at any time to see the data we hold about you, correct it, delete it, limit how we use it, or receive it in a common format to take elsewhere. You can object to processing based on our legitimate interest, and to direct marketing at any time. Where you gave consent, you can withdraw it at any time, without affecting what happened before.
Write to support@lacasapino.com. We reply within one month.
You can also complain to a data protection authority: in Belgium, the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be, or the authority in the EU country where you live.
10. Unsubscribing
Every email has an unsubscribe link at the bottom. Reply STOP to any text message. Or write us.
11. Children
Our shop is for adults. We do not knowingly collect data from children under 16.
12. Security
Our shop runs on Shopify, with encrypted connections (HTTPS) and payment handled to industry security standards (PCI DSS). Only the people who need your data to help you can access it.
13. Changes
We update this policy when our tools or the law change. The date at the top shows the latest version.