Discover our new arrivals

Privacy policy

Last updated: 05/11/2026

1. Who we are

Troc Leuven is a trade name of Whisper Not BV ("we", "us", "our"), which operates the online store at https://trocleuven.live/ and is the controller of your personal data.

Registered office: Mechelsesteenweg 715, 3020 Herent, Belgium.

Company and VAT number: BE0476.660.572.

Contact email: leuven@troc.com.

2. What personal data we collect

We collect personal data from you when you:

  • Create an account or log in;
  • Place an order;
  • Sign up for our newsletter;
  • Contact us via email, chat or phone;
  • Browse or interact with our website.

Specifically, this may include:

  • Name, billing and shipping address, email address, telephone number;
  • Payment information (processed by Shopify or our payment provider);
  • IP address, device and browser type, browsing behaviour on our site;
  • Newsletter preferences, cookies and tracking information.

3. How we use your personal data

We use your personal data for these purposes:

  • To process and fulfil your orders (including shipping, payments and invoices);
  • To communicate with you about your order, your account or changes to our services;
  • To send you newsletters, marketing or promotional materials (only if you have given explicit consent);
  • To improve our website and services, by analysing how you use the site;
  • To comply with legal obligations (tax, accounting, consumer protection).

4. Legal basis for processing

Under the General Data Protection Regulation (GDPR), our lawful bases for processing your personal data are:

  • Performance of a contract: processing your order, delivering goods, fulfilling our obligations;
  • Your consent: for example when you subscribe to our newsletter or accept cookies;
  • Legitimate interests: improving our services, analytics, preventing fraud (where these interests are not overridden by your rights);
  • Legal obligation: compliance with tax and accounting laws.

5. Sharing your personal data

We may share your data with:

  • Our payment processors, shipping carriers and Shopify as our ecommerce platform provider;
  • Third-party service providers who assist us (for example analytics, email marketing) under contract and only on our instructions;
  • Legal or regulatory authorities when required by law or to protect our rights.

6. International transfers

Our servers and service providers may be located outside the EU/EEA. Where your personal data is transferred abroad, we ensure appropriate safeguards (such as standard contractual clauses) to protect your rights and comply with the GDPR.

7. Cookies and tracking

We use cookies and similar technologies to support functionality (for example login and cart), to analyse visitor behaviour on our site and for advertising.

You can manage your cookie preferences via the cookie banner and your browser settings. More details are in our cookie policy.

8. Data retention

We keep your personal data only as long as necessary for the purposes listed above, or as required by law (for example, accounting law requires us to keep invoices for 7 years).

When the data is no longer needed, we securely delete or anonymise it.

9. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request erasure of your data ("right to be forgotten") where applicable;
  • Restrict or object to our processing of your data;
  • Receive your data in a portable format;
  • Withdraw your consent at any time (without affecting processing before that);
  • Lodge a complaint with a supervisory authority (in Belgium: the Data Protection Authority, dataprotectionauthority.be).

To exercise your rights, contact us at leuven@troc.com.

10. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction, such as encryption of sensitive data, secure access controls and limited internal access.

11. Changes to this policy

We may update this privacy policy from time to time, for example to reflect changes to our practices or legal requirements. We will post the new version on our website with the "Last updated" date.

12. Contact us

If you have any questions about this privacy policy or how we process your personal data, contact us at:

Whisper Not BV (Troc Leuven)
Mechelsesteenweg 715, 3020 Herent, Belgium
leuven@troc.com