bFlash Privacy & Cookie Policy
Effective Date: 15/04/2025
This Privacy & Cookie Policy explains how BC Consulting SARL ("we", "us", or "our"),
operating under the commercial brand bFlash, collects, uses, shares, and protects your
personal data when you visit or interact with our website https://bflash.eu, use our services,
or communicate with us.
We are committed to protecting your privacy and processing your personal data
transparently, in accordance with the General Data Protection Regulation (EU) 2016/679
(GDPR) and applicable Luxembourg data protection laws.
1. Who We Are
BC Consulting SARL
Zone Industrielle Rolach, Hall n°2
L-5280 Sandweiler, Luxembourg
VAT: LU 25481811
RCS: B169121
Business permit: n° 10026849/1
Email: [email protected]
Tel: +352 691 230 974
2. What Personal Data We Collect
We may collect the following types of personal data:
Name, email address, phone number, business name, country
VAT or business registration numbers (for B2B invoicing)
Shipping and billing addresses
Login credentials (hashed passwords)
IP address, browser type, language, referral source, and device data
Order history and transaction details
Communication and support messages
Analytics data (e.g. pages visited, clicks, session duration)
We do not collect or store full credit card details. All payments are handled by secure
third-party payment providers (e.g. PayPal, Stripe).
3. How We Use Your Data
We use your data for the following purposes:
To process and deliver your orders
To create and manage your bFlash account
To respond to your support requests or inquiries
To send service or transactional emails (e.g. order confirmations, unlock results)
To improve our website and services
To comply with legal obligations
To send marketing communications, only if you have opted in
4. Legal Basis for Processing
We rely on the following legal bases:
Contractual necessity: to fulfill your purchases and services
Legitimate interest: to improve user experience and website functionality
Consent: for marketing and non-essential cookies (you can withdraw consent at any
time)Legal obligation: where required by tax, accounting, or other laws
5. Data Sharing & Third Parties
We do not sell your personal data. We may share your data with trusted third parties,
including:
Hosting providers
Payment processors (e.g. PayPal)
Customer service tools (e.g. email/chat platforms)
Analytics and marketing partners (e.g. Google Analytics, AdSense)
All such partners are required to comply with GDPR and act only on our instructions.
6. Cookies & Tracking Technologies
Our website uses cookies to improve your browsing experience. Cookies are small data files
stored on your device.
We use cookies to:
Remember your preferences and shopping cart
Improve site functionality
Collect aggregated analytics on user behavior (e.g. Google Analytics)
Serve personalized ads via Google AdSense
Types of cookies:
Essential cookies (required for site functionality)
Preference cookies
Analytical cookies
Marketing cookies (e.g. Google Ads/Remarketing)
You can control cookie preferences in your browser settings or opt-out of specific tracking via
tools such as:
Google Analytics Opt-out Add-on
7. Data Retention
We retain your personal data for as long as necessary to:
Provide the services you’ve requested
Fulfill legal obligations (e.g. tax, accounting)
Resolve disputes and enforce agreements
You may request deletion of your account at any time by contacting us.
8. Your Rights Under GDPR
You have the right to:
Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data (“right to be forgotten”)
Restrict or object to processing
Withdraw your consent at any time
Request data portability
Lodge a complaint with the Commission nationale pour la protection des
données (CNPD) in Luxembourg
To exercise any of these rights, please contact us at [email protected].
9. Data Security
We implement appropriate technical and organizational measures to protect your personal
data. These include:
SSL encryption
Firewalls and malware scanning
Access restrictions on internal systems
Payment transactions are securely processed by PCI-compliant providers.
10. International Transfers
We primarily store data in the EU. If data is transferred outside the EU/EEA, we ensure an
adequate level of protection (e.g. through Standard Contractual Clauses).
11. Policy Updates
This policy may be updated from time to time. Changes will be posted on this page, and if
significant, we will notify you via email.
12. Contact
For privacy-related questions or requests:
BC Consulting SARL – Privacy Department
Zone Industrielle Rolach, Hall n°2, 5280 Sandweiler, Luxembourg
Email: [email protected]