Privacy Policy
Last updated: December 2025
At PHITO Carnivores, we are committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data.
Who We Are
PHITO Carnivores is a Belgian company specializing in carnivorous plants.
Company: PHITO
VAT: BE 0744.504.890
Email: info@phito.be
What Data We Collect
We collect the following personal data: • Account information: name, email address, password (encrypted) • Billing and shipping addresses • Order history and preferences • Payment information (processed securely by Stripe) • Technical data: IP address, browser type, language preferences
Why We Collect Your Data
We process your data based on: • Contract performance: to fulfill your orders and provide customer service • Legal obligations: for tax and accounting requirements • Legitimate interests: to improve our services and prevent fraud • Consent: for marketing communications (optional)
How Long We Keep Your Data
We retain your data for: • Account data: as long as your account is active • Order data: 10 years (legal requirement for tax purposes) • Marketing data: until you withdraw consent
Who We Share Your Data With
We share your data with: • Stripe: for secure payment processing • Packlink/DPD: for shipping and delivery • Email service providers: for order notifications All our partners are GDPR-compliant and process data only as necessary.
Your Rights
Under GDPR, you have the right to: • Access your personal data • Correct inaccurate data • Delete your data ("right to be forgotten") • Export your data (data portability) • Object to processing • Withdraw consent at any time
To exercise these rights, contact us at: info@phito.be
Cookies
We use cookies for: • Essential cookies: to remember your cart and login session • Preference cookies: to remember your language choice We do not use tracking or advertising cookies.
Contact Us
For privacy-related questions or to exercise your rights:
Email: info@phito.be
You also have the right to lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).