PRIVACY POLICY
Privacy Policy
Geode-Concept SRL — Last updated: October 2026
Geode-Concept SRL attaches great importance to the protection of your personal data. This policy explains what data we collect, why, how we use it, with whom we share it, how long we keep it, and what your rights are.
It applies to all processing of personal data carried out via our website www.vwx-plants.com (hereinafter the "Site"), as well as in the context of our business relationships (B2B and B2C customers).
01Who is the data controller?
Data controller: Geode-Concept SRL
Registered office: Rue de la Chapelle, 47 – B-6990 Hotton
Company number (BCE): BE 0838 443 056
VAT number: BE 0838 443 056
GDPR contact e-mail: support@vwx-plants.com
02What personal data do we collect?
We collect only the data necessary for the purposes described below. Depending on the case, we process:
Data collected automatically
- IP address
- Browser type and version
- Operating system
- Source of origin (referrer)
- Pages visited and navigation path on the site
- Date and time of connection
- Session duration
- Language preferences
Data you provide to us directly
- Title, first name, last name
- E-mail address (including to request a free trial version)
- Phone number (optional)
- Full postal address (billing and/or delivery, if applicable)
- Company name and VAT number (business customers)
- Payment data (not stored by us – handled by Lemon Squeezy, our payment provider acting as Merchant of Record)
- Content of your messages (support, pre-sales, complaints)
Purchase and trial data
- Products ordered or tested in a trial version
- Transaction amount and date
- Order number
- Order or trial status (active / expired)
03Why do we collect this data? (purposes and legal basis)
| Purpose | Legal basis (GDPR) | Main retention period |
| Customer account management | Performance of a contract (Art. 6.1.b) | Duration of the contractual relationship + 5 years |
| Order processing and tracking | Performance of a contract (Art. 6.1.b) | 10 years (accounting limitation period – Art. 2262bis Civil Code) |
| Invoicing and accounting | Legal obligation (Art. 6.1.c) | 7 years (Belgian accounting law) |
| Sending of the download link | Performance of a contract (Art. 6.1.b) | 24 to 48 hours per generated link; can be regenerated without limit for the entire duration of the license |
| Management of the free trial version (anti-abuse, one trial per e-mail) | Legitimate interest (Art. 6.1.f) | Trial duration + 12 months |
| Management of after-sales service / support | Legitimate interest (Art. 6.1.f) | 3 years after the last interaction |
| Fraud prevention and site security | Legitimate interest (Art. 6.1.f) | 13 months maximum (analytics cookies) |
| Site usage statistics | Legitimate interest (Art. 6.1.f) | 13 to 25 months depending on the cookie |
| Sending of commercial information (news, promotions) | Consent (Art. 6.1.a) | Until consent is withdrawn |
04Cookies and trackers
We use cookies and other trackers. You will find all the details in our Cookie Policy (link to be inserted on the site).
Strictly necessary cookies are exempt from consent. All others (statistics, marketing, social media, etc.) are subject to your prior consent via our cookie banner.
05With whom do we share your data?
We never sell your personal data.
Possible recipients:
- Technical service providers (web hosting, maintenance, emailing)
- Payment provider: Lemon Squeezy, acting as Merchant of Record
- Accountant / chartered accountant / company auditor (strictly limited data)
- Judicial or administrative authorities in the event of a legal obligation or proceedings
Third-party artificial intelligence services chosen by the Customer. The software plugins work with the Customer's personal access key to an AI service of their choice (Anthropic Claude, Google Gemini, xAI Grok, OpenAI GPT). In this case, the data transmitted (prompts, images, results) flows directly between the Customer's computer and the chosen third-party service, using the Customer's own key. Geode-Concept SRL has no access to this traffic or its content, and is not a party to the contractual relationship between the Customer and that provider.
06Transfers outside the European Union
⚠ Section to be reworked before publication. Unlike the previous version, which stated that no transfers outside the EU took place, this is no longer true with the new model: Lemon Squeezy is based in the United States (Boulder, Colorado), and the third-party AI services that the Customer may choose (Anthropic, Google, OpenAI, xAI) are also mostly based there. The text below is a first draft to be validated.
Some data may be processed outside the European Economic Area (EEA):
- Payment data, processed by Lemon Squeezy (a company based in the United States), in the context of its role as Merchant of Record.
- Where applicable, data that the Customer themselves transmits, via their own access key, to a third-party artificial intelligence service of their choice — this transfer is initiated by the Customer and under their responsibility, not that of Geode-Concept SRL.
For any transfer falling under our responsibility as data controller, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decision, or equivalent), in accordance with Articles 44 et seq. of the GDPR.
07Retention period
Retention periods are set out in the table in section 3. At the end of these periods, the data is either deleted or irreversibly anonymized.
08Your GDPR rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object (in particular to direct marketing)
- Right to withdraw your consent at any time (where processing is based on consent)
- Right to lodge a complaint with the supervisory authority
Competent supervisory authority in Belgium: Data Protection Authority (DPA), Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be — contact@apd-gba.be
09How to exercise your rights?
You can exercise your rights by contacting us:
- By e-mail: support@vwx-plants.com
- By post: Rue de la Chapelle, 47 – B-6990 Hotton (Belgium)
We will respond within one month (extendable by two months in case of complexity). We may ask you for proof of identity.
10Data security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk (encrypted connections, restricted access, backups, regular updates, etc.).
11Changes to the policy
We may need to amend this policy. The applicable version is the one published on the Site at the time of data collection or of the order.