This page says which personal data we collect, why, how long we keep it, and what you can ask of us at any time.
Who is responsible
The data controller is Place aux Plantes SRL, rue Lincoln 68, 1180 Uccle, entered in the Brussels register of legal entities under number 0777.272.975. The shop is at Rue Van Aa 36, 1050 Ixelles, Brussels.
For any question about your data: bonjour@placeauxplantes.be or +32 456 206 232. We are a small shop and are not required to appoint a data protection officer: your requests therefore reach us directly, and it is we who answer them.
What we collect, why, and on what basis
Your orders. Name, delivery and billing addresses, email, telephone, contents and amount of the order. We need them to prepare, ship and invoice what you buy, and to answer you if something goes wrong. Legal basis: performance of the contract between us. Without this data, an order cannot be fulfilled.
Your bookings for workshops, shared tables and walks. Name, email, telephone, chosen date. We need them to keep the list of participants and to let you know if anything changes. Legal basis: performance of the contract. If you tell us about an allergy, a diet, a pregnancy or a course of treatment, it is so that we can cook without putting you in danger: this information touches on your health, we process it only because you have entrusted it to us, and you can go back on that agreement.
Your payment. We never see your card number: it is handled directly by the payment provider. On our side, only the amount, the date and the means of payment remain.
Our accounts. The invoices and the supporting documents for your purchases. Legal basis: a legal obligation to which we are subject.
The newsletter. Your email address, and nothing else. It is entirely optional: not signing up changes nothing about your orders. Legal basis: your consent, which you withdraw whenever you like — an unsubscribe link appears at the foot of every mailing, and a simple email is enough too.
Your messages. What you write to us through the contact form or by email, and the contact details that come with it. Legal basis: our legitimate interest in replying to the people who write to us.
The running and the security of the site. IP address, browser, pages viewed, by means of strictly necessary cookies: remembering your basket, your language, your session, and spotting abuse. Legal basis: our legitimate interest in keeping an online shop that works and that does not get plundered.
Audience measurement. The same technical data, aggregated, to know which pages are read. Legal basis: your consent, collected through the banner that appears on your first visit. If you refuse it, the site works exactly the same.
We decide nothing automatically
No profiling, no automated decision producing legal effects concerning you. Nobody is sorted by a machine.
Who else has access
Nobody, apart from the providers without whom the service would not exist, and who act only on our instructions:
— Shopify, which hosts the shop and processes the orders;
— the payment provider, which handles the transaction;
— bpost, which carries your parcel;
— our accountant, for the supporting documents;
— the tool that sends the newsletter.
We neither sell nor rent your data, and we pass it to nobody for advertising purposes.
Outside the European Union
Shopify is a Canadian company, and some of its servers and subprocessors are outside the European Economic Area. These transfers are governed by the standard contractual clauses adopted by the European Commission, which require the recipient to provide protection equivalent to that of European law. You can ask us for a copy of these safeguards.
How long we keep it
— Orders and invoices: ten years. That is the period required by Belgian VAT legislation since 1 January 2023.
— Event bookings: two years after the date of the event. Whatever you told us about an allergy or a diet is erased as soon as the event has passed.
— Your messages: two years after our last exchange.
— Newsletter: until you unsubscribe, after which your address is erased.
— Audience measurement: thirteen months at most.
Cookies
A cookie is a small file placed on your device when you visit a site. There are two kinds here.
Necessary cookies keep the shop running: basket, language, session, security. They cannot be refused, because without them there is no shop.
Audience measurement cookies tell us which pages are read. They are placed only after you agree, and never before.
On your first visit, a banner asks you to choose. To go back on that choice, clear this site's cookies in your browser: the banner will be put to you again. Every browser also allows cookies to be blocked across the board, in its privacy settings.
Your rights
You can, at any time: access the data we hold about you and obtain a copy of it; have it corrected if it is inaccurate; have it erased; restrict its processing; object to processing based on our legitimate interest; ask for its portability; and withdraw a consent you had given us, without that withdrawal calling into question what was done before.
An email to bonjour@placeauxplantes.be is enough. We reply within the month. We will ask you to prove your identity only if we have real doubt.
If we fall short of our obligations
You can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données), rue de la Presse 35, 1000 Brussels — contact@apd-gba.be, +32 2 274 48 00. We would, of course, rather you wrote to us first.
Changes
This policy will change if our tools or our activities change. The date below is that of the version in force.
Last updated: 22 September 2026.