BUYPHONE

Privacy Policy

Last updated: November 3, 2026

At BUYPHONE OÜ, your privacy is our priority. This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our website, in compliance with the General Data Protection Regulation (GDPR).

1. Data We Collect

We collect the following types of personal data:

  • Provided by you : Name, email address, phone number, billing/shipping address, and payment details.
  • Automatically collected : IP address, browser type and device information.
  • From third parties : Payment processors and logistics partners.

2. Purposes of Data Processing

We process your data to:

  • Fulfill orders and provide customer service.
  • Send marketing communications (if you’ve opted in).
  • Improve website functionality and user experience.
  • Comply with legal and regulatory obligations.

3. Legal Bases for Processing

We process your data under the following legal bases:

  • Contractual necessity : Processing is required to fulfill a contract with you.
  • Consent : For marketing communications.
  • Legal compliance : To meet legal obligations (e.g., accounting regulations).
  • Legitimate interest : To prevent fraud and improve our services.

4. Data Sharing

We share your data only with trusted third parties, including:

  • Payment processors (e.g., Stripe).
  • Logistics providers (e.g., delivery companies).
  • Authorities , when legally required.

We do not sell your data.

5. Retention Period

  • Order-related data : Retained for 10 years (for legal compliance).
  • Marketing data : Retained until you withdraw your consent.
  • Cookies : See the browser storage information below.

5.1. Cookies and Browser Storage

Cookies and similar technologies, including localStorage and sessionStorage, allow information to be stored on or read from your device. An exemption from consent is limited to operations that are indispensable for transmitting an electronic communication or providing a service you expressly request, such as managing your cart, signing in to your account or securing a payment you request. Storage does not become strictly necessary merely because it is functional or persistent.

BUYPHONE integrates no advertising tracking or third-party audience analytics tools: the only measurement used is the visit origin described below, BUYPHONE’s own and without any identifier. If an optional tracker requiring consent is added, it will only be activated after your prior, freely given, specific and informed agreement; you will be able to withdraw that agreement at any time.

  • Local storage : It keeps the cart identifier, the information needed to keep you signed in, your wishlist and the identifier of your most recent order. These records can remain between visits: the website does not set an automatic deletion period for this storage. Some are removed by the corresponding actions, including signing out for account access and completing an order for the cart identifier.
  • Visit origin : the first known source of your visit (for example Google, ChatGPT, a social network or a campaign link, and whether you arrived through an advert, without any click identifier), the landing page and the date. It is kept on your device for 30 days, then replaced, and attached to your order so we know how customers find us. It contains no personal identifier and is shared with no third party. You can delete it in your browser’s storage settings.
  • Session storage : The chat identifier and token, acceptance of the terms during checkout, and account access without a persistent sign-in use the tab’s session. These records are normally deleted when the tab closes; restoring a browser session may restore them.
  • Payment : The Stripe module loads at the payment stage to process the payment and help keep it secure. In this context, Stripe may use cookies for fraud prevention and authentication, and process information about your device and the transaction. The purposes are described in Stripe’s Cookie Policy ; cookies and their retention periods are listed in Stripe’s cookie information and settings .
  • Your controls : You can remove wishlist items, sign out or clear the conversation from the chat. Persistent records can be deleted through your browser’s storage settings. This may reset the saved cart and sign you out on that device.

Browser storage is separate from account, order or conversation records kept on our servers.

6. Your Rights

You have the right to:

  • Access, rectify, or erase your personal data.
  • Withdraw consent at any time.
  • Object to or restrict processing.
  • Request data portability.

To exercise your rights, contact us at wereply@buyphone.be .

7. Security Measures

We implement robust technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction.

8. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be effective upon posting on this page.

9. Contact Us

For questions, email us at wereply@buyphone.be .

10. Data Controller

The controller of your personal data is:

  • BUYPHONE OÜ
  • Registration Number : 16266177
  • Address : Vesivärava tn 50-201, 10152, Tallinn, Estonia
  • Email : wereply@buyphone.be