Last updated: 7 September 2026
Carespot, operated by Skypex bv, Kalkoenlaan 82, 9032 Wondelgem (Gent), Belgium (“Carespot”, “we”), is the controller of the personal data collected through this website. This policy explains what we collect, why we collect it, how long we keep it and which rights you have under the General Data Protection Regulation (GDPR).
What we collect and why
Appointment requests
When you schedule an introductory meeting we store your name, e-mail address, phone number, the meeting type, the chosen date and time and the page you sent the request from. We use this to plan and confirm the meeting and to contact you about it. Legal basis: steps taken at your request before entering into a contract (art. 6(1)(b) GDPR).
Contact and sign-up forms
Messages sent through the contact form, the course sign-up form, the vacancy pages and the “stay informed” form are stored together with your name, e-mail address, phone number and message. We use them to answer your question, register you for a course or keep you informed about the webshop, as requested. Legal basis: your request (art. 6(1)(b) GDPR) or your consent (art. 6(1)(a) GDPR), which you can withdraw at any time.
Webshop orders and account
To process an order we collect your name, billing and delivery address, e-mail address, phone number, the products ordered and the chosen payment method (bank transfer or cash on delivery). We do not receive or store card data. If you create an account we also store your login details and order history. Legal basis: performance of the contract (art. 6(1)(b) GDPR) and our legal obligations for invoicing and accounting (art. 6(1)(c) GDPR).
Technical data
Our server keeps standard access logs (IP address, browser, pages visited) for security and troubleshooting. Form submissions are rate-limited per IP address for a short period to prevent abuse. Legal basis: our legitimate interest in a secure website (art. 6(1)(f) GDPR).
Cookies
The website only uses functional cookies: the session and cart cookies WooCommerce needs to remember your basket and keep you logged in. We do not use advertising cookies. If we add analytics or embedded services later, we will ask for your consent first and update this page.
Who receives your data
Your data is handled by Carespot staff who need it for the purposes above and by service providers acting on our instructions: our hosting and e-mail provider, and the courier that delivers webshop orders (name, address and phone number only). The fonts on this website are loaded from Google Fonts, so your browser sends your IP address to Google LLC when a page loads (see Google’s privacy policy). We do not sell personal data. Data is stored within the European Union; where a provider processes data outside the EU, we rely on the European Commission’s standard contractual clauses.
How long we keep it
- Appointment requests and contact messages: 12 months after our last contact, unless a client relationship follows.
- Course registrations: 24 months after the course.
- Orders and invoices: 7 years, as required by Belgian accounting law.
- Webshop accounts: until you delete the account, or after 3 years without activity.
- Server logs: 30 days.
Your rights
You can ask us to access, correct, delete or restrict the personal data we hold about you, object to processing based on our legitimate interest, receive your data in a portable format and withdraw consent you have given. Send your request to team@carespot.be or by post to the address above; we answer within one month. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be).
Changes
We may update this policy when our services or the law change. The date at the top shows the latest version.