Last updated:  29/10/2025

1. Controller

Virtix (trading as Illunite) is the data controller for illunite.com.
Contact/DPO: info@illunite.com

2. What data we collect

Identity & Contact: name, email, phone, address.

Order & Payment: order details, last 4 digits and status tokens from payment providers (we do not store full card numbers).

Usage & Device: IP address, browser, device info, pages visited, consent choices.

Communications: emails, support messages, preorder lists, marketing opt-ins.

3. How we use your data (legal bases)

To provide the service (perform a contract): process orders/preorders, payments, shipping, returns, customer support.

Legitimate interests: prevent fraud, improve site, measure performance, secure our systems.

Consent: send marketing emails, place non-essential cookies/analytics.

Legal obligations: tax and accounting records.

4. Payments & processors

We share necessary data with:

Stripe Payments Europe, Ltd. (payment processing & fraud prevention). Privacy: https://stripe.com/privacy

PayPal (Europe) S.à r.l. Privacy: https://www.paypal.com/privacy
These processors act as controllers for their own anti-fraud/compliance checks.

5. Email & analytics tools (if used)

Email service (e.g., MailerLite, Mailchimp, Brevo) for newsletters and preorder updates.

Analytics (e.g., Google Analytics/Plausible) for aggregated usage metrics.
We only use these with appropriate data processing agreements and, where required, your consent.

6. International transfers

If data is transferred outside the EEA, we rely on approved safeguards (e.g., Standard Contractual Clauses).

7. Retention

Orders: 7–10 years (tax/accounting).

Support & preorder list: until launch or unsubscribe.

Marketing: until you withdraw consent.

Cookies: per Cookie Policy.

8. Your rights (GDPR)

You may access, rectify, erase, restrict, object, and port your data. You can withdraw consent at any time (e.g., unsubscribe link).
To exercise rights: email info@illunite.com.
You may lodge a complaint with the Belgian DPA (GBA/APD).

9. Security

We use HTTPS, access controls, and industry-standard safeguards. No method is 100% secure, but we work to protect your information.

10. Children

Our site is not intended for children under 16. We don’t knowingly collect such data.

11. Third-party links

Our site may link to external sites we don’t control. Review their policies.

12. Changes

We may update this Privacy Policy; material changes will be notified on-site or via email.

13. Contact

Email: info@illunite.com
Postal: [address], Belgium