Privacy policy

Last updated: July 2026

This translation is provided for information. In the event of any discrepancy, the French version prevails.

Introduction

This privacy policy describes how HM Pharmaceuticals SRL (hereinafter "comai.", "we") collects, uses, stores and protects the personal data of visitors to and customers of the website comai.be, in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

1. Data controller

HM Pharmaceuticals SRL
Chaussée d'Alsemberg 897, 1180 Uccle, Belgium
Company no. (BCE): 1013811930
Email: contact@comai.be

2. Data collected

We collect the following categories of data:

  • Identification data: surname, first name, email address, phone number
  • Delivery data: postal address
  • Payment data: processed only by our secure payment providers (Shopify Payments, Bancontact, Stripe). We never store your bank details.
  • Browsing data: IP address, browser type, pages visited, visit duration (via cookies)
  • Order data: purchase history, product preferences
  • Contact data: messages sent via the contact form or by email

3. Purposes of processing

Your data is processed for the following purposes:

  • Managing your orders and deliveries
  • Invoicing and accounting (legal obligation)
  • Customer service and answering your requests
  • Sending newsletters and marketing communications (with your consent)
  • Improving our products and the user experience
  • Fraud prevention and website security
  • Complying with our legal and regulatory obligations

4. Legal bases

The processing of your data is based on the following legal grounds:

  • Performance of the contract — to process your orders
  • Legal obligation — for invoicing, accounting and compliance with tax obligations
  • Consent — for newsletters, non-essential cookies and marketing communications
  • Legitimate interest — for website security and improving our services

5. Data recipients

Your data may be shared with:

  • Shopify Inc. — website host and order management
  • BME NV — logistics partner for order preparation and shipping
  • Carriers (bpost, DPD, DHL) — for delivery
  • Payment providers (Shopify Payments, Stripe, Bancontact)
  • Meta / Google — only with your consent (analytics and advertising cookies)
  • Competent authorities — where required by law

We never sell your data to third parties.

6. Retention period

  • Customer account data: as long as your account is active + 3 years after the last activity
  • Invoicing data: 10 years (Belgian accounting obligation)
  • Newsletter data: until you unsubscribe
  • Cookies: for the duration specified in our cookie policy (13 months maximum)

7. Your rights

Under the GDPR, you have the following rights:

  • Right of access — obtain a copy of your data
  • Right to rectification — correct inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability — receive your data in a structured format
  • Right to object to the processing of your data
  • Right to withdraw your consent at any time
  • Right to lodge a complaint with the Belgian Data Protection Authority (DPA): dataprotectionauthority.be

To exercise your rights, contact us at contact@comai.be. We will reply within one month at most.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure. The website is secured by an SSL/TLS certificate and hosted on Shopify's ISO 27001 and PCI DSS certified infrastructure.

9. Cookies

Our website uses cookies to improve your experience and analyse traffic. You can manage your preferences via the cookie banner shown on your first visit.

Types of cookies used:

  • Essential cookies — needed for the website to work (cart, session, security)
  • Analytics cookies — to measure audience (with your consent)
  • Marketing cookies — to show you personalised content (with your consent)

10. International transfers

Some of our providers (Shopify, Meta, Google) may process your data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses or by adequacy decisions guaranteeing a level of protection equivalent to the GDPR.

11. Changes

We reserve the right to amend this policy. Any change will be published on this page. The date of the last update appears at the top of the document.

12. Contact

For any question about your personal data:
Email: contact@comai.be
Address: HM Pharmaceuticals SRL, Chaussée d'Alsemberg 897, 1180 Uccle, Belgium