Data we collect through the site

What reaches us, and what never does

Contact form

When you submit a contact form we collect the name, email address and any message content you provide, along with the organisation you name. That is the whole of it: no payment fields, no client or project references, and no third-party advertising identifiers.

Server logs

Our hosting records standard technical information such as IP address, browser type and the pages requested. These logs exist for security and troubleshooting, and they are read when something needs diagnosing rather than mined for interest profiles.

No payment data

We do not collect payment information through this website. Invoicing and payment for any engagement happen outside it, through the channels agreed with you in writing.

No system credentials

We do not ask for production system credentials at any point before a signed agreement. If credentials are needed later, they are requested through the agreed engagement process and stored separately from this website.

Why we process it

Purposes, and the limits we hold to

Contact form data is processed so that we can respond to your enquiry and, where it is relevant to the work you describe, prepare a scoping document or proposal. If the enquiry moves forward, the same information becomes part of the engagement record.

Server logs are processed for security, abuse prevention and diagnosing technical faults. Where processing is based on your consent, you may withdraw it at any time by writing to the address above.

Not for marketing

We do not use contact form data for marketing campaigns and we do not add enquirers to mailing lists. There is no newsletter behind the form.

Withdrawal is easy

Where consent is the legal basis, withdrawing it stops the processing that depended on it. We confirm in writing when that has been done.

Sharing and disclosure

Nothing sold, and one exception that is written in law

Never sold

Personal data is not a product here

We do not sell personal data, and we do not share contact enquiries with platform vendors or partner organisations. If a platform is involved in your project, that involvement comes from your own procurement, not from a list we passed on.

Service providers

Hosting and email, under instruction

Data may be processed by service providers who host our website and email infrastructure. They act on our instructions under contract, they are bound to confidentiality, and they are not permitted to use your information for their own purposes.

Legal obligation

When a Belgian authority asks

Where a legal obligation requires disclosure, for example a valid request from a Belgian authority, we comply to the extent required by law. We disclose no more than the request actually covers.

Retention

How long we keep what you send

Contact enquiries: Kept for as long as needed to handle the enquiry and any resulting engagement, and then for a reasonable period for business records. Where an engagement produced contractual documents, those documents follow their own statutory retention.
Server logs: Retained for a limited period for security purposes and then deleted or aggregated. Aggregated traffic figures carry no personal data and may be kept longer for capacity planning.
Deletion requests: If you ask us to delete your enquiry, we will do so unless a legal or contractual obligation requires us to keep it. When an obligation applies, we tell you which one and what remains.

Your rights

What the GDPR gives you, and how to use it

Under the GDPR you have the right to access your personal data, to have inaccurate data corrected, to request deletion, to restrict processing, to object to processing, and to receive data you provided in a portable format. You also have the right to lodge a complaint with the Belgian Data Protection Authority.

To exercise any of these rights, contact [email protected]. We will respond within the period required by applicable law.

You do not need to give a reason to make a request, and exercising a right never changes how we handle an enquiry you have with us.

Access

Ask for a copy of the personal data we hold about you and a short explanation of why it is held.

Correction

Ask us to correct anything inaccurate, whether it came from your message or from our own notes.

Deletion

Ask us to remove an enquiry. We confirm what was removed, and name any obligation that keeps something in place.

Restriction and objection

Ask us to pause processing, or object to it, while a question about your data is being resolved.

Portability

Receive the data you provided in a common, structured format so it can be moved elsewhere.

Complaint

Lodge a complaint with the Belgian Data Protection Authority if you think your data has been handled badly.

Practical note

Tell us the email address you used when you wrote to us. That is usually enough to find the enquiry without asking you for anything else.

Security

Measures we take, and one honest limit

We apply technical and organisational measures appropriate to the risk, including access controls and encrypted transfer for data submitted through the site. Access to enquiry data is limited to the people who need it to answer you.

No method of transmission over the internet is completely secure, and we cannot guarantee the security of information sent to us. If a request would require you to send credentials or sensitive identifiers, tell us first and we will agree a safer route.

Before you send anything

A first enquiry needs no system access. Describe the work and the environments involved in plain terms; anything beyond that belongs in the engagement phase, under an agreement and through a channel we have both confirmed.

Changes to this policy

Where the current version lives

We may update this policy to reflect changes in our practices or legal requirements. The current version is always published on this page, and the review date above changes with it. Where a change materially affects how an active enquiry is handled, we tell the person who made the enquiry.

Privacy Policy