What we collect, and what we do not
Who is responsible
The controller for the personal data described on this page is:
No cookies or tracking
We do not use cookies, analytics, tag managers, embedded third-party scripts or contact forms. These pages do not profile you or track you across other websites.
Server logs
Our hosting provider, and the content delivery network in front of it, record ordinary technical request data, including IP address, timestamp, requested URL and user agent, to serve pages and to defend against abuse. We do not link those records to individuals and we do not use them for analytics.
When you email us
When you email us, we process your email address, your name if you provide it, and the contents of your message. The basis is our legitimate interest in answering you and, once we are discussing an engagement, the steps taken before a contract (GDPR article 6(1)(f) and 6(1)(b)).
How long we keep it
Correspondence is kept for as long as the conversation or the client relationship is active, and archived afterwards only where an administrative or legal obligation requires it. Ask us to delete a thread and we will, unless we are obliged to keep it.
Who else can see it
Our hosting, content delivery and email providers process data on our behalf under data-processing agreements: Cloudflare, which serves this site and therefore sees every request to it, and Microsoft, which provides our email service. Both are configured for European data residency, so the data is stored and processed inside the European Economic Area. Both have US parent companies, and for the exceptional case where access from outside the EEA does occur, it is covered by the European Commission’s standard contractual clauses. We do not sell personal data, we do not share it for advertising, and we do not enrich it from third-party sources.
Your rights
You can ask for access, correction, erasure, restriction or portability, and you can object to processing. Email us and we will respond to your request. You can also lodge a complaint with the Belgian Data Protection Authority at gegevensbeschermingsautoriteit.be.
Found a vulnerability?
We also follow a coordinated disclosure process for vulnerabilities in our own systems. Our security.txt file provides our contact details and disclosure information.
Last updated: 3 November 2026