Privacy policy
What we collect when you use this website, why we are allowed to, how long we keep it and how you get rid of it.
Who is responsible
BrandForge is the trade name of MISSING: entity, a branding and web development studio based in Blankenberge, Belgium. We are the data controller for everything described on this page.
- Registered name
- MISSING: entity
- Address
- MISSING: address
- Company number
- MISSING: company no
- VAT
- MISSING: vat
- MISSING: email
- Phone
- MISSING: phone
We are not required to appoint a data protection officer and have not appointed one. Write to the email address above and it reaches the person who makes these decisions.
What this covers
This page covers this website and the enquiries sent through it. Work we do for you as a client is covered by the agreement we sign, which sets out separately how we handle anything you give us access to.
What we collect, and why
Everything below is collected because you sent it or because serving the page requires it. There is nothing else.
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| The enquiry form: your name, email address, and optionally your company and budget range, plus the message you write. | To read your enquiry and answer it. | Steps taken at your request before entering into a contract, and our legitimate interest in replying to people who contact us (GDPR Article 6(1)(b) and 6(1)(f)). | 24 months after our last contact about it, then deleted. |
| Anti-spam signals attached to that form: your IP address, your browser's user agent string, how long the form took to fill in, and two checks on what you sent — whether the message is mostly links, and whether the domain of your email address accepts mail at all. | To tell a person from a bot without putting a puzzle in front of you. Stored rather than only checked, so that if we wrongly flag a real enquiry we can find it and read it instead of losing it. | Our legitimate interest in keeping the form usable (Article 6(1)(f)). | 12 months. |
| How you arrived, attached to that form: any campaign parameters in the link you clicked (utm_source and similar, or an advertising click identifier), the domain of the site that linked you, and the first page you landed on. | To know which advertising or referral actually produces enquiries, so money is not spent on guesses. The domain only, never the full address of the page you came from, and nothing that identifies you personally. | Our legitimate interest in knowing whether our own advertising works (Article 6(1)(f)). | 24 months, alongside the enquiry it belongs to. |
| Server logs: the address requested, the time, the response, your IP address and your user agent. | To keep the site up and to investigate faults and abuse. | Our legitimate interest in security and availability (Article 6(1)(f)). | Per our hosting provider's retention, currently MISSING: host. |
| Email you send us, and our replies. | To have the conversation you started. | The same basis as the enquiry itself. | As long as the working relationship, then per our bookkeeping obligations where an invoice was issued (seven years under Belgian law). |
What we do not do
Worth stating plainly, because most sites you visit do the opposite:
- No analytics. We do not run Google Analytics, Plausible, Fathom or anything else. We do not know how many people visited this page.
- No advertising or tracking pixels, no Meta pixel, no LinkedIn tag, no remarketing.
- No profiling, no scoring, and no decisions about you made automatically.
- No newsletter, and no adding you to a list because you sent an enquiry.
- We never sell your data and never share it for anyone else's marketing.
Who else can see it
Only the suppliers we need in order to run the site and reply to you. They act on our instructions and cannot use your data for their own purposes.
- Hosting
- MISSING: host — runs the server and therefore holds the database and the logs.
- Our mail provider, which carries the message when we reply to you.
We hand data to authorities only where the law actually requires it, and not on a request that has no legal force behind it.
Where it is stored
On servers in the European Economic Area, with no exception. Nothing on this site is loaded from anywhere else, so no personal data leaves the EEA at all — there is no transfer for us to justify and none for you to take our word about.
Your rights
Under the GDPR you can ask us to:
- give you a copy of what we hold about you,
- correct it if it is wrong,
- delete it,
- stop or limit what we do with it,
- object to us relying on legitimate interest, in which case we stop unless we can show a reason that outweighs your objection,
- send it to you or to someone else in a portable format.
Email MISSING: email and say what you want. We do not charge for this and we will reply within one month. We may ask you something to confirm you are who you say you are, but never more than we need for that.
If you are not satisfied
Tell us first, because most of this is a misunderstanding we can fix. If that goes nowhere you have the right to complain to the Belgian supervisory authority:
- Authority
- Gegevensbeschermingsautoriteit / Autorité de protection des données
- Address
- Drukpersstraat 35, 1000 Brussels
- Phone
- +32 (0)2 274 48 00
- contact@apd-gba.be
- Web
- www.gegevensbeschermingsautoriteit.be
Changes to this page
If what we do changes, this page changes first and the date at the top moves. We do not quietly widen what we collect and update the policy afterwards.