Privacy and cookies

This page is about heypaige.be, our own website, and explains what we collect here and why.

The websites Paige builds and maintains for clients, and the chat where clients update their site, are not covered here. Those are governed by the agreement with that client, and every client site has its own privacy statement.

If you fill in the contact form we process your name, your business name, your e-mail address, your phone number if you give one, and your message. We use that to answer your question and to prepare a possible working relationship. Nothing else.

The legal basis is taking steps prior to entering a contract (article 6(1)(b) GDPR) and, for general questions, our legitimate interest in replying to people who contact us (article 6(1)(f) GDPR).

The form has one hidden field that visitors never see and spam bots do fill in. If anything is in it, we reject the message. We use no CAPTCHA, and therefore no third-party script that measures your behaviour.

Our web server records which page was requested, when, with what kind of browser and from which IP address. Every website does this, and it is needed to keep the site running and to spot abuse. The legal basis is our legitimate interest in a secure, working site (article 6(1)(f) GDPR).

We do not use these logs to profile visitors and we do not link them to the analytics below.

We use Google Analytics 4 to see which pages get read and how visitors find us. It helps us improve the site. It only happens if you consent (article 6(1)(a) GDPR).

Until you choose, and if you decline, Google Analytics runs in consent mode: no cookies are set and nothing is stored on your device.

If you consent, Google Analytics sets cookies to recognise a returning visit. We do not use Analytics for advertising: the advertising features are off and stay off, even after you consent.

You can change your choice at any time, further down this page.

We do not sell your data and we do not pass it on for advertising.

For technical operations we work with a hosting partner that runs our servers, and with Google Ireland Limited for analytics. They process data on our instructions under a data processing agreement.

Google may process data outside the European Economic Area in doing so, including in the United States. That rests on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

Beyond that, we only hand over data when the law requires it.

We keep contact form messages until two years after our last exchange. If a working relationship follows, the periods in the contract and the statutory retention periods for invoicing apply.

We keep technical logs for about thirty days.

We keep analytics in Google Analytics for fourteen months. After that only aggregated reports remain, in which you cannot be identified.

If the way we handle data changes, we update this page and put a new date on it. If it concerns something that needs your consent, we will ask again.