Privacy policy

How we handle your personal data

01.Data controller

In accordance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the Belgian law of July 30, 2018, Kevin Forma acts as the data controller for personal data collected via the n8de.me website.

02.Commitment

n8de.me is committed to protecting the privacy of its visitors and clients, processing their personal data with the highest level of confidentiality, and strictly complying with applicable legal frameworks. No data is sold to third parties.

03.Data collected

3.1. Data collected as a website visitor

• IP address (anonymized)
• Browser type and device
• Pages visited and visit duration
• Source of the visit (referrer)

3.2. Data collected as a prospect (form or outreach)

• First name, last name, position
• Professional email address
• Company name and website
• Industry / business sector

3.3. Data collected as a client

• Identification data (first name, last name, position)
• Company data (legal name, address, BCE/VAT number)
• Contact details (email, phone)
• Technical data necessary for service delivery (access to client tools, configuration data)
• Billing and payment data

04.Processing purposes and legal basis

Your data is processed for the following purposes:

• Response to contact requests — legal basis: legitimate interest (article 6.1.f GDPR)
• B2B commercial outreach — legal basis: legitimate interest (article 6.1.f GDPR)
• Execution of contractual services — legal basis: contract performance (article 6.1.b GDPR)
• Billing and accounting obligations — legal basis: legal obligation (article 6.1.c GDPR)
• Anonymized audience measurement — legal basis: legitimate interest (article 6.1.f GDPR)

05.Retention period

• Prospect data: 3 years from last contact
• Client data: duration of contractual relationship + 10 years (Belgian accounting requirements)
• Navigation data: maximum 13 months

06.Recipients of data

Your data may be transmitted to technical subprocessors necessary for business operations, in strict compliance with the GDPR. Main subprocessors include:

• Hostinger International Ltd. (Cyprus) — web hosting
• Anthropic PBC (USA, under Standard Contractual Clauses) — Claude AI API provider
• Google LLC (USA, under Standard Contractual Clauses) — Google Workspace, Google Sheets
• Twilio Inc. (USA, under Standard Contractual Clauses) — WhatsApp Business messaging
• Brevo SAS (France) — email and marketing
• Accountable BV (Belgium) — accounting and invoicing

No data is sold to third parties for commercial purposes.

07.Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access — obtain a copy of your data
• Right of rectification — correct inaccurate data
• Right of erasure — request deletion ("right to be forgotten")
• Right to restriction — restrict processing
• Right to portability — receive your data in a structured format
• Right to object — oppose processing based on legitimate interest
• Right to withdraw consent — at any time, without justification

To exercise these rights, contact: hello@n8de.me. A response will be provided within one month maximum.

08.Security

n8de.me implements reasonable technical and organizational measures to protect your data against loss, unauthorized access, alteration, or destruction:

• Communications encrypted via HTTPS/TLS
• Hosting on secure infrastructure
• Access to data limited to authorized personnel
• Regular backups
• Data anonymization where possible

09.Complaints

If you believe your rights are not respected, you may file a complaint with the Belgian Data Protection Authority:

10.Modifications

n8de.me reserves the right to modify this privacy policy to adapt to legal and technical evolutions. Any modification will be published on this page with an updated last-modified date.