Privacy notice

What we collect, and why

We collect personal data only when you provide it — through the sample-download form, the contact form, or the checkout for a paid report. The data we collect is limited to what we need for the stated purpose.

Sample-download form

Name, work email, company, role, and an optional context note. Lawful basis: legitimate interest (B2B lead generation). We use this to deliver the sample PDF and may contact you about related SUDEVCO research. We do not share with third parties.

Contact form

Name, work email, optional company and role, and the message you send. Lawful basis: legitimate interest (responding to your enquiry). We use this only to reply.

Report purchases

Stripe processes the payment; we receive only the billing name, company, email, country, and the licensed product. The watermark on your downloaded PDF carries your name (single- user) or your company name (team) for licence enforcement.

Service providers

We rely on a few processors acting on our instructions: Stripe (payment processing), Resend / Amazon SES (transactional email delivery), and our EU-based hosting provider. Where a provider processes data outside the EEA, it does so under appropriate safeguards such as the EU standard contractual clauses.

Analytics

We do not use third-party analytics, cookies, or tracking scripts. We review our own web-server access logs — aggregated traffic patterns (pages viewed, plus approximate location and network inferred from IP address, and referrer) for operational and security purposes, on a legitimate-interest basis. We do not build per-visitor profiles or track you across other sites, and logs are retained only short-term.

Retention

We keep lead and contact records for as long as the commercial relationship is active, plus the statutory minimum for accounting records in Belgium (currently seven years for invoices and related correspondence).

Your rights

You have the right to access, correct, delete, or restrict processing of your personal data, and to object to processing on legitimate-interest grounds. To exercise any of these, email info@sudevco.be. We respond within 30 days.

Complaints

If you believe we have not handled your data correctly, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).