1. Who is responsible for your data
The controller of your personal data is SE-Optimizz BV, trading as WE-Optimizz.
- Registered office: Koning Boudewijnlaan 20a, 3500 Hasselt, Belgium
- Company number (KBO/BCE): 1002.993.460
- VAT: BE 1002.993.460
- Email: barry@we-optimizz.com
We are a small agency and have not appointed a Data Protection Officer, as the GDPR does not require one for our activities. Privacy questions can be sent directly to the email address above.
2. Which data we collect
We collect personal data in three situations.
When you contact us or request a review
Through the contact form, the free website review, the newsletter, email, phone or a platform marketplace (for example the Wix Marketplace) we receive the details you give us: your name, email address, phone number, company name, website URL and the content of your message.
When you become a client
To run a project we process contact details of the people we work with, billing information, access credentials to the platforms we manage on your behalf (for example Wix, WordPress, Shopify, Google Search Console, Google Business Profile) and the content of the work itself. Access credentials are stored in a password manager and never in email or chat.
When you visit this website
Our hosting provider logs technical data such as your IP address, browser type, the pages you visit and the time of your visit. This is standard server logging needed to keep the site secure and working. See our cookie policy for what is stored in your browser.
If you create an account on our platform, we also store your login details and the settings and data you enter into that account.
3. Why we process your data
- To answer your question, quote request or website review request
- To prepare, deliver and invoice the services you order from us
- To manage the relationship with clients and partners, including follow-up and support
- To send our newsletter, only when you have signed up for it
- To keep this website secure, available and improving
- To meet legal obligations, such as accounting and tax rules
We do not use your data for automated decision-making or profiling with legal effects.
4. Legal basis
| Processing | Legal basis (GDPR art. 6) |
|---|---|
| Replying to your request | Steps prior to entering into a contract (6.1.b) and our legitimate interest in answering enquiries (6.1.f) |
| Delivering and invoicing services | Performance of a contract (6.1.b) |
| Accounting and tax records | Legal obligation (6.1.c) |
| Newsletter | Your consent (6.1.a), which you can withdraw at any time via the unsubscribe link |
| Server logs and site security | Legitimate interest (6.1.f) |
| Non-essential cookies or analytics, if used | Your consent (6.1.a), see the cookie policy |
5. Who we share data with
We never sell personal data. We share it only with providers we need to run our business, and only for the purpose described above:
- Hosting and application platform for this website (Base44)
- Email, calendar and document tools (Google Workspace)
- Accounting and invoicing software, and our accountant
- Payment providers when you pay online (for example Stripe)
- Website and SEO platforms we use for client projects (for example Wix, Semrush, SE Ranking), where the data is needed to do the work
- Public authorities, when the law requires it
Some of these providers process data outside the European Economic Area, mainly in the United States. In those cases we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.
6. How long we keep data
- Enquiries and review requests that do not lead to a project: up to 24 months after our last contact
- Client and project data: for the duration of the collaboration and up to 5 years afterwards, so we can support you and handle any disputes
- Invoices and accounting records: 7 years, as required by Belgian law
- Newsletter data: until you unsubscribe
- Server logs: up to 12 months
7. Your rights
Under the GDPR you can ask us to:
- Access the personal data we hold about you
- Correct data that is wrong or incomplete
- Erase your data, where we have no legal reason to keep it
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent you gave earlier, without affecting processing that already took place
Send your request to barry@we-optimizz.com. We may ask you to confirm your identity first. We answer within one month.
If you feel we are not handling your data correctly, you can lodge a complaint with the Belgian Data Protection Authority: Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be.
8. Security
This website is served over HTTPS. Access to client platforms and internal tools is protected with strong, unique passwords and two-factor authentication where the platform supports it. Only people who need the data for their work have access to it. If a data breach ever affects your rights, we will inform you and the authority as the GDPR requires.
9. Changes to this policy
We update this policy when our services or the law change. The date at the top shows the latest version. Substantial changes are announced on this page.
See also our cookie policy, terms and conditions and accessibility statement.