Legal

Privacy Policy

Last updated: 28 April 2026

Note for Lily: This page provides a good-faith draft based on standard GDPR Article 13 requirements for a contact-form website. It is strongly recommended that you have this reviewed by a Belgian privacy lawyer or a certified GDPR template service (e.g. iubenda, Termly) before launching publicly.

Data controller

Lily Stockmans
Sole trader, Belgium
Email: lily.stockmans@gmail.com

Lily Stockmans is the data controller responsible for the personal data collected through this website, in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

What data we collect

We collect personal data only when you voluntarily submit the contact form on this website. The data collected is:

  • Name — to address you in correspondence.
  • Email address — to respond to your enquiry.
  • Project type — to understand the nature of your request.
  • Message content — the details of your enquiry.

We do not collect sensitive personal data (e.g. health, financial, or identity documents) through this website.

How we use your data

Your data is used solely to:

  • Respond to your enquiry and correspond with you about a potential project.
  • Fulfil a contract or take pre-contractual steps at your request (GDPR Art. 6(1)(b)).

We do not use your data for automated decision-making, profiling, or marketing without your separate consent.

Legal basis for processing

We process your personal data on the following legal bases:

  • Contractual necessity (Art. 6(1)(b)) — processing is necessary to respond to your enquiry and, if applicable, to enter into a contract with you.
  • Legitimate interests (Art. 6(1)(f)) — we have a legitimate interest in responding to business enquiries submitted through this website.

Data retention

We retain contact form submissions for up to 2 years from the date of receipt, unless a contract is formed — in which case data will be retained for the duration of the contract and for up to 5 years thereafter in accordance with Belgian commercial law obligations.

After the retention period, data is securely deleted.

Third-party processors

Your contact form data is processed by the following third-party service provider:

  • Formspree, Inc. (formspree.io) — a US-based form processing service. Formspree receives and stores form submissions on our behalf. Data may be transferred to the United States under appropriate safeguards. See Formspree's Privacy Policy.

We do not share your personal data with any other third parties, sell it, or use it for advertising purposes.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — to request a copy of the data we hold about you.
  • Right to rectification (Art. 16) — to have inaccurate or incomplete data corrected.
  • Right to erasure (Art. 17) — to request deletion of your data where there is no overriding legitimate reason to continue processing.
  • Right to restriction (Art. 18) — to request that we temporarily stop processing your data.
  • Right to portability (Art. 20) — to receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21) — to object to processing based on legitimate interests.

To exercise any of these rights, please contact: lily.stockmans@gmail.com
We will respond within 30 days as required by GDPR.

Right to complain

If you believe your rights have been infringed, you have the right to lodge a complaint with the Belgian supervisory authority:

Security

This website is served over HTTPS. We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure.

Changes to this policy

This privacy policy may be updated from time to time. The date at the top of this page reflects the most recent revision. Continued use of this website after changes constitutes acceptance of the updated policy.