Privacy Policy

Clartis Group ("Clartis", "we", "us") is the data controller for personal data collected through this website. Our registered office is in Brussels, Belgium. Questions about this policy or about your data go to privacy@clartisgroup.com.

1. What we collect

We collect personal data in two situations only:

When you submit the contact form. The fields you fill in — your name, role, company, work email, industry, practice of interest, the brief itself, your indication of timing and budget — are sent to a founding partner. None of these fields are required to browse the site; you choose what to share.

When you simply visit the site. Our hosting provider (Cloudflare) processes technical request data — your IP address, the page requested, the timestamp, and your browser's user-agent string — for security and basic operation of the site. Cloudflare aggregates this into privacy-friendly analytics that do not identify individual visitors and do not use cookies for tracking.

We do not use Google Analytics, Facebook Pixel, advertising trackers, or any third-party marketing scripts.

2. Cookies

This site does not set non-essential cookies, which is why you see no cookie banner. The only cookie that may be set is __cf_bm, a Cloudflare bot-mitigation cookie that is strictly necessary for the security of the site and is exempt from consent requirements under the EU ePrivacy Directive.

Our analytics provider (Cloudflare Web Analytics) is cookieless by design.

3. Why we process your data — lawful basis

• Contact form submissions: processed under your consent (Article 6(1)(a) GDPR), which you give by submitting the form. You can withdraw it at any time by emailing us.
• Server logs and security cookies: processed under our legitimate interest (Article 6(1)(f) GDPR) in keeping the site running, secure, and free from abuse.
• Replying to your brief and qualifying engagement fit: processed under our legitimate interest in responding to a business enquiry you initiated.

4. Who else processes your data — sub-processors

We rely on a small number of vetted service providers. Each is bound by a Data Processing Agreement and processes data only on our instructions.

• Cloudflare, Inc. — hosting, content delivery, security, and cookieless web analytics. Data is processed at edge locations including the EU. Cloudflare privacy policy.
• Resend, Inc. — transactional email delivery for contact-form submissions. Resend privacy policy.
• Google LLC (Google Workspace) — receives and stores the email at contact@clartisgroup.com. Google privacy policy.

Some of these providers may transfer data to the United States. Such transfers rely on the EU–US Data Privacy Framework or, where applicable, on the European Commission's Standard Contractual Clauses.

5. How long we keep your data

• Contact-form submissions and any subsequent correspondence: up to 24 months from last contact, then deleted unless we're under a contractual or legal obligation to retain longer.
• Active-engagement data: for the duration of the engagement plus retention periods required by Belgian commercial and tax law (typically 7 years for accounting records).
• Server logs: typically less than 30 days, controlled by Cloudflare's defaults.

6. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate or incomplete data corrected
• Have your data deleted ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw any consent you've given
• Lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or the supervisory authority in your country of residence

To exercise any of these rights, email privacy@clartisgroup.com. We respond within one calendar month.

7. Security

The site is served over HTTPS with valid TLS certificates. Submissions are transmitted over encrypted channels and stored in encrypted form by our sub-processors. Access to contact-form submissions is restricted to the founding partners.

8. Children

The site is intended for adult professionals and is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to this policy

We update this page when our data practices change. The "last updated" date at the top reflects the most recent revision. Material changes affecting how we process your existing data will be notified by email where we have one on file.

10. Contact

Clartis Group
Brussels, Belgium
privacy@clartisgroup.com