Privacy policy

In short

• We only collect what you send us through the contact form or by e-mail.
• We use this information to handle your request for a meeting and a quote, and for nothing else.
• No advertising or analytics cookies, no account to create, no newsletter.
• We do not sell or rent your data.

Who is responsible for your data

RND COVENANT LLC, a US limited liability company (State of New Mexico, file number 0008065019), which runs Baliselab.

• New Mexico registered agent: Republic Registered Agent Services Inc., 8206 Louisiana Blvd NE Suite A, Albuquerque, NM 87113, United States
• Contact for any question about your data: contact@baliselab.com

The contact form

What we receive: your name, the name of your business, your type of business, your phone number or e-mail address and, if you provide them, the best time to reach you and your message. We also know which language you used to fill in the form.

Why: to get back to you, set up a meeting and send you a quote.

Legal basis: these exchanges take place at your request, before a possible contract (Article 6(1)(b) GDPR).

How: the form stores nothing on the website. Your request is sent to us by e-mail when you submit it, and is then kept only in our mailbox.

How long: If your request does not lead to a contract, we delete it 12 months after our last exchange. If a contract is concluded, we keep the relevant exchanges for the duration of the project, then for as long as the law requires us to keep our accounting records.

Required fields are marked in the form. Without them, we cannot get back to you.

Security and technical logs

Protection against abuse: to limit how many times the form can be sent from the same connection, your IP address is turned, using a secret key, into a fingerprint from which the address cannot be recovered. Neither your IP address nor this fingerprint is stored by the site; the fingerprint is only used for a counter that clears after about one minute. Legal basis: our legitimate interest in protecting the site and our mailbox against abuse (Article 6(1)(f) GDPR).

Hosting logs: like any web host, Cloudflare processes technical connection data (IP address, date and time, page requested, browser type) to deliver and protect the site. Logs of the function that sends the form are kept for no more than 7 days by Cloudflare and do not contain the content of your request. Legal basis: our legitimate interest in running the site and keeping it secure (Article 6(1)(f) GDPR).

Visitor statistics

No analytics tool is installed on this site. It loads no audience measurement script and sets no cookie for that purpose. The only data of this kind is our web host’s technical logs, described above.

Cookies

This site sets no analytics, advertising or social media cookies, and loads no content from other websites (fonts are hosted on our own server). That is why no banner asks for your consent.

If our web host detects suspicious traffic, it may set a technical cookie that is strictly necessary to protect the site (__cf_bm or cf_clearance). This cookie is not used for advertising or analytics.

Demo sites

The forms and booking screens on the demo sites (Balise Bistro, Balise Cars, Balise Beauty) do not send or store any data.

Who receives your data

Only the Baliselab team reads your requests. The following providers are also involved, solely to run the service:

• Cloudflare, Inc. (United States): website hosting, the function that sends the form, forwarding of e-mails sent to contact@baliselab.com (Email Routing service), site protection;
• Google LLC (United States): our Gmail mailbox, where your requests and e-mails arrive.

We do not pass your data on to anyone else, unless required by law.

Transfers outside the European Union

Our company is based in the United States. The information you send us is therefore received and processed in the United States, by us and by the providers listed above. The GDPR applies to this processing wherever it takes place.

• Cloudflare states that it relies on its certification under the EU-U.S. Data Privacy Framework (recognised by the European Commission on 10 July 2023) and, failing that, on the European Commission’s standard contractual clauses included in its data processing addendum: www.cloudflare.com/trust-hub/gdpr/
• Google states that it relies on its certification under the EU-U.S. Data Privacy Framework and on the European Commission’s standard contractual clauses: policies.google.com/privacy/frameworks

If you have any question about these transfers, write to us at contact@baliselab.com.

Your rights

You can ask us at any time:

• to access your data and receive a copy;
• to correct it;
• to erase it;
• to restrict its use;
• to receive it in a common format so you can pass it on to someone else (portability);
• and you can object to its use based on our legitimate interest.

Write to us at contact@baliselab.com. These rights apply even if your data is processed in the United States. We reply within one month. If we have doubts about your identity, we may ask you for information to verify it.

If you believe your data is not being handled properly, you can lodge a complaint with the Belgian Data Protection Authority: www.dataprotectionauthority.be, or with the data protection authority of the country where you live or work.

Changes

We update this page if the way we handle your data changes. The date of the last update is shown at the top of the page.