What we collect, and what we don't.

Last updated: October 2026

Who we are

Sen & Co BV, Meerlaanstraat 8, 9320 Aalst, Belgium, registered in the Crossroads Bank for Enterprises (KBO) under number 1030.437.928 (VAT BE 1030.437.928), is the data controller for personal data processed through this website.

You can reach us at contact@senandco.be or +32 473 13 47 42.

What we collect

Contact form. When you send the contact form, you first tick a box to agree that we store your message. Without that consent the form is not sent. We then store what you enter: your name, email address, company, the topic you choose and your message, together with the page and site language you wrote from.

We send you an automatic confirmation by email, deliver your message to our business mailbox, and create or update a contact record for you in HubSpot, our customer relationship (CRM) system.

Downloads. When you request a file behind an email form, such as the sample Scope Baseline, you tick a box to agree that we store your email address. We store it in HubSpot with the name of the file, to give you the file and follow up once.

Spam protection. The contact and download forms use Cloudflare Turnstile to check that a person, not a bot, is sending them. It processes technical data about your browser and connection for that check only.

Analytics, only with your consent. If you choose Accept in the cookie banner, Google Analytics 4 is loaded through Google Tag Manager to collect pseudonymous usage data: pages visited, approximate region, browser type, and how you arrived at the site, keyed to a random identifier. IP addresses are anonymised.

If you choose Necessary only, or make no choice, no analytics run at all. You can change your choice at any time via Cookie settings in the footer. Details are in the cookie notice.

Server logs. Our hosting provider keeps standard server logs, including IP addresses, for security and operational purposes. We do not use them for marketing or analytics.

Beyond that, no marketing pixels, no social-media widgets and no cross-site tracking. The fonts and icons on this website are self-hosted.

Why we process it, and our lawful basis

• Contact form and downloads: your consent (GDPR Article 6(1)(a)), given with the tick box. If your enquiry leads to an engagement, we also process the data to take steps before entering into a contract (Article 6(1)(b)).
• Analytics: your consent (Article 6(1)(a)), given in the cookie banner.
• Spam protection and server logs: our legitimate interest in keeping this website and its forms secure (Article 6(1)(f)).

You can withdraw your consent at any time — for analytics via Cookie settings in the footer, for anything else by emailing contact@senandco.be. Withdrawal does not affect processing that took place before it.

How we store it, and for how long

Contact form messages are delivered to our business mailbox at Google Workspace, and our automatic replies are sent through the same account. Contact records and download requests are stored in HubSpot.

This website is hosted on Google Cloud (Google LLC), on a server in the United States. This concerns the website only; the systems we build for clients run on EU-hosted services. Some of our providers are based in the United States. Where data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

We keep enquiries and download requests for up to 24 months from receipt, unless an engagement begins. Retention is then governed by the commercial agreement and applicable Belgian law — typically 7 years for accounting records.

Who we share it with

We do not sell, rent or disclose your data to third parties for marketing or any other purpose. Only the sub-processors listed below process personal data on our behalf. We may share data if required by law or by a competent authority.

Sub-processors

• HubSpot — our CRM: contact records from the contact form and download requests.
• Cloudflare — Turnstile spam protection on the contact and download forms.
• Google — Google Workspace for email: our business mailbox and automatic replies. Google Analytics 4 and Google Tag Manager for usage measurement, only after you accept Analytics.
• Google Cloud (Google LLC) — hosting of this website, including standard server logs.

How we handle client data inside the systems we build is described on the Data page.

Your rights under the GDPR

You have the following rights with respect to your personal data:

• Right of access — ask us what data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data.
• Right to restriction — ask us to limit how we process your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — at any time, without affecting earlier processing.

To exercise any of these rights, email contact@senandco.be. We will respond within one calendar month.

Right to lodge a complaint

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be.

Changes to this notice

We may update this notice from time to time. The date at the top of this page shows the most recent revision.