Privacy policy

1. Who is responsible for your data

The data controller is In Good Company SRL, Rue de Baudémont 28, 1460 Ittre, Belgium, company number 0829.865.286. It publishes this website and carries the BYM brand.

Patricia and Isabelle, the two co-founders of BYM, handle your data and your requests personally. We have not appointed a data protection officer, as the law does not require one for an organisation of our size and activity. For anything related to your data, write to patricia [at] bybym.be or isabelle [at] bybym.be. For a technical question about the website, the publisher’s technical contact is regis [at] ingoodcompany.be.

2. What we collect

When you use the contact form, we receive what you type in:

• your first and last name;
• your company (optional);
• your email address;
• the topic you choose;
• your message;
• the date and time of sending, and the language of the page you used.

When you visit the site, our hosting provider’s servers automatically record technical data in their logs: your IP address, the type of browser and device, the pages requested and the time of the request. We use these logs only to keep the site running and secure. They are kept briefly (see section 5).

Anti-spam: the form includes a hidden field that humans do not see and a time stamp. They help us tell robots from people. They hold no personal data about you.

Cookies: the site sets two cookies that are strictly necessary (your language, your cookie choices). They do not identify you. See our cookie policy.

Anonymous audience measurement: we use Umami, a cookie-free tool, to know how the site is used. For each page view it records the page, the country (worked out from your IP address, which is then discarded and not stored in the statistics), the type of device and browser, and the site you came from. It sets no cookie and stores no IP address in the statistics; visits are counted with an anonymous hash that changes every day and cannot be traced back to you. None of this allows us to identify you. You can switch it off with one click (see our cookie policy, section 3).

We collect nothing else: no advertising pixel, no social network plug-in, no profiling.

3. Why we use it

We use your data to:

• reply to your message and have the conversation you asked for;
• follow up on our relationship if that conversation leads to working together (proposal, planning, invoicing);
• prevent abuse of the form (spam, automated sending, excessive volumes).

We do not use it to send you newsletters or marketing emails, to build a profile of you, or to sell or rent it to anyone.

4. On what legal basis

Under the General Data Protection Regulation (GDPR), each use of your data rests on a legal basis:

• Replying to your request and following up: steps taken at your request prior to entering into a contract (article 6.1.b GDPR).
• Your consent, given by ticking the box under the form (article 6.1.a GDPR). You can withdraw it at any time (see section 8); this does not affect what was done before you withdrew it.
• Security and anti-spam, including the technical logs: our legitimate interest in keeping the site and the form working for everyone (article 6.1.f GDPR). This use is limited to what is strictly necessary and does not affect your rights or freedoms.
• Anonymous audience measurement: our legitimate interest in knowing which pages are read, so that we can improve the site (article 6.1.f GDPR). The tool is cookie-free and keeps nothing that could identify you. You can object at any time, with one click, from the “Manage cookies” panel in the footer.

5. How long we keep it

• Your message and our exchanges: for as long as it takes to handle your request, then 12 months after our last exchange, so that we can pick up the conversation if you come back. After that, they are deleted from our mailboxes.
• If we work together: the documents of that relationship (proposal, contract, invoices) are kept for as long as Belgian accounting and tax law requires.
• Technical logs of the hosting provider: 30 days at most.
• Email delivery records at our email provider (Resend): kept by that provider for a limited period for delivery and troubleshooting.
• Cookies: 12 months (language) and 6 months (cookie choices), then they expire on their own.
• Audience measurement statistics (Umami): anonymous, kept 6 months on the Umami Cloud Hobby plan.
• Your audience measurement opt-out: stored in your browser (local storage, key umami.disabled) until you clear your browser data.

You can ask us to delete your data earlier at any time (see section 8).

6. Who receives it

Inside the company: Patricia and Isabelle read and answer your messages, and nobody else. The publisher’s technical contact (regis [at] ingoodcompany.be) administers the hosting and email-delivery accounts for maintenance only.

Technical providers (processors), which act only on our instructions:

• Resend Inc. (United States): delivers the emails sent by the form, both to us and the acknowledgement sent to you.
• Railway Corp. (United States): hosts the website and the form’s server-side code.
• OVH (OVHcloud SAS, France): hosts the bybym.be mailboxes.
• Umami Software, Inc. (United States), Umami Cloud service: processes our anonymous audience statistics, hosted on servers in the European Union.

We never sell, rent or share your data for advertising purposes. We would disclose it to a public authority only if the law obliged us to.

7. Transfers outside the European Union

Resend Inc. and Railway Corp. are established in the United States. Your data may therefore be processed there.

Such transfers are framed by the safeguards provided for in the GDPR: the provider’s certification under the EU-US Data Privacy Framework, or standard contractual clauses approved by the European Commission, together with the data processing terms we have accepted with each provider.

Umami Software, Inc., which provides our audience measurement tool, is also a US company. The statistics it processes for us are anonymous and hosted on servers in the European Union; the provider may nevertheless access them remotely from the United States.

You can ask us for more information about these safeguards at patricia [at] bybym.be or isabelle [at] bybym.be.

8. Your rights

You have the right to:

• access the data we hold about you and receive a copy;
• rectify it if it is inaccurate or incomplete;
• erase it (“right to be forgotten”);
• restrict its use in certain cases;
• object to a use based on our legitimate interest;
• receive the data you gave us in a structured, machine-readable format (portability);
• withdraw your consent at any time, with no effect on what was done before.

How: write to patricia [at] bybym.be or isabelle [at] bybym.be, or simply reply to the acknowledgement email you received. Tell us what you would like. If we have a reasonable doubt about who you are, we may ask you for proof of identity.

When: we reply within one month. If your request is complex, this can be extended by two months; we will tell you why.

Exercising these rights is free of charge.

9. Complaints

If you think we have not handled your data properly, tell us first: we would rather fix it. You also have the right to lodge a complaint with the Belgian supervisory authority:

If you live in another EU country, you may also contact the supervisory authority of that country.

10. Cookies, security and updates

Cookies: the site sets two strictly necessary cookies. Its audience measurement is cookie-free and can be switched off at any time. Nothing else runs without your consent. Details in our cookie policy.

Security: the site is served over HTTPS, so what you type in the form is encrypted in transit. Access to our mailboxes and to the hosting account is protected by strong passwords and two-factor authentication. Only Patricia and Isabelle, and the publisher’s technical contact for maintenance, have access.

Updates: we may update this policy when the site, our providers or the law change. The date and version number at the top tell you which version you are reading. If a change affects your rights in a meaningful way, we will say so clearly on this page.