Privacy Policy

Jabeja is the controller responsible for the processing of your personal data as described in this privacy policy.

Jabeja BV

Dwarsstraat 2 bus 2A7, 8490 Jabbeke, Belgium

VAT number: BE 1041.778.515

Email: wiebren@jabeja.be

Phone: +32 497 40 39 49

We collect the following personal data when you complete our forms:

Via the contact form:

• Name (required)
• Email address (required)
• Phone number (optional)
• Company name (optional)
• Your message (required)

Via the analysis request form:

• Name (required)
• Email address (required)
• Website URL (required)
• Additional information (optional)

Automatically collected data:

• IP address
• Browser information (user agent)
• Time of submission
• Page visits and browsing behaviour (if you consent to analytical cookies)

We process your personal data for the following purposes:

• To answer your enquiry - When you contact us, we use your data to respond.
• To deliver a website analysis - When you request a free analysis, we use your data to carry it out and deliver it to you.
• For administrative purposes - To organise and improve our services.
• For website analytics - To understand how visitors use our website and to improve it (Google Analytics, only with your consent).
• For user experience optimisation - To improve the usability of our website through session recordings and heatmaps (Microsoft Clarity, only with your explicit consent).
• For security - IP addresses are stored to protect against abuse and fraud.

We process your personal data on the basis of:

• Your consent (Article 6(1)(a) GDPR) - By completing the form and ticking the box, you consent to us processing your data. This also applies to analytical cookies (Google Analytics) and session recordings (Microsoft Clarity).
• Performance of a contract (Article 6(1)(b) GDPR) - When you request a quotation or become a client.
• Legitimate interests (Article 6(1)(f) GDPR) - For the security of our website, protection against fraud and B2B direct marketing (commercial communications to business contacts). For B2B direct marketing, only publicly available business contact details are used, with an opt-out option in every message. You may object to this (see section 8).

• Contact form data: 3 years after the last contact
• Analysis requests: 3 years after the request
• Invoices and accounting documents: in accordance with the applicable statutory retention period. For other client data, the period associated with the purpose of the processing applies.
• Google Analytics data: 14 months (default retention period)
• Microsoft Clarity data: session recordings 30 days; recordings saved as favourites and a random sample up to 9 months
• Security data (IP logs): 6 months

Once these periods have expired, your data is automatically deleted or anonymised.

We only share your data with third parties where necessary for the provision of our services:

Processors:

• PostgreSQL database - Self-hosted database on EU servers (GDPR-compliant)
• Email provider (Resend Inc., USA) - For sending transactional emails and communications. Data processing on the basis of a Data Processing Addendum with Standard Contractual Clauses.
• Google Analytics (Google Ireland Ltd.) - Website analytics, only after your consent. Google may process data outside the European Economic Area in accordance with the applicable transfer terms.
• Microsoft Clarity (Microsoft Ireland Operations Ltd.) - Session recordings and heatmaps, only after your explicit consent. The data is stored in the Microsoft Azure cloud; transfers to Microsoft Corporation in the United States take place on the basis of Standard Contractual Clauses.

We never sell your data to third parties.

Our hosting and database process data via European entities. Google Analytics and Microsoft Clarity may process data outside the European Economic Area: Google in accordance with the applicable transfer terms, and Microsoft Ireland may transfer Clarity data to Microsoft Corporation in the United States on the basis of Standard Contractual Clauses (SCCs). Our email provider Resend Inc. stores data in the United States. For this transfer, a Data Processing Addendum (DPA) has been concluded with Standard Contractual Clauses (SCCs) in accordance with the EU guidelines, ensuring an adequate level of protection.

Under the GDPR, you have the following rights:

• Right of access - You can request which data we hold about you.
• Right to rectification - You can have incorrect data corrected.
• Right to erasure ('right to be forgotten') - You can request that your data be deleted.
• Right to restriction of processing - You can ask us to temporarily stop the processing.
• Right to data portability - You can receive your data in a commonly used format.
• Right to object - You can object to processing based on legitimate interests.
• Right to withdraw consent - You can withdraw your consent to analytical cookies and session recordings at any time via the cookie settings on our website.

To exercise your rights, send an email to wiebren@jabeja.be. We will respond within 30 days.

Our website uses strictly necessary cookies for the admin panel (authentication). In addition, we give you the choice to allow analytical cookies (Google Analytics) and session recordings (Microsoft Clarity) via our cookie banner.

Read more in our Cookie Policy.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse:

• SSL/TLS encryption across the entire website
• Secure database storage on our own EU servers
• Restricted access to personal data
• Regular security updates
• Content Security Policy (CSP) to protect against malicious scripts

Are you not satisfied with how we handle your data? Please contact us first at wiebren@jabeja.be.

You also have the right to lodge a complaint with the supervisory authority:

This privacy policy may be amended. We recommend that you consult this policy regularly. The most recent version is always available on our website. In the event of significant changes, we will inform you of them via our website.