Privacy Policy

This notice explains how BrandLabel Agency processes personal data in connection with brandlabelagency.com, its operational diagnostic, enquiries and client relationships. Processing is governed by Regulation (EU) 2016/679 (GDPR) and applicable Belgian data-protection law. This notice provides information; browsing the website does not constitute consent to optional analytics.

BrandLabel Agency is the trading name of Kizidou Dimitra, operating as a sole trader and acting as the controller for the processing described in this notice. Business address: Rue de la Marjolaine, 1120 Bruxelles, Belgium. Enterprise number: 1040.366.570. VAT: BE1040366570. Privacy contact: contact@brandlabelagency.com.

Where BrandLabel Agency processes data solely on a client's instructions within a client system, that client remains the controller. The relevant service agreement and data-processing arrangements govern that activity.

We process the name, business name, email address, request type, message and other information you choose to provide to respond to enquiries, prepare reports and quotations, and manage services. Required form fields are identified in the form; without the necessary information we may be unable to respond or provide the requested service.

Hosting and security operations may involve IP addresses, request details, browser information and technical logs necessary to deliver the website, diagnose faults and prevent abuse. Optional audience measurement is described separately below. Please do not include sensitive personal data or unnecessary information about other people in your messages.

The diagnostic calculates estimates in your browser. A summary of the selected problems, staffing, frequency, time and cost assumptions and results may be retained in the browser's session storage to support a subsequent report request. It is not automatically submitted as an enquiry simply because you calculate an estimate.

If you submit a report or audit request containing that summary, it is sent with your contact details and becomes part of your enquiry. The browser copy is removed when the diagnostic is reset or the related request is successfully submitted; session storage normally ends when the tab is closed, subject to browser session-restoration behaviour. Estimates are indicative and do not constitute a solely automated decision producing legal or similarly significant effects.

Requested pre-contractual steps and performance of a contract with you rely on Article 6(1)(b) GDPR. Business-contact correspondence, website security and the establishment or defence of legal claims may rely on Article 6(1)(f), subject to the balancing of our legitimate interests against your rights. Statutory accounting and other legal duties rely on Article 6(1)(c). Optional analytics rely on consent under Article 6(1)(a).

Submitting an enquiry does not subscribe you to a newsletter or authorise advertising profiling. We do not currently offer a newsletter. Any future prospecting activity must have an applicable legal basis and comply separately with electronic-marketing rules; you may object to direct marketing at any time.

Necessary browser storage supports your requested functions and remembers your analytics choice. The local-storage record brandlabel_cookie_consent contains your choice, its date and the notice version. It is valid for 180 days, with validity checked when the website loads. Browser storage can also be removed through your browser settings.

Google Analytics 4, when activated, and Vercel Web Analytics load only after acceptance of optional analytics. You may refuse and continue using the website. The Cookie settings control in the footer withdraws the saved choice, stops future analytics collection on the reloaded page, removes accessible Google Analytics cookies and reopens the choice. Withdrawal does not affect the lawfulness of earlier processing based on consent.

With consent, Google Analytics 4 measures page visits and campaign performance. It may process browser identifiers, page addresses and titles, referral and campaign information, visit times, approximate location and device/browser information. Our configuration excludes personalised advertising and Google signals; automatic form-interaction and site-search measurement are disabled. Contact-form contents and diagnostic answers are not intentionally sent as analytics events.

Google Analytics uses the first-party cookies _ga and _ga_NL0WL6TWL0 to distinguish browsers and maintain session information. Our configuration requests a maximum lifetime of 180 days, without renewal on each visit, with path / on the website domain. User and event retention is set to two months, with reset on new activity disabled. This setting does not delete most aggregated reports. Aggregated statistics are retained only while needed to assess website and campaign performance.

Vercel Web Analytics provides aggregate traffic statistics from page addresses, referrals, visit times, approximate location and device/browser information. Vercel describes a request-derived visitor hash with a session lifetime of 24 hours; that is not a 24-hour deletion period for all reports. Our integration removes query strings and fragments from the page address it sends. Both services are optional and are distinct from necessary hosting/security operations.

The website uses Vercel for hosting and optional web analytics, Resend for sending form enquiries by email, OVHcloud for the business mailbox infrastructure, and Google for Google Analytics 4 when activated. Access is limited to what is necessary for the relevant service. Professional advisers and competent authorities may receive information where necessary for a lawful purpose. We do not sell your personal data.

Some providers or their subprocessors may process data outside the European Economic Area, including in the United States. Such transfers require an applicable adequacy decision or appropriate safeguards, such as the European Commission's standard contractual clauses and any necessary supplementary measures. An adequacy decision applies only within its scope, including certification requirements where relevant. Google describes its transfer arrangements at policies.google.com/privacy/frameworks. You may request information about relevant safeguards at our privacy contact.

Enquiries that do not lead to a collaboration are retained for up to 12 months after the last substantive contact. Ordinary client correspondence and operational records are retained during the collaboration and for up to two years after it ends. Records needed for statutory accounting or tax duties, or an existing dispute or legal claim, may be retained longer for that specific purpose.

Technical and security records are retained only as long as necessary for fault diagnosis, abuse prevention and investigation, taking account of applicable provider retention settings. Data no longer required is deleted or anonymised. Backup copies follow their applicable backup lifecycle and are not a blanket exception to your rights. Access controls, encrypted transmission and proportionate organisational measures are used to protect data; no system can guarantee absolute security.

Subject to the GDPR's conditions, you may request access, rectification, erasure, restriction and data portability, object to processing based on legitimate interests, and withdraw consent. Direct-marketing objections are not subject to a balancing of interests. We may request proportionate information to verify identity where necessary.

Send requests to contact@brandlabelagency.com. We respond without undue delay and in principle within one month of receipt. Where permitted because of complexity or the number of requests, this may be extended by up to two further months; we will inform you of the extension and reasons within the initial month.

You may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), or another competent supervisory authority, without first obtaining our agreement. Information is available at www.autoriteprotectiondonnees.be. Statutory administrative and judicial remedies remain unaffected.

Independent third-party websites linked from this website have their own privacy notices. This website is directed at business users, not children. Please contact us if you believe a child has provided personal data that should not be held.

This notice may be updated to reflect changes in services, processing or legal requirements. Material changes will be communicated as required. An update does not retrospectively create consent or authorise a new purpose requiring separate consent.