1. Who We Are

Leboutte Sebastien (“Leboutte Solutions”, “we”, “our”, “us”) operates the website https://lebouttesolutions.com/. We are registered in Belgium under company number BE0788.363.639.

Our data-protection contact is Leboutte Sebastien, reachable here.

2. What Personal Data We May Collect

  • Identity data – name, company, role.
  • Contact data – email, telephone, billing/shipping address.
  • Technical data – IP address, browser agent, device, cookies, log files.
  • Usage data – pages visited, links clicked, session duration.
  • Marketing data – newsletter preferences, email-open rates, campaign tags.
  • Transaction data – quotes, invoices, payment IDs (handled by Stripe / PayPal).
  • User-generated content – comments, media uploads, support tickets.

3. Lawful Bases & Purposes of Processing

  • Contract – to prepare or fulfil a service agreement (quotes, projects, maintenance).
  • Consent – newsletter signup, marketing cookies, case-study publication.
  • Legitimate interest – site security, fraud prevention, analytics to improve services.
  • Legal obligation – tax, accounting, and regulatory compliance.

4. Comments & Media Uploads

When visitors leave comments we collect the data shown in the form, the visitor’s IP, and browser user-agent string for spam detection. An anonymised hash of your email may be sent to Gravatar (policy) to display your avatar.

If you upload images, avoid embedding location data (EXIF GPS); visitors can download and extract it.

5. Contact & Quote Forms

Data submitted via forms (name, email, project details, files) is used solely to respond to your enquiry, prepare a proposal, or perform the contract if you become a client. Submissions are stored for 12 months and never added to marketing lists without explicit consent.

6. Cookies & Tracking

We use essential, functional, analytics, and marketing cookies. Detailed information, including retention periods and opt-out methods, is provided in our separate Cookie Policy. Non-essential cookies load only after you grant consent via the banner powered by Complianz.

7. Analytics

We run Google Analytics 4 in IP-anonymisation mode. Data is aggregated; user-ID features are disabled. Retention is set to 14 months. Analytics cookies are dropped only after consent.

8. Email Marketing

Newsletter emails are sent via FunnelKit. We record opens and clicks to measure campaign effectiveness. You can unsubscribe at any time by clicking the link at the bottom of each email or by contacting us.

9. Processors & Third-Party Services

  • Hosting – OVH (servers in EU).
  • CDN & Security – Cloudflare (WAF, DDoS, CDN).
  • Payment – Stripe, PayPal (PCI-DSS compliant).
  • Email – OVH.
  • Analytics – Google Analytics 4.
  • Spam defence – Akismet / Google reCAPTCHA.

These providers only process data on our instructions and under GDPR Standard Contractual Clauses or equivalent safeguards.

10. International Transfers

Data may be processed outside the EEA. In such cases we rely on adequacy decisions, SCCs, or binding corporate rules to ensure equivalent protection.

11. Data Retention

We keep personal data only as long as necessary for the purpose collected or as required by law. Typical periods:

  • Contact/quote enquiries – 12 months
  • Client project files – 7 years (tax/accounting)
  • Email marketing consent – until withdrawal
  • Google Analytics event data – 14 months
  • Comments & their metadata – indefinitely

12. Security Measures

HTTPS/TLS encryption, two-factor admin logins, server hardening, malware scans, real-time firewall (Cloudflare), least-privilege access controls, and automated off-site backups protect your data.

13. Automated Decision-Making

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

14. Children’s Data

Our services are not directed to children under 18. If we learn that we have collected personal data from a child, we will delete it promptly.

15. Your Rights

  • Access – obtain a copy of your data.
  • Rectification – correct inaccurate data.
  • Erasure – request deletion (“right to be forgotten”).
  • Restriction – limit processing.
  • Portability – receive data in a structured format.
  • Objection – object to processing based on legitimate interest.
  • Withdraw consent at any time.
  • Lodge a complaint with your supervisory authority.

To exercise these rights, contact us. We may verify your identity before processing the request.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. Significant changes will be announced on this page and, where appropriate, notified by email.

17. Contact

Questions? Email us or write to Leboutte Solutions, Belgium.

Last updated – 04/24/2025