Privacy Policy

Introduction

This Privacy Policy explains how Brent Schoenmakers ("I", "me" or "my") collects, uses and protects your personal data when you visit this website (brentweb.be). I am the controller of this data and can be reached at brent@brentweb.eu.

Analytics Data

I use Umami, a cookieless analytics tool that I host myself on my own server in Germany (Hetzner, Nuremberg). It stores nothing in your browser: no cookies, no local storage, no visitor ID. Your IP address is used only to derive an approximate country and a daily-rotating, non-reversible hash, and is never stored. I see only aggregated figures:

• Pages visited and how long visits last
• Browser, operating system and device type
• Referral source (how you found this website)
• Approximate country

No data is shared with or sold to third parties, and it is never shown on the public website. If your browser sends a Do Not Track signal, nothing is recorded.

Forms, Cost Estimator & Website Check

When you use the contact form, the cost estimator or the free website check, I collect:

• Your name and email address
• Your message and the project details you provide: budget, timeline and optionally your business website on the contact form, or your answers, an optional project description, company name and notes in the cost estimator
• For the free website check: your website address, to prepare the report and send it to you

I use this information solely to respond to your inquiry. It is sent via Resend (an email delivery service) to my inbox and to yours as a confirmation, and stored in my customer relationship system (CRM), which I host myself. It is not shared with any other party. Submissions are rate-limited by IP address to prevent abuse; that counter is held only in server memory, is never written to disk, and is discarded automatically after a short period of inactivity. A hidden field on every form helps detect spam and contains no personal data.

Legal Bases

I only process your data where the GDPR provides a basis for it:

• Consent (Art. 6(1)(a)): for analytics, and for processing what you send through a form
• Pre-contractual steps (Art. 6(1)(b)): to answer your inquiry and prepare a quote
• Legitimate interest (Art. 6(1)(f)): for site security, such as rate limiting and spam detection, and for the functional preference cookies

Retention

• Form messages and inquiries: up to 12 months, unless they lead to a project and statutory accounting retention applies
• Analytics data: up to 14 months
• Preference cookies (bw-locale and bw-path): one year

Cookies and Local Storage

This website uses:

• Essential storage: required for the site to work, such as remembering your theme preference
• Preference cookies: two first-party cookies remember how you browse. bw-locale stores your chosen language and bw-path stores whether you entered through the business or the engineering section, so returning visits land on the right page. Neither contains personal data and neither is shared.

You can also control cookies through your browser settings. Disabling them may affect how parts of the site work.

Data Security

Measures I take to protect your information include:

• HTTPS encryption for all traffic
• Strict Transport Security (HSTS)
• Rate limiting on every form, to reduce abuse
• Regular security updates and monitoring

No transmission over the internet is completely secure, so I cannot guarantee absolute security.

Third-Party Services

This website uses the following third-party services:

• Resend: delivers contact form and cost estimator emails, including the PDF estimate summary you request
• Anthropic (Claude): only if you click 'Analyse my description' in the cost estimator: your project description and answers are sent to Anthropic's API to analyse them. Your name and email address are not. Anthropic may process this data in the United States.

Your Rights

You have the right to:

• access the personal data I hold about you
• have inaccurate data corrected
• have your data erased
• restrict processing
• object to processing based on legitimate interest
• receive your data in a common format (portability)
• withdraw consent at any time, without affecting processing that took place before

To exercise these rights, email brent@brentweb.eu. I will respond within one month.

If you are unhappy with how I handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).

Children's Privacy

This website is not intended for children under 13. I do not knowingly collect personal data from children.

Changes to This Policy

I may update this Privacy Policy from time to time. The date at the top of this page shows when the text last changed.

Contact

If you have questions about this Privacy Policy, email brent@brentweb.eu.