Privacy & Cookie Policy
Last updated: December 15, 2025
1. Identity & Contact
Company: P&P Consultancy (sole proprietorship) Owner: Xander Wauters Address: Elegemstraat 1, 1700 Dilbeek, Belgium Email: [email protected] Phone: +32 496 26 30 25
2. Personal Data & Processing
| Contact forms | First/last name, email, message. Purpose: answer inquiries. Legal basis: consent. Storage: not stored server-side after processing. |
|---|---|
| Scheduling (Calendly) | Name, email, phone, company, language, notes, date/time. Purpose: schedule calls. Legal basis: contract/consent. Storage: Calendly as processor. |
| Checkout (Stripe) | Name, email, billing info, payment details, subscription choice. Purpose: payments and invoicing. Legal basis: contract/legal obligation. Storage: Stripe with EU SCCs; receipts kept per tax law. |
| Funnel A/B flag | Yes/no flag that a form was completed for testing. Legal basis: legitimate interest; retained until the test ends. |
3. Use of Cookies
We load only non-essential cookies after consent. You can change choices anytime.
| Name | Category | Purpose | Expiry |
|---|---|---|---|
| _session | Essential | Session management and security | Session |
| calendly_session | Essential | Embedded scheduling widget | Up to 21 days |
| ab_test_flag | Performance | A/B test flag for funnel forms | Until test ends |
| _ga, _fbp | Marketing | Analytics and advertising (only after consent) | 2 years |
Performance and marketing cookies load only with explicit opt-in consent per GDPR/ePrivacy. You can withdraw at any time.
4. Banner & Consent
We show a banner on first visit. Essential cookies are always active. You can allow all or manage settings. Choices are stored and can be changed via the banner or footer.
5. Third-party Processing
Calendly (scheduling) and Stripe (payments) act as processors under a DPA and apply EU Standard Contractual Clauses where relevant. No other third parties are used for personal data.
6. Security & Storage
We host on Ubuntu and PostgreSQL with Docker and SSH. Access is limited; passwords are stored securely. Only minimal data needed for the stated purposes is retained.
7. Your Rights
You may request access, correction, deletion, restriction, portability, withdraw consent, and object to processing/marketing. You can lodge a complaint with the Belgian Data Protection Authority (GBA/APD).
8. Contact & Requests
Email: [email protected] | Phone: +32 496 26 30 25