Privacy Policy

Last Updated: March 12, 2026

1 — Introduction & Controller Identity

This Privacy Policy explains how Vik Vanackere BV (“Vik Vanackere”, “we”, “our”, or “us”) collects, uses, discloses, and protects personal data when you visit our website and when you interact with us about our education, training, workshops, programs, and consulting services delivered across Canada. This policy applies to information we handle as a Data Controller under the EU General Data Protection Regulation (GDPR) and applicable Belgian law.

Data Controller: Vik Vanackere BV, Leroylaan 9, 2650 Edegem, Belgium. Primary contact: [email protected]. If you prefer, you may also reach our privacy contact at [email protected]. We do not appoint a mandatory Data Protection Officer, but we responsibly manage data protection matters through the contacts listed above.

By using this website or submitting a contact request, you agree that we may process your personal data in accordance with this Privacy Policy. If you do not agree, please discontinue use of the site. This document should be read together with our Cookie Policy and Terms of Service.

2 — Personal Data We Collect

We collect only the information needed to provide our services, respond to your requests, and operate our site securely and reliably. The categories of data we process include:

• Identity and contact details: name, business email address, business phone number, organization, role or department.
• Inquiry and project details: your objectives, requirements, timelines, constraints, locations, delivery preferences, and any documents you choose to share that relate to program design or delivery.
• Technical data: IP address, browser type, device/OS information, language settings, approximate geolocation at the city/region level inferred from IP, and security logs.
• Usage data: pages visited, referring URLs, time on page, scroll depth, click paths, and error events for diagnostics and performance.
• Cookies and identifiers: essential cookies for site functionality, and—subject to consent—analytics and marketing identifiers. See Section 4 for details.
• Conversion and communications data: the fact and time of form submission, our subsequent emails, and scheduling metadata (for example, meeting time and medium).

We do not intentionally collect special-category data (such as health, biometric, union membership, political opinions, or religious beliefs). We do not collect financial account numbers or government IDs through this website. Please do not submit confidential or special-category information through our general contact form.

3 — Why We Process Your Data & Legal Bases

We rely on the following GDPR legal bases depending on context:

• Contact and proposals: to take steps at your request prior to entering into a contract and to perform a contract (Art. 6(1)(b)); and your consent for the specific submission (Art. 6(1)(a)).
• Analytics (optional): with your consent (Art. 6(1)(a)).
• Marketing and remarketing (optional): with your consent (Art. 6(1)(a)).
• Security, fraud prevention, and diagnostics: our legitimate interests in maintaining a secure, reliable website (Art. 6(1)(f)).
• Legal and tax obligations: compliance with applicable laws (Art. 6(1)(c)).

Automated decision-making: we do not engage in automated decision-making or profiling that produces legal or similarly significant effects under Article 22 GDPR.

4 — Cookies & Tracking Technologies

Cookies are small text files stored on your device. We also rely on similar technologies such as pixel tags and server-side event logging to improve reliability, measure performance, and—subject to consent—understand usage and advertising effectiveness. We group cookies into three categories:

• Essential: required for site operation and security (for example, session continuity and cookie preference storage). These load without consent.
• Analytics (consent): used to measure site usage. We use Google Analytics 4 with IP anonymization. Illustrative cookies: _ga (2 years) and _ga_XXXXXXXXXX (2 years).
• Marketing (consent): used for remarketing and conversion measurement. Illustrative cookies: _gcl_au (90 days), _fbp (90 days), and _fbc (90 days when available).

Our essential cookies typically include _site_session (session) and cookie_consent (12 months). You can manage non-essential cookies anytime via “Manage cookie preferences” in the footer. For detailed lists and retention, see our Cookie Policy.

5 — Consent in the EEA/UK and Canada

Visitors from the EEA and UK see a consent banner. Analytics and marketing technologies only activate after you provide explicit, informed consent. Your choices are stored in the cookie_consent cookie for up to 12 months. You may withdraw consent at any time using the footer link or by clearing cookies in your browser. Withdrawal does not affect the lawfulness of processing before withdrawal.

For Canadian audiences, our practices align with applicable privacy laws, and we honor the same opt-in standard on analytics and marketing cookies surfaced through our consent banner for consistency and clarity.

6 — Sharing With Service and Advertising Partners

We do not sell personal data. We share limited data with carefully selected service providers who help us operate the site, deliver communications, measure performance, and—subject to consent—run analytics and marketing. These partners act as processors or independent controllers according to their roles. Typical recipients include:

• Google (Analytics 4 and Google Ads): analytics metrics, cookie IDs, and conversion events.
• Meta (Pixel and marketing audiences): page views, conversions, and hashed identifiers for audience measurement where consented.
• Cloud and security providers (for example, content delivery and threat mitigation): IP-based logs for availability and protection.

These providers may not use the data we share for their own independent commercial purposes. Where required, we put in place data processing terms and appropriate safeguards for international transfers.

7 — International Transfers

As a Belgian company serving clients across Canada, personal data may be transferred outside the EEA, including to the United States and Canada, when we use global service providers. We rely on recognized transfer mechanisms such as the EU–US Data Privacy Framework where applicable, European Commission Standard Contractual Clauses (EU 2021/914), and comparable UK instruments for UK data. We also perform transfer impact considerations appropriate to the service and data involved.

8 — Data Retention

We retain data only as long as needed for the purposes described in this policy or as required by law:

• Contact submissions and proposal records: typically 2 years from the last interaction.
• Analytics data: up to 14 months in aggregated form.
• Marketing cookies and identifiers: per the cookie lifetime listed in our Cookie Policy.
• Email correspondence: the duration of the active relationship plus up to 1 year, unless legal obligations require longer.
• Server and security logs: typically up to 90 days unless a longer period is necessary for incident review.
• Cookie consent records: up to 3 years for audit purposes.
• Legal, tax, and compliance records: as required by applicable Belgian and EU law.

9 — Your Rights

Under GDPR, you have the following rights subject to conditions and applicable exemptions: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21). You may withdraw consent at any time (Art. 7(3)). To exercise these rights, email [email protected] with a clear description of your request. We may ask for reasonable information to verify your identity. We aim to respond within 30 days and may extend by up to 60 days for complex requests, as permitted by law.

You also have the right to lodge a complaint with your local supervisory authority. Our lead authority in Belgium is the Belgian Data Protection Authority (APD/GBA). We welcome the opportunity to resolve concerns directly before you escalate a complaint.

10 — Children

Our website and services are intended for professionals and organizations. We do not knowingly collect personal data from individuals under 16 years of age. If we learn that data from a child under 16 has been submitted without verifiable parental consent, we will delete it promptly.

11 — Do Not Track

Some browsers transmit “Do Not Track” (DNT) signals. Our site does not respond to DNT signals. Our optional analytics and marketing technologies operate only after you provide consent through the cookie banner.

12 — Account & Data Deletion Requests

To request deletion of your personal data, email [email protected] with the subject line “Data Deletion Request.” We will verify your identity and complete the request unless an exemption applies (for example, legal retention obligations). We will confirm the outcome of your request in writing.

13 — Business Transfers

In the event of a merger, acquisition, restructuring, asset sale, financing, or insolvency, personal data may be transferred to a successor entity where permitted by law. If a transfer materially changes how your data is used, we will provide a clear notice on our website and, where required, obtain new consent.

14 — California (CCPA/CPRA)

Although we are established in Belgium and primarily serve clients across Canada, our website may receive visits from California residents. For the 12 months preceding the date of this Policy, we may have collected the following categories of personal information as defined by CCPA/CPRA: identifiers (such as name, email, IP address), internet or network activity (such as page views and interactions), and inferences drawn from activity (for advertising segments). We disclose such information to service providers and, where consented, advertising partners for business purposes.

We do not sell personal information for money. We may “share” personal information for cross-context behavioral advertising where you have provided consent through the cookie banner. California residents may request access, deletion, or correction, and may opt out of sale/sharing by adjusting preferences in our cookie panel or by contacting us at [email protected]. We will not discriminate against you for exercising your rights.

15 — Virginia (VCDPA)

Virginia residents have the rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising. We do not sell personal data. You may submit a request by emailing [email protected]. If we deny your request, you may appeal by responding with the subject line “Appeal of Refusal — Privacy Request.” If unresolved, you may contact the Virginia Attorney General as provided by law.

16 — Nevada

We do not sell personal information as defined by Nevada law. Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject “Nevada Do Not Sell Request.”

17 — Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via a notice on our homepage at least 14 days before they take effect, unless immediate changes are required by law or security needs. The “Last Updated” date at the top of this page reflects the most recent revision.

18 — Contact

Controller: Vik Vanackere BV
Registered Address: Leroylaan 9, 2650 Edegem, Belgium
Email: [email protected] (general) or [email protected] (privacy requests)

Supervisory Authority in Belgium: Belgian Data Protection Authority (APD/GBA). We encourage you to contact us first so we can address your concerns quickly and transparently.