Privacy Policy

1. Who is responsible for your data

Rokefella BV, registered in Belgium (VAT BE1041.035.177), is the data controller for personal data collected through rokefella.com, within the meaning of the General Data Protection Regulation (GDPR). Contact: privacy@rokefella.com.

2. What data we collect

Rokefella.com only collects data you actively provide, or data that is technically necessary to run the site:

— Contact details: if you email us directly (e.g. to info@rokefella.com), we process whatever you share in that message — typically your name, email address, and the content of your query.

— Technical data: like most websites, rokefella.com automatically collects limited technical data on a visit, such as IP address, browser type, and pages visited. This is used solely for the proper functioning and security of the site, not for profiling.

Rokefella.com does not currently use a booking widget or any third-party scheduling tool — getting in touch happens via a plain email link, so no data is collected or transmitted until you choose to send an email yourself.

3. Why and on what basis we process this data

— Responding to an email enquiry: legitimate interest in providing a correct and timely reply (Art. 6.1.f GDPR).

— Security and proper functioning of the website: legitimate interest in protecting the site against misuse (Art. 6.1.f GDPR).

— Meeting legal obligations (e.g. accounting records for invoiced work): legal obligation (Art. 6.1.c GDPR).

4. Who we share your data with

We never sell your data to third parties. We work with a limited number of carefully chosen service providers who help run the website and our correspondence:

— Our hosting provider, for keeping rokefella.com online

— Microsoft 365, for email correspondence

Where these providers process data outside the European Economic Area, appropriate safeguards are in place, such as the EU Standard Contractual Clauses.

5. How long we keep your data

— Email correspondence: up to 3 years after the last contact, for follow-up and administrative purposes

— Technical/security logs: typically no longer than 30 days

— Invoicing data: 7 years, in line with Belgian accounting law

6. Cookies

Rokefella.com only uses cookies that are strictly necessary for the site to function. No consent is required for these under the GDPR and ePrivacy Directive. If analytics or marketing cookies are added in the future, your explicit consent will be requested first via a cookie banner, and this policy will be updated accordingly.

7. Your rights

Under the GDPR, you have the right to: access the data we hold about you; correct inaccurate data; request erasure where legally possible; restrict processing; data portability; object to processing based on legitimate interest; and withdraw consent at any time. To exercise any of these rights, email privacy@rokefella.com — we respond within 30 days at the latest. If you're unhappy with how we handle your data, you have the right to lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

8. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, alteration, or destruction — including encrypted connections (HTTPS), restricted system access, and working only with reliable, GDPR-compliant service providers.

9. Changes to this policy

We may update this privacy policy from time to time, for example following changes to the website, the service providers we use, or applicable law. The date below reflects the last update.

10. Contact

privacy@rokefella.com