Privacy Policy

The data controller for your personal data is:

O3 Group BV
Industrieweg 5, 3001 Heverlee, Belgium
Company / VAT number: BE 0822.112.612
RPR: Ondernemingsrechtbank Leuven
Email: info@o3.be
Phone: +32 (0)16 67 77 76

For any privacy-related question or to exercise your rights, contact us at privacy@o3.be.

We only collect what we actually need. Namely:

• Contact and quote forms: first name, last name, company, email, phone, message and project details you share with us.
• Business exchanges: email correspondence, offers, orders, invoices.
• Anonymous browsing data: pages viewed, traffic source, country, device type (via our analytics tool — see section 6).
• Billing data: legal company details and payment information required to perform the contract.

We do not collect sensitive data (health, political opinions, orientation…) and we do not perform advertising profiling.

• Answering your requests (quotes, contact, questions) — legal basis: pre-contractual measures at your request.
• Executing our contracts (producing, delivering, invoicing) — legal basis: contract performance.
• Complying with legal obligations (accounting, VAT, invoice retention) — legal basis: legal obligation.
• Improving our website through anonymous statistics — legal basis: legitimate interest.

No newsletter, no automated marketing emails, no reselling of your data. Ever.

• Contact / quote requests that don't turn into a project: 2 years from the last exchange.
• Client data (contracts, invoices): 10 years from the end of the contractual relationship (Belgian accounting requirement).
• Anonymous traffic statistics: aggregated, kept indefinitely without any possibility to re-identify you.

We never sell your data. We only share it with processors we absolutely need to run our services, all bound by GDPR-compliant data processing agreements:

• Cloudflare / Lovable — website hosting (edge infrastructure, data stored across EU and global zones).
• Supabase — back office database (Europe region).
• Umami Analytics — anonymous traffic statistics, cookieless, EU-hosted.
• Microsoft 365 — business email (@o3.be addresses).
• Logistics and production partners — strictly limited to the data needed to fulfil your order (carriers, printers, etc.).

Our client platform My Brand (www.my-brand.be) is a separate tool with its own privacy policy.

Good news: our website uses no tracking cookies, no advertising pixels and no third-party cookies.

To understand what works (and what doesn't), we use Umami Analytics, a privacy-friendly measurement tool: no cookies, no identifiable IP collection, no cross-site tracking. All data stays anonymous and is hosted in the EU. That's why you won't see a cookie banner — we simply don't need one.

Only strictly technical cookies (language preference, session) may be used to make the site work.

We apply reasonable technical and organisational measures to protect your data: HTTPS encryption throughout, access restricted on a need-to-know basis, regular backups, hosting in certified data centres. No system is bulletproof, but we take this seriously.

GDPR gives you concrete rights. At any moment you can:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion (right to be forgotten)
• Restrict or object to processing
• Retrieve your data in a portable format
• Withdraw your consent at any time

To exercise any of these rights, a simple email to privacy@o3.be is enough. We reply within a maximum of one month.

If you feel we are not respecting your rights, you may lodge a complaint with the Belgian Data Protection Authority. But we'd rather sort it out over a coffee first ☕.

This policy may evolve. The effective date at the top of the page indicates the latest update. For any material change, we'll notify active clients personally.