1. About this policy

This privacy policy explains how CLICKTRUST collects, uses, shares and protects your personal data. That applies when you visit our website, get in touch with us, sign up for our newsletter or a training, apply for a job or become a client. We process your data in line with the General Data Protection Regulation (GDPR) and Belgian privacy law. We’ve kept it readable: no legal fog, but complete and correct.

This policy covers clicktrust.be and all data we process as a company. It doesn’t cover third-party websites we link to, which have their own policies.

2. Who is responsible?

Clicktrust SRL (“CLICKTRUST”, “we”, “us”) is the data controller for your personal data. CLICKTRUST is part of CLICKTRUST Group.

• Address: Cours Saint-Michel 30a, 1040 Etterbeek, Belgium
• Company number / VAT: BE 0542.642.942
• Contact for privacy questions: contact@clicktrust.be

If you have questions about this policy or how we process your data, email us at the address above. We haven’t appointed a mandatory data protection officer (DPO), but your question will go straight to the right person.

3. What data we process

We only collect the data we need. Depending on how you’re in touch with us, this can include:

• Identification and contact details: name, email address, phone number and company name, for example from the contact form or an email.
• The content of your message: what you write to us, including your question, your objectives and any attachments.
• Newsletter data: your email address and, where you give it, your name, plus whether you open or click our emails.
• Training and Academy data: if you or your employer book a CLICKTRUST Academy training, participants’ names, contact details, company and attendance.
• AI Maturity Scan data: the answers you give and the contact details you leave when you use our free AI Maturity Scan.
• Job application data: your CV, cover letter and any other information you send us when you apply.
• Client and billing data: if you become a client, the data we need for the collaboration, the agreement and our accounting.
• Usage data (with consent): how you use our website, measured with Google Analytics 4 and Google Ads and managed through Google Tag Manager. See our cookie policy.
• Technical data: your browser sends a standard IP address, device type and browser information to our hosting partner, for the security and proper functioning of the site.

We don’t request or process special categories of data (such as health, political or religious beliefs), and our website isn’t aimed at children.

4. How we obtain your data

• Directly from you: when you fill in a form, email or call us, request a quote, sign up for the newsletter or a training, use the AI Maturity Scan or apply for a job.
• Automatically: through cookies and similar technologies when you visit the site, and in our newsletters. Analytics and advertising cookies are only placed after you consent.
• From public or professional sources: to a limited extent, such as a professional profile on LinkedIn, when it’s relevant to a contact, collaboration or application.

5. Why we use your data, and on what legal basis

We only process your data for clear purposes, each with a legal basis under the GDPR:

Purpose	Legal basis (GDPR)
Answering your question or request, preparing a proposal or quote	Pre-contractual measures and legitimate interest (art. 6.1.b and 6.1.f)
Performing an agreement, including trainings, and managing the collaboration	Performance of the agreement (art. 6.1.b)
Sending our newsletter	Your consent (art. 6.1.a), revocable at any time
Handling your job application	Pre-contractual measures (art. 6.1.b) and, for keeping your CV on file, your consent (art. 6.1.a)
Accounting, billing and legal obligations	Legal obligation (art. 6.1.c)
Website statistics and ad measurement	Your consent (art. 6.1.a), revocable at any time
Promoting our services to existing clients	Legitimate interest (art. 6.1.f), with a right to object
Security, abuse prevention and the proper functioning of the website	Legitimate interest (art. 6.1.f)

Where we rely on a legitimate interest, we always weigh it against your privacy. You can object to such processing (see your rights below).

6. Cookies

We only place analytics and advertising cookies after you accept them. If you refuse them or close the cookie notice, we place no tracking cookies. Our cookie policy lists exactly which cookies we use, how long they stay and how to manage your choice.

7. Who we share data with

We only share your data when it’s necessary, and always with appropriate safeguards:

• Processors (acting for us): Google Ireland Ltd. for Google Analytics, Google Ads and Google Tag Manager; 10Web for hosting the website; ActiveCampaign for sending our newsletter and emails. They only process data on our instructions and under a data processing agreement.
• Within CLICKTRUST Group: to a limited extent, when needed for the service or for running the business, and always in line with this policy.
• Professional advisers: such as our accountant, as far as the law or a contract requires.
• Governments or authorities: only when the law requires it.

We never sell your data or share it with third parties for their own marketing.

8. Transfers outside the EU

Some of our processors, such as Google and ActiveCampaign, may process data on servers outside the European Economic Area, including in the United States. This only happens with appropriate safeguards: the EU-US Data Privacy Framework and/or the European Commission’s standard contractual clauses (SCCs), plus technical measures. You can ask us for a copy of the relevant safeguards.

9. How long we keep data

We don’t keep your data longer than we need it for the purpose we collected it for, or longer than the law requires.

Type of data	Retention period
Contact requests that don’t lead to a collaboration	Up to 12 months after the last contact
AI Maturity Scan results	Up to 12 months after completing the scan, unless a collaboration follows
Newsletter subscription	Until you unsubscribe. Inactive subscribers are removed after 24 months without opening an email
Job applications (not hired)	Deleted within 6 months after the procedure ends. With your consent, kept up to 2 years in our recruitment reserve
Training participant data	Up to 3 years after the training, for follow-up and proof of attendance
Client and contract data	For the duration of the collaboration, then up to 10 years for legal and contractual claims
Accounting data and invoices	7 years (legal retention obligation)
Analytics (Google Analytics 4)	Up to 14 months
Your cookie consent choice	Up to 6 months, after which we ask again

10. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. These include secure connections (HTTPS), need-to-know access, reliable processors and clear internal procedures. No system is 100% secure, but we do everything we can to keep the risk as low as possible. If there is a data breach, we follow the legal duty to report it.

11. Your rights

Under the GDPR you have the following rights over your personal data:

• Access: to know which data we hold about you and receive a copy.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to have your data deleted (the “right to be forgotten”), within legal limits.
• Restriction: to have the processing temporarily suspended.
• Portability: to receive your data in a readable format or have it transferred.
• Objection: to object to processing based on our legitimate interest, and to object to direct marketing at any time.
• Withdrawing consent: to withdraw consent at any time. This doesn’t affect processing we carried out before you withdrew it.

To use any of these rights, email contact@clicktrust.be. You can unsubscribe from the newsletter at any time with the link in every email. We may ask you to confirm your identity. We reply within the legal deadline of one month, which can exceptionally be extended for complex requests. Using your rights is free of charge.

If you’re not satisfied with how we handle your data, you can file a complaint with the Belgian Data Protection Authority (DPA): Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, +32 (0)2 274 48 00, gegevensbeschermingsautoriteit.be. We’d appreciate it if you contacted us first, so we can try to resolve it together.

12. Automated decision-making

We don’t make decisions with legal or similarly significant effects based purely on automated processing or profiling. Our advertising tools work with statistics and audiences, not with automated decisions about you as an individual. The AI Maturity Scan gives an indicative score only: no decision is attached to it.

13. Children

Our website and services are aimed at businesses and professionals, not at children. We don’t knowingly collect data from anyone under 16. If you think we have, let us know and we’ll delete it.

14. Links to other websites

Our site may link to external websites and platforms, such as LinkedIn, Facebook, Instagram and YouTube. We aren’t responsible for their privacy practices, so please read their policies when you use their services.

15. Changes to this policy

We may update this policy when our services, our tools or the regulations change. If we make a significant change, we update the date below. The latest version is always on this page.

Last updated: 24 september 2026