Privacy policy

Data controller

SEMANU is the data controller for personal data processed through this website. Company name: SEMANU. Company number: BE0828.291.116. Registered address: Kattendijkdok-Oostkaai 9, 2000 Antwerp, Belgium. Email: [email protected].

Data we collect and why

We collect only data you provide voluntarily through the contact form (name, email, company, message) or via a completed Readiness Check (your answers and if you request contact: name, email, company). We use this data to answer your question, schedule a call or deliver a personalised report. If you become a client or use the client portal, we also process your company details and the content of quotes, invoices and agreements, for the performance of the contract. When you sign in to the portal or sign a document electronically, we record your IP address, browser details and the time. We do this for security and as proof of who signed what and when, on the basis of our legitimate interest (Article 6.1.f GDPR). If you book an appointment through our website, we receive your name and email from our scheduling provider. We do not send marketing or newsletters without your explicit consent. Legal basis: your consent (Article 6.1.a GDPR) or the necessity of performing a contract (Article 6.1.b GDPR).

Lead and relationship management (CRM)

We maintain a private business CRM to track prospects, clients and partners. The CRM contains professional contact details: name, role, company, business email, business phone and (where available) a LinkedIn URL, plus a record of our interactions (calls, meetings, emails, quote status). We obtain these data directly from you, from public business sources, from earlier conversations (events, referrals, networking) or from the founder's own consented LinkedIn data export described in the next section. Legal basis: our legitimate interest in developing and maintaining business relationships in a B2B context (Article 6.1.f GDPR). We do not send unsolicited bulk marketing and we do not enrich records beyond standard professional fields. CRM records are kept for as long as the relationship is reasonably active, and at most 36 months after the last meaningful interaction. You can always ask to be removed from our CRM via [email protected]; we honour the request within five working days.

LinkedIn data

We use two official LinkedIn APIs. First, the Community Management API (read-only) to view aggregated statistics for the SEMANU company page (followers, post reach, engagement and anonymous follower demographics). We do not scrape personal profiles, we do not collect data about visitors of the page beyond what LinkedIn itself aggregates, and we never perform automated actions (no connection requests, no automated messages, no auto-likes or comments). Second, the Member Data Portability API under the EU Digital Markets Act, used exclusively to access the founder's own LinkedIn account (own profile, own connections list and own activity log) for which the founder has given explicit in-app consent to LinkedIn. Connection data thus made available are used to support our CRM and lead research, in line with the section above. If you are a connection of the founder and you do not wish your professional contact information to be processed in our CRM, email [email protected] and we will remove your record. We do not share LinkedIn data with third parties and we do not use it for advertising.

Cookies and analytics

This site uses Google Analytics to measure visitor behaviour. The analytics cookie is only placed after you give explicit consent through the cookie banner. You can withdraw consent at any time using the button at the bottom of this page. The site also uses technically necessary local storage to remember your language preference; this is not a cookie and requires no consent.

Retention period

Email correspondence via the contact form or the Readiness Check is kept for a maximum of 12 months, unless it is part of an active client relationship. Quotes, invoices and project documents are kept for as long as the statutory accounting retention obligation requires (seven years). Signed agreements and the related signing log, including the IP address, are kept for the duration of the relationship and for five years afterwards as proof. Client portal access logs are kept for up to 24 months. Anonymised Google Analytics data is retained according to Google's standard retention period of 14 months.

Sharing and your rights

We do not share your data with third parties for marketing or commercial purposes. To deliver our service we do rely on carefully selected processors, with each of whom we have signed a data processing agreement: Supabase for hosting, the database and document storage (within the European Union), Resend for sending emails, Onfact for invoicing, Calendly for scheduling appointments, and Google Analytics for website statistics (processor: Google Ireland Limited, Dublin). Processors outside the European Economic Area process data under the European Commission's Standard Contractual Clauses. We do not use automated decision-making or profiling. You have the right to access, correct, delete, restrict the processing of and port your data. You can exercise these rights by emailing [email protected]. We respond within one month. If you believe your rights have been violated, you can file a complaint with the Belgian Data Protection Authority (gba.be) or the competent authority in your country.

Contact and updates

For questions about privacy and data protection: [email protected]. A DPO is not required for SEMANU; the general contact point handles privacy matters.

Last updated: June 2026.