CRB

Cookie Policy

What this site stores on your device, what loads only after you say yes, and how to change your mind. Belgium is an EU member state, so this is written under the GDPR and the EU rules on device storage, not a courtesy notice.

Last updated: 25 September 2026.

What this policy covers, and which law applies

This page names every cookie and browser-storage item company-registration-belgium.com sets, who sets it, what it is for, and how long it lasts. It does not restate legal basis, retention periods or your full set of rights: those live on the privacy policy, and the terms of using this site are on the terms of service.

Belgium is a European Union member state, so Regulation (EU) 2016/679 (the GDPR) applies to this site directly, and storage or access to information on your device beyond what is strictly necessary needs your consent under the EU ePrivacy rules (Directive 2002/58/EC). This page is not built on any Belgian implementing article until one is confirmed against a primary source; where Belgian law would ordinarily be cited, the EU text is cited instead.

Nothing but the strictly necessary loads until you choose

  • Analytics and session-replay tools start switched off, by default, before you answer anything.
  • The banner asks first. Nothing that reads or measures your visit runs before you choose.
  • Refusing analytics costs you no functionality: every page, form and guide works the same either way.
  • Your choice is stored per browser and per device, not centrally.
  • Clearing your browser's site data removes your saved choice, and the banner reappears next visit.

Everything this site stores, item by item

One table, every item this site can set, in the state the deployed build must match before go-live.

Every cookie and storage item this site sets, checked against the deployed build before go-live and re-checked whenever the stack changes.
What Who sets it Purpose Cookie or local storage First or third party Lifetime Category
consent This site (/js/consent.js) Records whether you accepted or rejected analytics, and when localStorage First party Until you clear browser storage Strictly necessary
Bot-management and host cookies Cloudflare Tells automated traffic from human traffic on the pages you request Cookie First party to be confirmed at launch Strictly necessary
Turnstile token Cloudflare Confirms a form submission on the contact, onboarding or payment page is not automated Cookie First party to be confirmed at launch Strictly necessary
GA4 identifier Google Analytics 4 Counts visits and pages read, only once you accept Cookie First party to be confirmed at launch Analytics, after consent
Clarity identifier Microsoft Clarity Records session replay to find pages that do not work, only once you accept Cookie First party to be confirmed at launch Analytics, after consent
Ahrefs Web Analytics Ahrefs Counts visits without setting an identifier None (cookieless) n/a n/a Cookieless measurement
Stripe fraud-prevention script Stripe Screens a payment for fraud before handing off to Stripe's own hosted checkout Cookie First party, payment page only to be confirmed at launch Payment, payment page only

FORM_KV, the rate limit behind the contact and onboarding forms, counts submissions by IP address on Cloudflare's side. It stores nothing in your browser, so it has no row here; it is described on the privacy policy because it is still processing.

How to change or withdraw your consent

  1. Reopen the banner. A "Cookie settings" control in the footer of every page reopens the same choice you made on first visit.
  2. Withdraw at any time. Choosing to withdraw clears the consent record and stops GA4 and Clarity from loading on your next page view. It does not delete what was already recorded; ask for that under the privacy policy's rights section.
  3. Clear cookies in your browser. Every browser can delete cookies and site storage for one site or all sites. This has to be repeated on each device and each browser you use.
  4. Write to us if either fails. If the banner does not reappear, or a tool keeps running after you withdrew, email [email protected] or use the contact form.
A dark wax seal stamp resting beside a pressed seal on handmade paper. No text, no country markings.

Who receives data from your visit

  • Google (Google Analytics 4)

    Sees page views and on-site behaviour once you accept analytics. Acts as a processor on our instructions. The data leaves Belgium for Google's own infrastructure. How Google uses cookies.

  • Microsoft (Clarity)

    Sees a session replay, click and scroll pattern once you accept analytics. Acts as a processor. The data leaves Belgium for Microsoft's own infrastructure. Microsoft privacy statement.

  • Cloudflare

    Sees the request needed to tell a human from a bot, on every page, and a Turnstile token on the three form pages. Acts as a processor. Runs regardless of your analytics choice, as strictly necessary.

  • Ahrefs

    Sees an anonymous count of your visit, with no identifier and no cookie. Acts as a processor for cookieless measurement.

  • Stripe

    Sees payment-fraud screening data on the payment page only, before you are handed to Stripe's own hosted checkout page. Acts as a processor for that one page.

This site sells or shares nothing for advertising, because it runs no advertising and no advertising cookie of any kind.

Your choices, your rights, and who to ask

Under the GDPR you can ask to access, correct, erase or object to how your data is used, and you can withdraw consent at any time without affecting what happened before you withdrew. The full mechanism for exercising these rights sits on the privacy policy; this page only points you to it.

Belgium's data protection authority, the Gegevensbeschermingsautoriteit / Autorité de protection des données (GBA/APD), can also take a complaint if you are not satisfied with our answer. A "Do not track" browser signal is not a substitute for answering the banner: this site does not currently read that signal, so accept, reject or reopen the settings control to make your choice count.

  • Access what is held about you.
  • Correct data that is wrong or incomplete.
  • Erase data that no longer needs keeping.
  • Object to processing that rests on legitimate interest.
  • Withdraw consent for analytics at any time, without effect on what happened before.

Send any of these to [email protected] or through the contact form.