Privacy Policy
How company-registration-belgium.com handles the personal data you give it through the contact, onboarding and payment forms, and through analytics once you consent.
Who is responsible for your data, and which law applies
The controller for company-registration-belgium.com is Meridian Corporate Services BV (Belgium), Avenue Louise 200, 1050 Ixelles, Brussels, telephone +32 2 888 4567. Reach us about any privacy question at info@company-registration-belgium.com: the same address you find on company registration in Belgium and on every form on this site.
This policy operates under the General Data Protection Regulation, Regulation (EU) 2016/679, which applies directly in Belgium. It is read alongside the Belgian Law of 30 July 2018 on the protection of natural persons, and enforced by the Belgian Data Protection Authority, the Gegevensbeschermingsautoriteit / Autorité de protection des données (GBA/APD).
- Controller: Meridian Corporate Services BV, Avenue Louise 200, 1050 Ixelles, Brussels, Belgium.
- Privacy contact: info@company-registration-belgium.com.
- Governing law: the General Data Protection Regulation, Regulation (EU) 2016/679.
- Belgian implementing act: the Law of 30 July 2018 on the protection of natural persons.
- Supervisory authority: the Belgian Data Protection Authority (GBA/APD).
What we collect, why, and on what legal basis
The table below lists every kind of processing this site actually performs. Nothing else happens with your data.
| Purpose | Data collected | Legal basis | Retention |
|---|---|---|---|
| Answering a contact-form enquiry | Name, email, phone (optional), service of interest, message | Art. 6(1)(b) GDPR, steps before a contract | Up to 24 months after our last exchange |
| Screening all three forms for abuse | Turnstile token, a rate-limit key tied to your IP address | Art. 6(1)(f) GDPR, legitimate interest | Rate-limit key: 10 minutes |
| Knowing who sent a form, so we can answer it properly | IP address, city-level location, internet provider, browser and operating system, language settings, referring page, pages viewed on this site, screen and window size, time spent on the page, local time, whether cookies are enabled, the analytics identifier if you accepted analytics | Art. 6(1)(f) GDPR, legitimate interest | With the enquiry: up to 24 months after our last exchange |
| Processing an onboarding application | Contact details, planned company, services wanted, timeline, a lawful-origin-of-funds acknowledgement | Art. 6(1)(b) GDPR, steps before a contract | 30 days |
| Handling a payment | Invoice number, payer name, email, amount, currency, method | Art. 6(1)(b) and 6(1)(c) GDPR, contract and invoicing duties | Invoice reference kept, card and wallet details never reach this site |
| Measuring site use, after consent | Cookies, an identifier, pages viewed, session recording | Art. 6(1)(a) GDPR, consent | Confirmed at launch |
| Counting pages and referrers, cookieless | Page counts, referrer counts, no identifier | Art. 6(1)(f) GDPR, legitimate interest | Aggregate only |
| Operating the site securely | IP address, browser type, timestamp | Art. 6(1)(f) GDPR, legitimate interest | Confirmed at launch |
| Remembering your consent choice | One entry stored in your own browser | Art. 6(1)(a) GDPR, consent management | Until you clear it yourself |
None of this builds an advertising profile, feeds an automated decision about you, or signs you up for anything: this site runs no newsletter.
The forms: contact, onboarding and the payment page
Every field marked optional stays optional. We need at least a working email address to answer you.
-
Contact
The contact form asks for your name, an email address and your question. A honeypot field, Cloudflare Turnstile and a rate limit screen it before Resend delivers it to info@company-registration-belgium.com.
-
Onboarding
The onboarding form collects more: the company you plan to set up, the services you want, your timeline, and an acknowledgement about the origin of your funds. The same three checks screen it before delivery.
-
Payment
On the payment page, you type an invoice number, your name, email and the amount. Card and wallet details never reach us: you enter them on Stripe's or NOWPayments' own page.
What travels with every form
When you send any of the three forms, the message reaches us with a short technical note about the visit it came from. From the connection: your IP address, the approximate location derived from it (city level, which is often your internet provider's hub rather than where you are), the internet provider or network operator, your browser and operating system (the user agent), your browser language settings and the referring page. From the page itself: the pages you viewed on this site during that visit, the time spent on the form page, your local time and time zone, screen and window size, and whether cookies are enabled.
Two items appear only if you accepted analytics in the cookie banner: the date and source of your first visit and a visit count, kept in your own browser's local storage, and the Google Analytics identifier that Analytics itself has already set. Without that consent the note says so and the form works the same. We never read or send the contents of your cookies, and this note sets no cookie of its own; the list of pages viewed is held in your browser only until you close the tab.
We use this note to answer the right person in the right language, to see which page a question came from, and to spot abuse. It is kept with the enquiry itself, for up to 24 months after our last exchange, or longer only if the enquiry becomes a client file. An onboarding copy is held on Cloudflare for 30 days, and if an email cannot be delivered, the submission is held there for up to 60 days so that it is not lost.
Cookies, measurement and the consent gate
Google Analytics 4 and Microsoft Clarity load only after you accept them in the banner; nothing is set before that choice. Ahrefs Web Analytics is cookieless and may run before you decide. Your choice itself is stored only in your own browser, through the consent script, and nowhere else.
- Google Analytics 4 and Microsoft Clarity load only once you accept them.
- Microsoft Clarity records session activity: clicks, scrolling and pages viewed.
- Ahrefs Web Analytics counts pages and referrers, with no cookie at all.
- Withdrawing consent stops these scripts from loading on your next visit.
- See the cookie policy for the full list of cookies and how long each lasts.
Who else handles your data, and where it is processed
Seven organisations process data on our behalf or on their own account. Each is named below with what it does, and with its own privacy notice.
| Processor | What they do | Their own privacy notice |
|---|---|---|
| Cloudflare | Hosting, the contact/onboarding/payment forms, anti-spam and email routing | Cloudflare privacy policy |
| Resend | Delivers enquiry emails to our own inbox | Resend privacy policy |
| Runs GA4 measurement, after you consent, and serves the office map on the contact page, which loads only after you accept analytics or click to show it | Google privacy policy | |
| Microsoft | Runs Clarity session recording, after you consent | Microsoft privacy statement |
| Ahrefs | Runs cookieless web analytics | Ahrefs privacy policy |
| Stripe | Processes card payments on the payment page | Stripe privacy policy |
| NOWPayments | Processes crypto payments on the payment page | NOWPayments privacy policy |
Some of these organisations operate outside the European Economic Area. Where that happens, the transfer relies on an EU adequacy decision or the Standard Contractual Clauses under Articles 44 to 49 GDPR; which mechanism covers which processor is confirmed before this page goes live.
We do not sell your data, we do not use it for advertising, and we do not share it beyond the organisations named above, except where the law requires it or a public authority orders it.
Your rights, complaints, and changes to this policy
- Access: ask what data we hold about you and get a copy (Art. 15 GDPR).
- Rectification: ask us to correct data that is wrong or incomplete (Art. 16 GDPR).
- Erasure: ask us to delete your data where the law allows it (Art. 17 GDPR).
- Restriction: ask us to limit how we use your data while a query is open (Art. 18 GDPR).
- Objection: object to processing based on our legitimate interest (Art. 21 GDPR).
- Portability: ask for your data in a format you can take elsewhere (Art. 20 GDPR).
- Withdrawal: withdraw consent for measurement at any time, without affecting what happened before (Art. 7(3) GDPR).
To use any of these, write to info@company-registration-belgium.com; we may ask a question or two to confirm it is really you before we act. You may also complain to the Belgian Data Protection Authority (GBA/APD) or to your own country's data protection authority if you live elsewhere in the EU (Art. 77 GDPR): most readers of this site are outside Belgium. We date every change to this policy at the top of the page; the terms of service govern the site more broadly.