Privacy Policy

1. Introduction

BENNU Consult ("we," "us," or "the Consultant") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection law.

2. Data Controller

BENNU Consult, represented by Bill, is the data controller for the personal data processed through this website and during consulting engagements. For any privacy-related questions, contact us at bill@bennu-consult.com.

3. Data We Collect

• Contact information: name, email address, phone number, company name.
• Communication data: messages and details you provide through the contact form or email.
• Service preferences: which consulting pillars you are interested in.
• Technical data: IP address, browser type, and usage data collected via cookies (see our Cookie Policy).

4. How We Use Your Data

• To respond to your inquiries and process growth audit requests.
• To provide consulting, coaching, and audit services.
• To communicate with you about our services and engagements.
• To improve our website, services, and user experience.
• To comply with legal and regulatory obligations.

5. Legal Basis for Processing

We process your personal data on the following legal bases: your consent (provided through the contact form), the performance of a contract (consulting engagements), our legitimate interests (business communications), and compliance with legal obligations.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Contact form submissions are retained for up to 24 months unless you become a client, in which case data is retained for the duration of the engagement plus 7 years for accounting purposes.

7. Your Rights Under GDPR

• Right to access: request a copy of your personal data.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your personal data.
• Right to restrict processing: request limitation of data processing.
• Right to data portability: receive your data in a structured format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent at any time.

8. Data Sharing

We do not sell your personal data. We may share data with trusted third parties who provide services on our behalf (e.g., email delivery, CRM hosting), under appropriate data processing agreements. We may also disclose data when required by law.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. These measures include encryption, access controls, and regular security reviews.

10. International Transfers

Your data is primarily processed within the European Economic Area (EEA). Where any data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

11. Your Right to Complain

If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorit\u00e9 de protection des donn\u00e9es).

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact

For privacy inquiries or to exercise your rights, contact us at bill@bennu-consult.com or +32 488 100 321.