Privacy Policy
Last updated: 26 October 2026
This policy explains what personal data Kroventra collects through this website and in the course of client work, why, how long it is kept and what your rights are. It is written to be read, not just to exist.
1. Who is responsible
Kroventra (sole proprietorship), Vrijheidsstraat 25, 2280 Grobbendonk, Belgium, enterprise number BE0718820676, is the controller for the processing described here. Questions and requests go to contact@kroventra.com.
2. What we collect
Contact form. Name, e-mail address, company name if you give it, and your message.
Project intake. When you request a quote or start a project: business details, the services you need, brand materials and content you upload, and, only where a project requires it, access details for existing accounts or hosting. We ask for access details only when needed and recommend sharing them through a temporary password or an invite rather than through the form.
Correspondence. E-mails and messages exchanged while we discuss or deliver work.
Client project data. Content, images, and data you provide for the websites, videos, designs or automations we build for you.
Server logs. Our web server records IP address, time, requested page and browser type for security and troubleshooting. These logs are kept for a short period and are not used to profile visitors.
This website sets no cookies and loads no analytics, advertising or third-party scripts. See the cookie page.
3. Why, and on what legal basis
- Answering your enquiry and preparing a quote: steps prior to a contract (art. 6(1)(b) GDPR).
- Delivering the agreed services and communicating about them: performance of the contract (art. 6(1)(b)).
- Invoicing and bookkeeping: legal obligations under Belgian accounting and tax law (art. 6(1)(c)).
- Keeping the website and server secure: our legitimate interest (art. 6(1)(f)).
We do not send marketing e-mails unless you ask for them, and we never sell personal data.
4. Who receives your data
Your data is stored on a server operated for us by Hetzner Online GmbH in Falkenstein, Germany. Notification and business e-mail runs through Microsoft 365 (Microsoft Ireland Operations Ltd.). Both act as processors under a data processing agreement, within the European Union. If a project requires a specific third-party platform, for example a hosting provider, a social network or a payment service, we tell you before your data goes there. We share data with authorities only when legally required.
5. How long we keep it
- Enquiries that do not lead to a project: 12 months after our last contact, then deleted.
- Files uploaded with a quote request that does not lead to a project: 90 days, then deleted.
- Client project data: for the duration of the engagement and the agreed support or hosting period, then deleted or handed over on request.
- Invoices and accounting records: as long as Belgian law requires.
- Access details shared for a project: removed as soon as the work that needed them is finished. We recommend you change them afterwards.
6. Security
The website is served over HTTPS only. Submitted data and uploaded files are stored outside the public web root and are accessible only to Kroventra after authentication. Access to the server is restricted to key-based login. No system is perfectly secure, and we will inform you without undue delay if a breach affects your data.
7. Your rights
You can ask for access to the data we hold about you, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Write to contact@kroventra.com; we respond within one month. You can also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.
8. Kroventra Socials (internal application)
Kroventra Socials is an internal tool Kroventra uses to publish and schedule content on social platforms for its own accounts and for clients who have given access. The following section describes that processing and is kept here because platform providers reference this URL.
Information processed
- Facebook or Instagram account and Page identifiers, names and connection metadata.
- Access credentials and tokens required to connect authorized company accounts.
- Content, media metadata, publication identifiers, delivery status and available engagement metrics.
- Technical logs needed for security, diagnostics and reliable publishing.
Purpose
Information is used only to authenticate authorized accounts, create and publish content for Kroventra and for authorised client accounts, confirm delivery, measure performance, maintain security and troubleshoot the service.
Sharing
Kroventra does not sell personal data. Information is shared only with service providers needed to operate the application, including Meta platforms and hosting or infrastructure providers, or when required by law.
Retention and security
Information is retained only as long as necessary for these purposes and protected with access controls and reasonable technical safeguards.
Your choices
To disconnect the application or request deletion, follow the User Data Deletion instructions.
Contact
9. Changes
We update this policy when our processing changes. The date at the top tells you when. Material changes to how we handle client data are communicated to active clients directly.