Skip to content
Enneagram Academy

Privacy policy

Enneagram Academy takes the protection of your personal data seriously. This policy explains what data we collect through this website, why, how long we keep it and what your rights are, in line with the General Data Protection Regulation (GDPR).

Data controller

Enneagram Academy [legal form], Avenue du Prince de Ligne 42, 1180 Uccle, Belgium, company number BE 1030.086.649. For any question about your data: [contact email].

What we collect, why and on what legal basis

Contact form
Data Profile (company, individual, certification), name, email, phone, organisation, team size, need, message
Purpose To answer your request and suggest a suitable programme
Legal basis Pre-contractual steps taken at your request
Session request
Data Chosen format, name, email, phone, message
Purpose To contact you and arrange an appointment
Legal basis Pre-contractual steps taken at your request
Invoicing
Data Billing details, service and amount
Purpose To issue the invoice and track payment
Legal basis Performance of a contract and legal obligations
Browsing
Data Technical data and visit statistics, only if you accept them
Purpose To measure traffic and improve the website
Legal basis Consent

We never sell or rent your data, and we do not use it for marketing without your consent.

Sensitive information

Our sessions may touch on personal topics, including stress or health. Please do not share this kind of information in the contact form. What is discussed in sessions remains strictly confidential and is not collected through this website.

How long we keep your data

  • Contact requests with no follow-up: 3 years after the last exchange.
  • Clients: for the duration of the relationship, then 3 years.
  • Invoices and accounting records: for the period required by Belgian accounting and tax law.
  • Analytics cookies: 13 months maximum.

Who has access to your data

Your data is only accessible to the members of the Enneagram Academy team who need it to handle your request. We work with the following service providers, who act as data processors:

  • Website hosting: [hosting provider]
  • Email: [email provider]
  • Analytics: [tool, if any]

Some of these providers may process data outside the European Union. In that case, transfers are covered by the safeguards set out in the GDPR, including the European Commission's standard contractual clauses.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time where processing is based on it.

To exercise these rights, write to us at [contact email]. We will reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

Cookies

This website uses cookies that are strictly necessary for it to work, for example to remember your language choice. Analytics cookies are only set with your consent, via the banner shown on your first visit. You can change your choice at any time using the “Cookie settings” link at the bottom of the page.

Security

We take appropriate technical and organisational measures to protect your data: secure connection (HTTPS), access restricted to authorised people and GDPR-compliant service providers.

Changes

This policy may change, for example when we launch a new service or when the law evolves. The version in force is always the one published on this page.

Last updated: [launch date].