Privacy Policy

How esentyo collects, uses, and protects your personal data — including information you share with us through our contact form.

Last updated: 24 May 2026

1. Introduction

esentyo ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains, in line with the EU General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, what information we collect, why we collect it, how we use and protect it, and the rights you have in relation to your personal data.

2. Data Controller

The data controller responsible for the processing of your personal data is Tim De Jonckheere (esentyo), based in Belgium. For any questions related to this Privacy Policy or to exercise your rights, you can contact us at info@esentyo.com.

3. Information We Collect

We only collect personal data that you voluntarily provide to us, or that is strictly necessary for the operation of our website. Specifically, we may collect:

Contact form data: your full name, email address, company name, and the content of the message you send us.
Correspondence data: any further information you share with us when you reply to our messages or engage in follow-up communication.
Technical data: limited information automatically collected by your browser (such as IP address, browser type, device type, referring page, and pages visited) used solely to operate, secure, and improve our website.

We do not knowingly collect any special categories of personal data (such as data revealing health, political opinions, religious beliefs, or biometric data) through our contact form. Please do not include such information in your messages.

4. How We Process Contact Form Data

When you submit a message through our contact form, the information you provide is transmitted to us by email and/or stored in a secure system used to manage incoming enquiries. We process this data exclusively for the following purposes:

To read, understand, and respond to your enquiry.
To provide you with the information, proposal, or service you have requested.
To follow up on our exchange where this is reasonably expected by you in the context of your enquiry.
To keep a record of our correspondence for administrative, legal, and accountability purposes.

We do not use the information submitted via the contact form for marketing, profiling, automated decision-making, or any purpose that is incompatible with the original purpose of your enquiry. We will never sell or rent your contact form data to third parties.

5. Legal Basis for Processing

In accordance with Article 6 of the GDPR, we rely on the following legal bases to process your personal data:

Your consent (Art. 6(1)(a) GDPR) — when you voluntarily submit a message through our contact form, you consent to us using the data you provide to respond to your enquiry. You may withdraw your consent at any time.
Steps prior to entering into a contract (Art. 6(1)(b) GDPR) — where your enquiry concerns a possible engagement of our services.
Our legitimate interests (Art. 6(1)(f) GDPR) — to communicate with prospective clients, maintain accurate records of correspondence, and ensure the security and proper operation of our website. We always balance these interests against your rights and freedoms.
Compliance with a legal obligation (Art. 6(1)(c) GDPR) — where we are required to retain certain information under applicable law.

6. Sharing of Information and International Transfers

We do not sell your personal data. We only share your personal data where strictly necessary, namely with:

All personal data is processed within the European Economic Area (EEA). To the best of our knowledge, we do not transfer or process your data outside the EEA. Should this change in the future, we will update this policy and ensure that any international transfers comply with applicable data protection laws.

Trusted service providers acting as processors on our behalf — such as our email, hosting, and website infrastructure providers — who are contractually bound by data processing agreements compliant with Article 28 GDPR.
Public authorities where we are required to do so by law, regulation, or a valid legal process.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. Specifically:

Contact form enquiries that do not result in an engagement are retained for up to 24 months from your last interaction with us, after which they are deleted or anonymised.
Client correspondence is retained for the duration of our contractual relationship and for up to 10 years thereafter, in line with Belgian commercial and accounting obligations.
Technical/website logs are retained for a limited period (typically up to 12 months) for security and diagnostic purposes.

8. Your Rights Under the GDPR

Subject to the conditions set out in the GDPR, you have the following rights in relation to your personal data:

Right of access — to obtain confirmation of whether we process your personal data and to receive a copy of it.
Right to rectification — to have inaccurate or incomplete personal data corrected.
Right to erasure ("right to be forgotten") — to request the deletion of your personal data where there is no overriding reason for us to continue processing it.
Right to restriction of processing — to limit the way we use your data in certain circumstances.
Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format.
Right to object — to object to processing based on our legitimate interests.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint — with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

To exercise any of these rights, please contact us at info@esentyo.com. We will respond within one month of receipt of your request, in line with Article 12 GDPR.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. In the unlikely event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected individuals in accordance with Articles 33 and 34 GDPR.

10. Cookies and Tracking

To the best of our knowledge, our website does not use any cookies or similar tracking technologies. We do not use analytics, advertising, or third-party cookies, and we do not set any cookies for tracking or profiling purposes. If this changes in the future, we will update this policy and, where required, request your prior consent.

11. Children's Privacy

Our website and services are intended for a professional, business audience. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal obligations, or for other operational reasons. The latest version will always be available on this page with an updated revision date. We encourage you to review it periodically.

13. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the way we process your personal data, please contact us at info@esentyo.com.