Privacy Statement
At The C Label, safeguarding your privacy is fundamental to our services. This policy outlines how we manage personal data in compliance with GDPR.
Last updated: 1 October 2026
1. Corporate Identity
The C Label is an advisory firm based in Antwerp, Belgium, operated by Lynn Hens. For any privacy-related inquiries, please contact lynn@theclabel.be directly.
2. Processing of Personal Data
We only collect data that you provide to us directly or that is needed to run our services. The specific data points we may collect and manage include the items listed below:
- Contact Form: Full name, contact email, company name, and the content of your message.
- Email, Phone, or WhatsApp: Full name, contact details, and information shared in the conversation.
- Booking an intro call via the booking tool: Full name, email address, chosen date and time, and notes.
- Client engagements: Contact details of representatives and business information shared with us, which may include personal data of employees, suppliers, or customers.
- Invoicing: Company name, billing address, VAT number, and contact person.
- Website visits: Technical data such as IP address, browser type, and pages visited via cookies (see section 7).
We do not knowingly collect sensitive data (such as health data) and ask you not to share it with us unless strictly necessary for an engagement.
3. Purposes and Legal Basis for Processing
We only process personal data when the GDPR gives us a legal basis to do so.
Purpose
Legal basis (GDPR art. 6)
Answering questions and scheduling intro calls
Steps at your request before entering a contract (6.1.b), or our legitimate interest in responding to inquiries (6.1.f).
Preparing proposals and delivering consulting services
Performance of a contract (6.1.b)
Invoicing, accounting, and tax obligations
Legal obligation (6.1.c)
Managing client relationships and follow-ups
Analytics and non-essential cookies
Legitimate interest (6.1.f)
Your consent (6.1.a)
Where personal data in client files is processed on your instructions, we act as a processor. Terms are set out in our engagement agreement. We do not use automated decision-making or profiling.
4. Data Retention Period
Data
Retention Period
Inquiries not leading to collaboration
Up to 12 months after our last contact
Client engagement files
Duration of the engagement plus 5 years for possible questions or claims
Invoices and accounting records
7 years, or up to 10 years where Belgian tax law requires
We keep personal data no longer than needed for the purpose for which it was collected.
After these periods, data is deleted or anonymized.
5. Data Sharing with Third Parties
- Website hosting and contact form: Wix.com
We never sell your personal data. We only share it with service providers that help us run our business, and only as far as needed:
- Appointment booking: Wix.com and Google Workspace
- Email and file storage: Google Workspace and Microsoft 365
- Messaging: WhatsApp (Meta), only if you choose to contact us that way
- Accounting and invoicing: our external accountant and invoicing software
These providers act as processors and are bound by data processing terms. We may also disclose data where Belgian law or a competent authority requires it.
6. Transfers Outside the EU
Some of our service providers (such as Wix and Meta) may process data outside the EEA, including in the US. In these cases, transfers are protected by the EU-US Data Privacy Framework or SCCs.
7. Cookies
Our website uses necessary cookies to function. With your consent, we use analytics cookies to understand visitor behavior. You can manage preferences via the banner; refusing cookies does not affect site use.
8. Security and Confidentiality
We take technical and organizational measures to protect your data against loss or unauthorized access, including 2FA and secure storage. Information shared is confidential and can be covered by a NDA.
9. Your Rights
Under the GDPR, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased where there is no legal reason to keep it
- restrict or object to certain processing based on legitimate interest
- receive your data in a portable format
To exercise these rights, email lynn@theclabel.be. We may ask for identity confirmation and will respond within one month. You can also lodge a complaint with the Belgian Data Protection Authority.
10. Changes and Contact
We may update this policy when our services or the law change. The latest version is always available on this page. For questions about your data, contact us at lynn@theclabel.be.