Privacy
This page says what data lawbe.be processes, why, for how long, with which providers, and how to exercise your rights. It applies the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Belgian Act of 30 July 2018. This translation is provided for convenience; the French version prevails.
1. Who is responsible
Marouane Bezdi, lawyer at the Brussels Bar, practising as LAWBE Avocats, enterprise number 0769.581.469.
Avenue de Selliers de Moranville 86, 1082 Berchem-Sainte-Agathe, Belgium.
Questions about your data: [email protected].
2. What we process, why, on what basis, for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your first contact ("Write" form, estimator, tool forms) | Name, email, phone and company if you give them, your profile, the subject, the estimate shown, your message, the page you came from | Steps taken at your request before a contract (Art. 6(1)(b) GDPR) | 3 years after the request, then automatic erasure |
| Booking and holding a scoping consultation | Name, email, phone, chosen slot, information given when booking | Performance of the consultation contract (Art. 6(1)(b) GDPR) | Length of the relationship, then as required by the lawyer's accounting and professional obligations |
| Sending you the result of the CRA check | Answers to the questionnaire, first name, email | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time | 12 months after sending, then automatic erasure |
| Access to the client area | Email address and login credentials | Performance of the contract (Art. 6(1)(b) GDPR) | Life of the account |
| Audience measurement | Pages viewed, visit length, device and browser type, IP address truncated by the tool | Your consent (Art. 10/2 of the Belgian Act of 30 July 2018 and Art. 6(1)(a) GDPR) | According to the measurement tool's retention setting; your cookie choice is kept 6 months |
| Site security and prevention of abusive sending | Salted, hashed fingerprint of the IP address (never the address itself), technical logs | The firm's legitimate interest in protecting its site and inbox (Art. 6(1)(f) GDPR) | 2 days for the fingerprint; technical logs as kept by the providers |
The first contact is for pointing you in the right direction. Do not attach documents or describe health or other sensitive data: if a matter follows, its data is handled in the file, under professional secrecy, as set out in the fee agreement.
The estimator computes a range from the published price bands. It is not an automated decision: the exact price is set by the lawyer, in writing. No profiling, no sale of data, no targeted advertising.
3. Who has access to your data
The lawyer and, for the matters entrusted to them, his collaborators, all bound by professional secrecy. Authorities, only where the law requires it. And the technical providers below, who act on the firm's instructions under a processing agreement (Art. 28 GDPR).
| Provider | Role | Location and safeguards |
|---|---|---|
| Lovable and its database (Supabase) | Site hosting, request database, sending functions | Database in the European Union (Ireland) |
| Cloudflare, Inc. | Site delivery and protection against attacks | Global network; transfers to the United States covered by the EU-US Data Privacy Framework |
| Resend | Delivery of internal notifications to the lawyer (no automatic email is sent to you) | United States; EU-US Data Privacy Framework and standard contractual clauses; sending logs kept 30 days |
| Microsoft (Outlook, Bookings, Teams) | Firm email, booking and video calls | Microsoft Ireland Operations Ltd; any transfers to the United States covered by the EU-US Data Privacy Framework |
| Google Ireland Limited (Google Analytics) | Audience measurement, only if you accept it | Transfers to Google LLC (United States) covered by the EU-US Data Privacy Framework |
4. Does your data leave the European Union
The request database is hosted in the Union. Some providers are established in the United States or have access from there. These transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795 of 10 July 2023) and, where the provider offers them, on the Commission's standard contractual clauses.
6. How your data is protected
Encrypted connection across the site, a database closed to any public access, access reserved to the lawyer, a sending limit against abuse, automatic erasure when the stated periods end, and the lawyer's professional secrecy.
7. Your rights
- Access: obtain a copy of the data about you
- Rectification: correct inaccurate data
- Erasure: have your data deleted
- Restriction: freeze a processing while something is checked
- Objection: object to a processing based on legitimate interest
- Portability: receive the data you provided in a readable format
- Withdrawal of consent: at any time, without affecting what was done before
Write to [email protected]. You receive an answer within one month; proof of identity may be requested if there is doubt about who you are. These rights apply within the limits of professional secrecy and the lawyer's legal obligations.
8. Complaints
You may lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels, autoriteprotectiondonnees.be.
9. Changes
This policy follows the site's tools. Every change is dated below; a significant change is announced on the site.
Version of 28 September 2026.