Timothy Verhaeghe

Privacy

This page explains what happens with your data when you visit timothyverhaeghe.com or send me a message. In short: I collect as little as possible, I don't use cookies, and I never sell your data.

Last updated: 24 October 2026

Who is responsible

This website is run by Timothy Verhaeghe, who is responsible for the processing of your personal data on this site (the "controller"). You can reach me about anything on this page through the contact form.

When you visit the website

When you open a page, the server records the visit to keep the site safe and to see which pages are read. For every page it records:

  • the page you opened, the page you came from (the "referrer") and campaign tags in the link, if any;
  • your IP address and browser details (type of device, browser and operating system);
  • the approximate location derived from your IP address (country and city);
  • the date and time of the visit.

Visits are counted with a code made from your IP address and browser that changes every day, so visits can't be followed from one day to the next. No cookies are placed and no tracking script runs in your browser. A few clicks (for example on a "Get in touch" button) are counted the same way.

The full IP address is kept to protect the site against abuse, such as attacks and spam. The legal basis is my legitimate interest in running a safe website and understanding how it is used (article 6(1)(f) GDPR).

When you send a message

If you use the contact form, I receive your name, your email address, the topic you chose and your message, together with the date, your IP address and browser. I use this only to read and answer your message. It is stored on the server and emailed to me.

The legal basis is your request to be contacted, and the steps you ask me to take before any agreement (article 6(1)(b) GDPR), or my legitimate interest in answering messages (article 6(1)(f) GDPR).

How long data is kept

  • Messages from the contact form: two years after you sent them, then they are deleted automatically. Emails I exchanged with you stay in my mailbox as long as needed for our contact.
  • Visit data: twelve months, then it is deleted.

Who processes data for me

I use a few service providers to run this site. They only process data on my instructions:

  • Amazon Web Services: the server that runs the site, in Paris (EU).
  • Cloudflare: protects the site and delivers it quickly. It handles every visit, including your IP address.
  • SendGrid (Twilio): sends the messages from the contact form to my mailbox.
  • EventsLake: stores the visit data in the EU.

Some of these companies are based in the United States. Where data leaves the European Economic Area, it is protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

I never sell your data and never share it for advertising.

Your rights

You can ask me to see the data I have about you, to correct it, to delete it, to limit how it is used, or to receive it in a common format. You can also object to processing based on my legitimate interest. Send your request through the contact form and I'll answer within one month.

If you think I handle your data wrongly, you can file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be, or with the authority in the country where you live.

Changes

If the way I handle data changes, I update this page and the date at the top.