Legal
Privacy Policy
Last updated: 6 April 2026
Who we are
Data controllers
Alethia Works is a collaborative brand operated by two independent Belgian private limited companies (besloten vennootschappen):
Bandoco BV — registered in Belgium, represented by Simon Peters.
[Chris's company] BV — registered in Belgium (placeholder; name to be updated).
Each entity acts as an independent data controller for the personal data collected in connection with the client relationships it originates. The specific data controller for your engagement is identified in your statement of work or initial correspondence. Where the controller is not otherwise identified, Bandoco BV acts as the default controller for enquiries received through this website.
For any privacy-related questions, contact us at simon@alethia.works.
What we collect
Contact form submissions
When you reach out through our website or by email, we collect your name, email address, and the content of your message. We do not collect more than is necessary to respond to you.
Analytics
We do not use tracking cookies or third-party advertising pixels. If we ever add privacy-respecting analytics (such as aggregate page-view counts), we will update this policy and ensure no personal data is transferred outside the EU/EEA without appropriate safeguards.
Client engagement data
In the course of delivering services, we may process data you share with us under a signed statement of work or data processing agreement. That data is governed by the terms of that agreement and processed by whichever Alethia Works entity is the named contracting party.
Why we collect it
Purposes
We collect and process personal data solely to respond to your enquiries and to deliver the consulting or development services you have engaged us for. We do not use your data for marketing, profiling, or any purpose unrelated to your request or our contract.
Legal basis (GDPR Art. 6)
Our basis for processing
Legitimate interest (Art. 6(1)(f)): Responding to unsolicited enquiries sent to us — you reached out, so responding is a legitimate interest that does not override your rights.
Contract performance (Art. 6(1)(b)): Processing data necessary to deliver contracted services.
How long we keep it
Retention periods
Enquiry data (contact form, email exchanges) is kept for a maximum of two years from the date of last contact, after which it is deleted or anonymised.
Client project data is retained for the duration agreed in the relevant statement of work or data processing agreement, and deleted within 30 days of the end of the retention period unless a legal obligation requires otherwise.
Third parties
Subprocessors and data sharing
We do not sell, rent, or trade your personal data. We may use infrastructure subprocessors (such as hosting and email providers) who process data on our behalf under a data processing agreement. All subprocessors are required to maintain appropriate security measures and may not use your data for their own purposes.
We do not transfer personal data outside the European Economic Area unless appropriate safeguards (such as Standard Contractual Clauses) are in place.
The two Alethia Works entities may share basic engagement context with each other as needed to coordinate service delivery, under a mutual data sharing arrangement consistent with their roles as independent controllers operating under the same brand.
Your rights
Rights under GDPR
You have the right to access, rectify, erase, restrict, or port your personal data, and the right to object to processing. To exercise any of these rights, contact us at simon@alethia.works. We will respond within 30 days.
If you are unsure which entity holds your data, contact us and we will identify the relevant controller and route your request accordingly.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Belgian supervisory authority:
Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35, 1000 Brussels
gegevensbeschermingsautoriteit.be
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date at the top. If we make material changes, we will notify active clients by email.