Skip to content

⁠​‌​‌​​‌‌​‌‌​‌​​‌​‌‌‌​‌​​​‌‌​​‌​‌​​‌​​​​​​‌‌​​‌‌​​‌‌​​​​‌​‌‌​‌​​‌​‌‌‌​‌​​​​‌​​​​​​‌‌‌​​​​​‌‌​​​​‌​‌‌‌​​‌​​​‌​​​​​​‌​​‌‌‌‌​‌‌‌​‌​‌​‌‌​‌​​‌​‌‌​​​‌​​‌‌​​‌​‌​‌‌​‌‌​​​​‌​‌‌‌​​‌‌​​​‌‌​‌‌​‌‌‌‌​‌‌​‌‌​‌​​‌​​​​​‌‌​​​​‌​‌​‌‌​‌‌‌​​‌​​​​​​‌‌​‌‌‌‌​‌‌‌​‌​‌​‌‌​‌​​‌​‌‌​​​‌​​‌‌​​‌​‌​‌‌​‌‌​​​​‌​‌‌​‌​‌‌‌​​​​​‌‌‌​​‌​​‌‌​‌‌‌‌​​‌​​​​​‌‌​​​​‌​‌​‌‌​‌‌‌​​‌​​​​​​​‌‌​‌‌​​​‌‌​​‌‌​​‌‌​‌‌​​‌‌​​​‌​​​‌‌​‌​‌​​‌‌​‌‌‌​‌‌​​​‌​​​‌‌​​​​​​‌‌‌​​‌​​‌‌​‌​‌​​‌‌​​‌​​​‌‌​​‌‌⁠Legal information

Privacy policy

Last updated: 25 October 2026.

1. Controllers

The controller of your data is Jordan Lallemand (BE 0784.435.238), trading as Ouibel:

Trade name
Ouibel
Operator
Jordan Lallemand, sole proprietorship, company and VAT number BE 0784.435.238, establishment unit « JL Prod » no. 2.329.543.387, registered with the Crossroads Bank for Enterprises since 1 April 2022.
Address
Rue d'Eghezée 82, 5060 Sambreville (Auvelais), Belgium
Phone
+32 471 87 28 60, by call or WhatsApp
E-mail
info@ouibel.com · jordan@ouibel.com · valentin@ouibel.com
VAT
Registered for Belgian VAT.

We are not required to appoint a data protection officer; questions: info@ouibel.com.

2. Data we process

  • Contact (form, e-mail, phone, WhatsApp): name, e-mail, phone, company, messages, form IP address (anti-abuse).
  • Client area: identity, e-mail, hashed password, billing details, company and VAT numbers, optional profile picture, login and action history (security).
  • Orders and invoicing: services, quotes, signed contracts with signature evidence, invoices, payments. Card data are handled by Stripe only; we never see them.
  • Public company data from the Crossroads Bank for Enterprises and the EU VIES system when you give us a company number.
  • Service e-mails: when we send a quote, invoice or reminder, we record when it was sent and, if your mail client displays images, when it was opened (a small unique image), to know the document reached you. You may object at any time by writing to us; blocking images also prevents it.
  • Partner programme: identity, company number, IBAN, referred customers and commissions.
  • Hosted services: files, POS data and mailbox content, processed on your behalf (see point 9).
  • Technical logs: IP addresses, dates, requested pages and errors, for server security.

3. Purposes and legal bases

  • Answering requests and quoting: pre-contractual steps (Art. 6.1.b GDPR) and legitimate interest.
  • Providing services, client area, invoicing, payment and support: performance of the contract (Art. 6.1.b).
  • Accounting, keeping invoices, responding to authorities: legal obligation (Art. 6.1.c).
  • Security, fraud prevention, proving and defending our rights, debt recovery, confirming delivery of our documents and informing customers of similar services: legitimate interest (Art. 6.1.f). You may object to marketing at any time, free of charge.

No advertising profiling, no automated decisions with legal effects, and we never sell your data.

4. Retention

  • Contact requests without follow-up: 3 years after the last exchange.
  • Client area: as long as the account exists.
  • Invoices and accounting records: 7 years from 1 January following the end of the financial year, longer in case of audit or dispute.
  • Contracts and signature evidence: 10 years after the end of the contract.
  • Security logs: 12 months maximum.
  • Website files and mailboxes: up to 30 days after the end of the service.

5. Recipients and processors

Your data are accessible only to Ouibel, to independent collaborators working for Ouibel who need access to provide the services, acting as processors bound by a written confidentiality and data protection agreement (Art. 28 GDPR) and, where strictly necessary, to:

  • OVHcloud (OVH SAS, France): servers in a data centre in Canada.
  • Stripe (Stripe Payments Europe Ltd, Ireland): online payments.
  • Odoo (Odoo SA, Belgium, EU hosting): accounting, invoices, Peppol, VAT returns.
  • Let's Encrypt (ISRG, USA): HTTPS certificates, domain names only.
  • OpenRouter and Anthropic (USA): AI tools used internally; only strictly necessary information, never passwords or payment data.
  • WhatsApp (Meta Platforms Ireland Ltd): only if you choose to contact us that way.
  • Our accountant, tax, judicial or administrative authorities and our advisers (lawyer, bailiff) where required by law or to defend our rights.

6. Transfers outside the EU

Our servers are in Canada, covered by a European Commission adequacy decision. Transfers to the United States rely on the EU–US Data Privacy Framework or the Commission's standard contractual clauses; copies available on request.

7. Security

Encrypted connections (HTTPS), hashed passwords, one-time login links, protected sessions, isolated customer access, firewall, daily backups, constant monitoring and logging of sensitive actions. In case of a risky data breach, we notify the Data Protection Authority within 72 hours and, where the risk is high, the persons concerned.

8. Your rights

You may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interest or to marketing, and withdraw consent, by writing to info@ouibel.com. We reply within one month and may ask for proof of identity. You may lodge a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be).

9. Data you host with us

For your website files, POS data and mailbox content, you are the controller and we act as processor (see section 14 of our terms). We do not access these data except for technical necessity, security or at your request, and delete them at the end of the contract.

10. Minors

Our services are intended for businesses and adults. We do not knowingly collect data from children under 13.

11. Changes

We may update this policy; the update date is shown at the top. Significant changes are notified by e-mail or in your client area. The French version prevails.