Privacy Policy

This Privacy Policy is issued by 247 Energy NV, a company incorporated under Belgian law with registered office at Schaarbeekstraat 20E bus 11, 9120 Beveren, Belgium, and registered in the Crossroads Bank for Enterprises under number BE 0683.450.023.

247 Energy NV is the data controller responsible for the personal data collected through this website (247.energy) and any related digital services.

For all privacy-related enquiries, contact us at: info@247.energy

This policy is drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the General Data Protection Regulation, "GDPR"), and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

We collect personal data only to the extent necessary for the purposes described in this policy. The categories of data we may process include:

• Contact data: name, company name, business email address, telephone number — provided voluntarily when you use our contact form.
• Communication data: the content of messages you send us and our correspondence with you.
• Technical data: IP address, browser type and version, device type, pages visited, time and date of visit — collected automatically when you browse our website.
• Cookie data: see Section 8 below.

We do not collect special categories of personal data (such as health data, biometric data or data revealing racial or ethnic origin) and we do not knowingly collect data from persons under the age of 16.

We process your personal data for the following purposes and on the following legal bases:

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any event no longer than required by applicable law:

• Contact form data: retained for a maximum of 3 years from the last interaction.
• Technical/log data: retained for a maximum of 12 months.
• Data processed for legal compliance purposes: retained for the period required by the applicable law (typically 7 years for accounting records under Belgian law).

We do not sell, rent or trade your personal data. We may share data with trusted service providers who process data on our behalf and under our instructions, subject to appropriate data processing agreements:

• Vercel Inc. (website hosting, USA) — transfers are governed by Standard Contractual Clauses approved by the European Commission.
• Sanity Inc. (content management infrastructure, USA) — transfers are governed by Standard Contractual Clauses.
• Resend Inc. (transactional email delivery, USA) — transfers are governed by Standard Contractual Clauses.

We may also disclose personal data where required by law, court order, or competent regulatory authority.

As a data subject, you have the following rights with respect to your personal data:

• Right of access (Art. 15): to obtain confirmation of whether we process your data and to receive a copy of it.
• Right to rectification (Art. 16): to have inaccurate data corrected or incomplete data completed.
• Right to erasure (Art. 17): to have your data deleted where it is no longer necessary or where you withdraw consent.
• Right to restriction of processing (Art. 18): to limit how we use your data in certain circumstances.
• Right to data portability (Art. 20): to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@247.energy. We will respond within one month of receiving your request. You also have the right to lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

Our website uses only technically necessary cookies required for the operation of the site. We do not use advertising cookies, social media tracking pixels, or cross-site tracking technologies.

Technically necessary cookies may include session identifiers and security tokens. These cannot be disabled without affecting the functionality of the website.

We do not use Google Analytics or similar analytics platforms that transfer data to third parties for profiling purposes.

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include encrypted data transmission (HTTPS/TLS), access controls, network segmentation and regular security assessments.

In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you as required under Art. 34 GDPR.

Our website may contain links to external websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this page. Continued use of our website after any such changes constitutes acceptance of the updated policy.