Privacy Policy
Last updated: April 2026
1. Who we are
This privacy policy explains how Anmol Singh Sandhu, operating as “Anmol Tradesman Sites” from Antwerp, Belgium, collects and processes personal data via ats.anmol.be and related services. We act as the data controller.
Contact for privacy matters: hello@anmol.be.
2. Information we collect
You provide:
- Contact details (name, email, phone, business name) when you book a consultation, submit our contact form, or purchase a service.
- Payment information (processed directly by Stripe; we do not store full card numbers).
- Project content (text, images, logins) you provide for your website build.
Collected automatically:
- Basic analytics (pages visited, referrer, approximate location from IP, device type). We use privacy-respecting analytics that do not use third-party cookies.
- Server logs (IP address, timestamp, request path) retained for up to 30 days for security and debugging.
Cookies:
- Essential cookies only (for Calendly booking widget and Cloudflare security). No third-party advertising or tracking cookies.
3. Legal basis for processing (GDPR)
- Contract performance: to deliver the services you purchased.
- Legitimate interest: to operate and secure our website and respond to inquiries.
- Consent: where required (e.g., marketing emails, if any).
- Legal obligation: tax and accounting records.
4. How we use your data
- Deliver and maintain the services you purchased.
- Communicate with you about your project and account.
- Process payments.
- Comply with legal obligations (invoicing, tax).
- Improve our services.
We do not sell your personal data. We do not use it for advertising.
5. Sharing with third parties
We use the following processors, each bound by data protection agreements:
- Stripe (payment processing) — stripe.com/privacy
- Calendly (appointment booking) — calendly.com/privacy
- Cloudflare (hosting, security, email routing) — cloudflare.com/privacy
- Email provider for outbound email — provider privacy policy applies
These processors may transfer data to the United States. Transfers are covered by Standard Contractual Clauses and/or applicable adequacy frameworks.
6. Retention
- Contact inquiries: up to 12 months from last contact.
- Client project data: for the duration of your engagement plus 7 years (Belgian accounting retention requirement).
- Payment records: 7 years (legal requirement).
- Server logs: 30 days.
7. Your rights
Under GDPR (and CCPA where applicable), you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion (“right to be forgotten”), subject to legal retention obligations.
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time.
- Lodge a complaint with a supervisory authority (in Belgium: the Gegevensbeschermingsautoriteit / Autorité de protection des données, gegevensbeschermingsautoriteit.be).
To exercise any right, email hello@anmol.be. We respond within 30 days.
8. Security
We use HTTPS, access controls, and reputable infrastructure providers. No system is fully secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.
9. Children
Our services are not directed at children under 16. We do not knowingly collect data from children.
10. Changes
We may update this policy. Material changes will be posted here with a revised “Last updated” date and, where appropriate, notified by email.