Skip to content

Privacy policy

Who is responsible for your data?

Pyred BV, with registered office at Schaapschuur 1-14, 1790 Affligem, Belgium, registered with the Crossroads Bank for Enterprises (KBO) under number 0475.992.856 (hereinafter “Pyred”), is responsible for the personal data processed through this website and in our contacts with you.

Emerson Wellens
Tel: +32 2 513 23 05
Email: hello@pyred.com

In general

This privacy statement applies to the processing of your personal data by Pyred when you visit this website and when you contact us or work with us. We process personal data in accordance with the European General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the following principles:

  • Lawfulness, fairness and transparency: we process personal data lawfully, fairly and transparently.
  • Purpose limitation: we collect personal data for specific, explicit and legitimate purposes only.
  • Data minimisation: we only process what is necessary for those purposes.
  • Accuracy: we keep personal data accurate and up to date, and correct or erase inaccurate data without delay.

What data do we process and why?

When you contact us by email, phone or social media, or send us a job application, we receive what you give us: your name, contact details, company and your message or CV. We use these data only to answer your question, to prepare a proposal, to carry out and invoice an agreement, or to assess your application. Legal basis: taking steps at your request before entering into a contract and the performance of that contract (article 6.1(b) GDPR), our legal obligations (article 6.1(c) GDPR) and our legitimate interest in answering your question (article 6.1(f) GDPR).

When you use the request form on our contact page, we receive what you fill in: your name, email address and, if you give them, your company, phone number and the details of your event. With it we store the language of the page, the page from which you sent the form, the country of your internet connection (as our hosting provider derives it from the connection, not your exact location) and your choice on read receipts in our emails. We use them only to answer your request and to prepare a proposal (article 6.1(b) GDPR). To block abuse of the form (at most five requests per hour from the same connection), we keep a pseudonymised code of your IP address, made with a secret key (HMAC), never the address itself; this code is erased after 24 hours. Requests are kept for 2 years.

When you visit this website, we process the data described in the next sections: visitor statistics (only with your consent), the recognition of visiting organisations and technical data. This website has no newsletter.

Your privacy settings

At your first visit, a window at the bottom of the page asks for your consent. Until you choose, everything below is off. You can give or withdraw your consent at any time via “Privacy settings” at the bottom of every page; withdrawing does not affect what happened before. Your choice is kept in your browser’s local storage for 12 months, after which we ask again. It is not sent to us, except your choice on read receipts when you send a request.

  • Visitor statistics (off unless you accept): Cloudflare Web Analytics, see below.
  • Read receipt for our emails (off unless you accept): a read pixel in emails about your request, see “Emails from Pyred”.
  • Strictly necessary (always on): your language, the protection of the request form and the storage of this choice.

Visitor statistics

Only if you accept “Visitor statistics”, we measure the use of this website with Cloudflare Web Analytics; without that consent its script is not even loaded. It sets no cookies and does not follow you across other websites; we only see aggregated figures such as page views, referring websites, countries, browsers and loading times, never a profile of an individual visitor. Legal basis: your consent (article 6.1(a) GDPR and article 10/2 of the Belgian Act on electronic communications). We do not use Google Analytics or advertising trackers.

Which organisations visit our website

Pyred works mainly for companies, event organisers and public institutions. To know which organisations are interested in our services, our server checks, for each page view, whether the internet connection belongs to an organisation (for example a company network or a fixed company connection) rather than to an internet provider. For this we use the network name that our hosting provider Cloudflare supplies and the public register of IP address blocks (RIPE NCC and the other regional internet registries). In that register we look up the network block (for example 192.0.2.0, or the /48 prefix of an IPv6 address), never your full IP address. We only do this on pyred.com itself.

  • If the connection belongs to an organisation, we store the name of that organisation, the country and approximate city of the connection, the page viewed, the date and time and the domain name of the website that referred you (for example google.com). We do not store your IP address and we do not try to identify you as a person.
  • If you use an ordinary home or mobile connection, a VPN, Tor, a proxy or a hosting provider, or if the register shows a private person or a sole trader, we store nothing.
  • To avoid consulting the register on every page view, we keep a pseudonymised code of the network block (never your individual address) with the result for at most 30 days.

Legal basis: our legitimate interest in knowing which organisations show an interest in our services, so that we can follow up on business contacts (article 6.1(f) GDPR); we weighed that interest against your rights and limited the processing to what is described here. We keep these data for 12 months. You can object at any time by sending an email to hello@pyred.com, stating your organisation: we then erase the stored visits of that organisation and put it on an exclusion list, so that nothing is stored again.

Cookies and local storage

This website sets no tracking or advertising cookies. Your privacy settings are kept in your browser’s local storage, not in a cookie. Our hosting provider Cloudflare may set a strictly necessary security cookie that protects the website against abuse by bots. Our staff use strictly necessary cookies when they sign in to manage the projects on this website; visitors never receive them.

Spam protection (Cloudflare Turnstile)

Our request form is protected against spam and bots by Cloudflare Turnstile. When you open the form, your browser loads a short check from Cloudflare (challenges.cloudflare.com) that tells people from automated programs; usually you see nothing, sometimes you are asked to tick a box. For this, Cloudflare processes technical data of your connection and browser, such as your IP address and browser characteristics, only to detect bots, not to follow you across websites or for advertising. Turnstile sets no cookies on our website. Legal basis: our legitimate interest in keeping our form free of spam and abuse (article 6.1(f) GDPR).

Emails from Pyred

Emails we send you from our systems — such as quotations, order confirmations, invoices and reminders — contain a small invisible image (a read pixel) only if you gave your consent for “Read receipt for our emails”. When your email program loads it, we record whether, when and how often the email was opened. We store only that, together with the recipient address, the subject and the time of sending; your IP address and device details are not stored. We use this solely to know whether our message reached you and to follow it up. Legal basis: your consent (article 6.1(a) GDPR). Without that consent, our emails contain no read pixel. You can withdraw it at any time via “Privacy settings” or by email to hello@pyred.com.

Who receives your data?

Your data are only accessible to Pyred employees who need them for their work. We use carefully selected processors that act on our instructions: Cloudflare, Inc. (hosting of this website, visitor statistics and security) and Microsoft (email). When we carry out an event with partners or subcontractors, we only share what they need for that job. We never sell your data and we only share them with third parties for their own marketing with your prior consent.

How long do we keep your data?

  • Questions and proposals: 2 years after our last contact.
  • Client and contract data: as long as the agreement runs and afterwards as long as accounting and tax law require.
  • Job applications: 1 year, unless you agree to a longer period.
  • Visiting organisations: 12 months; the pseudonymised network code at most 30 days.
  • Visitor statistics: aggregated only, without personal data.
  • The code of your IP address for the request form: 24 hours.
  • Your privacy settings: in your own browser, 12 months.

How are your data protected?

We take appropriate technical and organisational measures to protect your personal data, including:

  • all traffic to this website over HTTPS;
  • strong, unique passwords and single sign-on for our business applications;
  • access to personal data limited to the employees who need it for their tasks;
  • up-to-date systems, firewalls and hardware;
  • physically secured offices with alarms;
  • no third-party access without supervision.

Where are your data stored?

This website and its database run on the network of Cloudflare, Inc.; the website database is located in Western Europe. Email runs on Microsoft 365. Our other business records are kept at our registered office and in our secured business applications. Cloudflare, Inc. and Microsoft are companies based in the United States and may process data outside the European Economic Area. Both are certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023); in addition, the European Commission’s standard contractual clauses apply.

What if personal data are breached?

If a personal data breach is likely to result in a high risk to your rights and freedoms, we inform you without undue delay, and we notify the Belgian Data Protection Authority within 72 hours where the law requires it.

Your rights

You have the right to access your personal data, to have them corrected or erased, to restrict or object to their processing (including the recognition of visiting organisations), to data portability and to withdraw your consent at any time. Send your request to hello@pyred.com or use our contact page; we answer within one month. We take no decisions based solely on automated processing.

If you believe we do not handle your data correctly, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.

Last updated: 4 October 2026.