Last updated: 11 October 2026
This policy explains which personal data Webglobe Webdesign & Development processes, why, for how long and which rights you have under the GDPR.
For Kook & Ko / Demo 2, read its dedicated privacy notice. The account self-service and automatic account retention described below concern Demo 1.
Webglobe Webdesign & Development, enterprise number BE 1023.233.303, based in Landen, Belgium, is the controller. Contact: info@webglobe.be.
When you submit the contact form, we process your name, email address, optional telephone number, message and necessary technical security data to answer your request and prevent abuse. The request is stored in the protected admin inbox before email delivery, together with delivery status and retry timestamps. If it remains unread in the admin inbox, a reminder is sent every 24 hours. Our contact confirmation and notification templates contain no personal open-measurement pixel. We explicitly pass no personal provider open-tracking consent to Brevo; delivery diagnostics and any non-personal statistics are separate. Newsletter measurement follows the separate optional choice described below. The legal basis is taking steps at your request before entering into a contract, performance of a contract where applicable, and our legitimate interest in secure and reliable communication.
Username, name and email are required for login, addressing, verification and account messages. Telephone is optional and used only when you request telephone contact; it is not an account identifier. No age or birth year is requested. Password hashes, account status and last login support authentication and security. Registration, account activation and login also require strictly necessary session, CSRF and security cookies. A refusal of optional analytics remains in force. In Account Privacy you can download a structured copy and erase the account yourself.
Only after you allow statistics do we process a random visitor and session identifier in HMAC-pseudonymised form, page and timestamp, language, device category, browser family, operating system, referring domain and approximate country, region and city. When you are signed in, server-confirmed demo-store and catalogue page views and their frequency are also linked to your account. The IP address may be sent to IPinfo for bounded location enrichment and is also used to derive a keyed network identifier that changes monthly; Webglobe does not store the raw IP or full user-agent in analytics. The legal basis for individual analytics is consent. No individual analytics data or analytics-purpose IPinfo lookup is created before consent or after refusal. Separately, identifier-free daily totals count page views and, for demo-store pages, only whether an active store-user or administrator session existed; these totals contain no account, cookie, session, network or device identifier and cannot identify unique visitors.
With statistics consent, we also measure the steps from a Webglobe visit through a demo and contact form to an accepted inquiry, separately from Kook & Ko product views, cart opening, checkout and a server-confirmed test payment on return to the shop. Each flow stores only a pseudonymous analytics-session key, entry date, last step and timestamps for at most 180 days. These conversion records contain no account, order, contact contents or payment details. Refusal, withdrawal and browser privacy signals stop new observations.
With that optional statistics consent, Kook & Ko also records submitted searches without a catalogue result for at most 90 days. Limited, normalized terms, language and dates are counted using a separate derived code per term, session and day. No account, IP or shared session identifier is attached. Obvious personal inputs are rejected, but free text may still contain personal information; please enter product words only. See the Kook & Ko privacy notice for details.
With statistics consent, account-linked usage observations can also cover management accounts: dashboard use and management-app installation and opening events. This optional measurement is separate from the necessary management-app authorisation and security history described below. Refusing analytics does not disable authorised management access.
For rate limiting, fraud and attack detection, Webglobe processes source data such as IP address, user-agent, route, timestamp and security event. A valid client IP must be available through the trusted proxy chain for registration, account activation, login and MFA; otherwise that account action is refused before credentials or an account mutation are processed. When external session-location enrichment is enabled, the original login IP is sent to IPinfo no more than once per authentication session to obtain an approximate country, region and city. Webglobe retains the original login IP and that bounded result with the active authentication session until it expires or is revoked. Provider unavailability never blocks account access. The location helps you recognise sessions but is never used as a device identity, risk signal or authentication factor. For login protection, a login identifier is transformed into a pseudonymous value using a secret-key HMAC. Short-lived counters are maintained per source and per source/account pair, together with an expiring identity risk score. Related security logs are normally retained for no more than 90 days. Failed remote login attempts do not by themselves lock an account: a higher risk score can require a fresh additional authentication step (MFA or step-up), while an explicit account block or timeout remains a deliberate action by authorised administration. Privileged sessions are also linked server-side to the hash of a separate random, host-only HttpOnly device cookie; a missing or different binding revokes the session and requires a fresh MFA login. This processing is kept separate from analytics and is based on our legitimate interest in protecting the website, accounts and visitors. These protections are not used for a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.
After a successful account authentication, Webglobe separately stores a hash of the random device code, bounded browser and operating-system labels, and the latest approximate country, region and city. This history contains no IP address or full user-agent. It is shown only to help identify earlier sign-ins: it is not an active session, never grants access, never skips MFA and is not used for risk decisions. Store users can forget a device themselves; this also revokes any email-MFA trust for it, while an active session must be signed out separately. Records are erased with the account or automatically no later than 365 days after the device was last recognized.
For administrators, Webglobe separately stores a pseudonymous identifier for each browser profile authorised after MFA, bounded browser, operating-system and device-category labels, the current authorisation generation and status, and timestamps for authorisation, an installation signal, the last observed management-app opening, a voluntary removal report and revocation. This lets an administrator inspect active access and intervene after loss or compromise. It does not identify a physical device and a period without app activity is never treated as proof that an app was uninstalled. This necessary security processing is separate from consent-based statistics and is based on Webglobe’s legitimate interest in protecting privileged access.
Kook & Ko uses a separate customer account. Its privacy notice covers saved carts and favourites, test order addresses, return labels, availability requests, optional push notifications and the voluntary survey about all three websites. Survey drafts are private; submitted answers and optional screenshots are visible to the authorised administrator and are erased after 365 days without changes. Kook & Ko privacy notice.
Authorised Webglobe administration and contracted infrastructure providers may access data only where necessary. Brevo processes contact and transactional email. IPinfo may receive an IP address for approximate session location under Webglobe’s legitimate security interest and, separately, for analytics enrichment after consent. Hosting, database and backup providers process data under appropriate contractual and security safeguards. We do not sell personal data or share analytics profiles with advertising networks.
If a processor handles data outside the European Economic Area, Webglobe requires a valid GDPR transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, and additional safeguards where needed.
Our own personal newsletter open and click measurement requires separate optional consent. We pass no consent for personal provider open tracking per Brevo recipient. Delivery diagnostics and any non-personal statistics remain separate and depend on the actual provider settings. Withdrawal or unsubscribing immediately minimizes our personal newsletter counts and measurement dates; bounded click cleanup completes any remaining details through the periodic task. Research reports no longer retain or display individual email opens; sending and delivery diagnostics remain separate.
Unconfirmed guest newsletter requests without an account link or previous delivery history are removed by daily maintenance after 7 days without a new request or change. Newsletter confirmation links expire after 48 hours; retained subscriptions and opt-out records are assessed separately. Individual newsletter open/click history is retained for at most 180 days.
Unactivated demo accounts are automatically erased after 7 days. Active, non-privileged demo accounts without orders, product entitlements or ownership adjustments are erased after 24 months without login. Account erasure removes linked features, newsletter data and optional analytics; a minimised, pseudonymised transaction or audit record may remain only where a documented retention reason applies. Pseudonymised records can still be personal data. These account retention rules concern Freq Forge; Kook & Ko has a separate privacy notice and reviewed erasure procedure. Individual analytics records and identifier-free daily page-view totals are automatically deleted after no more than 180 days. Analytics cookies last no more than 180 days and an analytics session 30 minutes. With the initially selected “stay signed in on my own device” choice, customer sessions last at most 7 days. Uncheck it on a shared device. A device-bound administrator or poweruser session verified by TOTP/recovery lasts at most 7 days and ends after 48 hours of inactivity. Without that choice, the limit is 30 minutes of inactivity and at most 8 hours from login. Additional verification still applies to new privileged sign-ins and critical actions. After email verification, customers can trust their browser profile for at most 30 days; a later visit does not extend that trust. Sign-out and revocation can end access earlier. An active management-app authorisation is retained while it remains allowed; revoked and retired authorisation records are automatically erased no later than 365 days after their last update. Adaptive login counters and risk signals have a short operational expiry; related security events in logs are normally kept no more than 90 days, unless an incident or legal claim requires limited longer retention. System inbox messages are normally kept no more than 90 days. Contact correspondence in the admin inbox is automatically deleted after no more than 24 months, unless a contract, statutory retention duty or dispute requires longer storage elsewhere. Password-reset records are cleaned up after 72 hours.
Demo-account users can download, rectify and erase account-linked data directly in the dashboard. You may also request access, rectification, erasure, restriction, portability where applicable, or object to processing based on legitimate interest. You can withdraw analytics consent at any time without affecting processing before withdrawal. Send other requests to info@webglobe.be. We may ask for proportionate proof of identity and normally respond within one month.
A separate secret-keyed email fingerprint prevents reactivating a deleted Freq Forge account from an old backup. This remains personal data and is separate from the temporary 90-day re-registration cooldown. We review its need monthly and remove it once all recoverable copies that could contain the old account have expired and no separately justified incident or claim hold remains. Undelivered security exports have a 90-day local retention limit; uncertain delivery retains only a limited integrity commitment after personal payload expiry and requires reviewed export recovery.
You may also lodge a complaint with the Belgian Data Protection Authority. gegevensbeschermingsautoriteit.be.
Webglobe applies access control, MFA for administration, encryption in transit, pseudonymisation, data minimisation, retention limits, rate limiting, security logging and protected secret management. No internet service can guarantee absolute security.
Material changes are published on this page with a new update date. Where legally required, renewed consent will be requested.