Privacy Policy

Introduction

Welcome to our site madewithlove.com, named hereafter the “Website”. At madewithlove, named hereafter “We or we”, we value our clients and visitors' privacy. Therefore, we will do our best effort to comply with the new rules imposed by the EU General Data Protection Regulation (GDPR) starting with the 25th of May 2018.

Below, we describe the information we collect, how we use it and your choices regarding this information.

Contact information

Processed data

Data you voluntarily provide us with

We collect information from you when you subscribe to a newsletter, fill out a form or enter information on our site, such as:

• Full name
• Email address
• Telephone number
• Company

Additional personal data as contained in the messages

Data we may collect when you're a prospect

• Name
• Email address
• Telephone number
• Company

Data we collect when you're a customer

• Name
• Email address
• Telephone number
• Company and company details

Data we collect when you're applying to a position

• Name
• Email address
• Telephone number
• Your resume or CV
• Your home base

Some data is anonymously collected through cookies or other similar technologies. To find out more, please refer to our Cookie Policy.

Purposes of data processing

Madewithlove BV will use data only in ways that are compatible with the purposes for which it was collected or subsequently authorised by you.

We take reasonable steps to ensure that the personal data is relevant to its intended use, accurate, complete, and current. Your personal data stays strictly confidential and will in no way be communicated to third parties or used for direct marketing purposes unless we have obtained your consent or have a legitimate interest in processing your information. Your consent can be revoked at any time, without justification, and freely by email at hello@madewithlove.com.

We collect personal data from our Website visitors to:

• enable us to provide you with the services and information offered through the Website and which you request
• administer the technical aspects of the Website and applications
• carry out market research to improve the technical and intrinsic quality of the provided services
• improve our services by compiling anonymous visitor statistics
• lead an investigation regarding the quantity of visits to the different parts of the Website
• improve security

The processing of the data of Website visitors is based on our legitimate interest or your consent.

We collect personal data from prospects to:

• assess any opportunities for a commercial collaboration;
• enable us to adapt our products and services to the needs of our prospects

The legal basis for processing is our legitimate interest.

We collect personal data from clients to:

• execute the services which the customer has requested

The legal basis for processing is the execution of an agreement.

We collect personal data from applicants to:

• assess if the applicant has sufficient qualifications that are matching with the job openings

The legal basis for processing is your consent and our legitimate interest.

Direct marketing

Personal data can also be used for direct marketing, such as newsletters, provided you have given additional express consent (“opt-in”). In every newsletter we send you, you can update your profile and individually choose the content you would like to receive from madewithlove BV. You can unsubscribe anytime from receiving information from madewithlove BV that you previously opted-in by sending a request to hello@madewithlove.com. An automated option can also be found at the bottom of any newsletter you might receive from madewithlove BV.

Duration of data conservation

All personal data is kept as long as necessary to achieve the purposes determined in this Policy for which it was collected unless a longer retention period is required by law. The personal data of applicants who are not selected for the job but who want to be added to our talent pool will be processed for 1 year. If the applicant doesn't want to be added to the talent pool, we will delete the personal data within 63 days.

Where information is processed

The information that you submit via the Site is sent to and stored on secure servers. We use third-party email services to manage our regular communications: Postmark, Mailgun, MailChimp and Gmail.

When you contact us through our forms, request whitepapers, or subscribe to our newsletter, you agree to the storage of your data in this way.

Your rights

You have the right, free of charge, to access, rectify, transfer, restrict the processing, or, if legally possible, ask for the erasure of the personal data that you have communicated to madewithlove BV. You can exercise these rights by contacting us by mail at hello@madewithlove.com. Please note that the right to object requires motivation unless it relates to the processing for direct marketing purposes. We will treat your request in a maximum of 30 days following your request or longer if the process is complex.

Always send us proof of your identity so we can verify that it is certainly you. If you can't provide us with the requested information, we can refuse your access to certain services. You are solely responsible for the accuracy and completeness of all information you provide us.

Right to data portability

By applying the rules of the EU General Data Protection Regulation (which entered into force on the 25th of May 2018), article 20, you have the right to transfer your data from one data controller to another in a machine-readable format. The data controller can be an individual or an organisation that determines the purposes and manners of personal data processing. A machine-readable format is a format that can be easily processed by a computer (e.g.: .csv, .xml formats).

Cookies and similar technologies

Certain data is collected through cookies and similar technologies. Please read the Cookie Policy for more information about the different types of cookies, our cookie policy, and how to change your cookie preferences.

Security and confidentiality

We have developed technically and organisationally appropriate security rules to avoid the destruction, loss, forgery, modification, forbidden access and mistaken communication to third parties of your personal data. To accomplish this, we:

• use a Secure Socket Layer (SSL) encryption, which encrypts your information before it is sent to us to ensure that all data passed between the web server and browser remain private
• periodically review and enhance as necessary our security and privacy policies
• only give access to personal information to authorised personnel
• keep our servers within the Economic European Area (EEA) or non-EU countries based on an adequacy decision, the Standard Contractual Clauses and extra security measures if needed

We are in no way liable for any direct or indirect damages resulting from the unauthorised access of your personal data by a third party, such as hackers. Your use of our Website demonstrates your assumption of this risk.

The Website can include links, hyperlinks, or references to other websites that are not controlled or managed by us and to which our Privacy Policy and Cookie Policy do not apply. We are not liable for the content of these websites or for the offers, products, and services offered by those. We encourage all users to read the privacy statements of the visited websites.

Responsible disclosure

We take the security of this Website and of the systems we operate seriously. If you believe you have found a security vulnerability, we would like to hear about it and will work with you to resolve it.

How to report

Email hello@madewithlove.com with “Responsible disclosure” in the subject line. Please include:

• the URL, endpoint, or system affected
• a description of the vulnerability and the impact you believe it has
• the steps to reproduce it, including any request, payload, or proof of concept

We handle reports in English and Dutch.

What we ask of you

• Report as soon as you find an issue, and give us reasonable time to fix it before disclosing it publicly: until the issue is resolved, or 90 days after your report, whichever comes first.
• Limit your testing to what is strictly necessary to demonstrate the problem.
• Do not access, modify, delete, or download data belonging to anyone else. If you encounter personal data, stop immediately and say so in your report.
• Do not attack availability or people: no denial-of-service, load or stress testing, spam, social engineering, phishing of our colleagues or clients.
• Do not install malware or backdoors, and do not leave any other persistent change behind.
• Do not run automated scanners in a way that degrades the service for others.
• Treat the vulnerability, and anything you encountered through it, as confidential.

What is in scope

madewithlove.com, its subdomains, and the publicly reachable services we operate ourselves.

The following are out of scope:

• Systems and codebases belonging to our clients. We build, review, and audit software for other organisations, but we neither own nor operate it and cannot authorise testing against it. Report such findings to that organisation directly.
• Third-party platforms we merely use as a customer. Please report those through the vendor's own disclosure channel.
• Findings without demonstrable security impact: missing hardening headers, TLS configuration ratings, email authentication opinions, raw output of automated scanners without proof of exploitability, self-XSS, clickjacking on pages with no state-changing action, and issues that require an already-compromised device or browser.

What you can expect from us

• We acknowledge your report within 7 working days.
• We tell you our assessment, and let you know once the issue is resolved.
• We keep your report confidential and will not pass your personal data to third parties without your consent, unless the law requires it.
• We credit you by name or handle in anything we publish about the issue, if you want us to.
• We do not operate a bug bounty programme and do not offer payment for reports. We are grateful for them all the same.
• If you report in good faith and stay within the rules above, we will not report you to law enforcement or bring a civil claim against you.

Vulnerabilities affecting Belgian systems may also be notified to the Centre for Cybersecurity Belgium (cert@ccb.belgium.be). Nothing in this section restricts your rights or obligations under the Belgian framework for coordinated vulnerability disclosure.

General provisions

Changes to privacy policy

We may occasionally amend our privacy policy on the Website. This way, you are always aware of what information we collect and how we use it.

We recommend periodically reviewing the Privacy Policy to stay up-to-date about our privacy practices. However, if we plan to materially change the way in which we use or disclose your personally identifiable information, we will provide you with prior notice and a chance to opt out of such differing uses.

This privacy policy was last updated on 13 August 2026. By using madewithlove.com, you agree to this Policy and any updates we make to it.

Applicable law and jurisdiction clause

Together with our Cookie Policy, the Privacy Policy shall be governed, interpreted, and executed according to Belgian law, which is exclusively applicable to any eventual dispute. Only the courts of Belgium are competent to adjudicate disputes arising out of or connected to our Privacy Policy and Cookie Policy.