Privacy Policy

1. Introduction

We are committed to protecting the privacy and personal data of our website visitors and users of the Platform. This Privacy Policy explains how we collect, process, and protect personal data in compliance with the General Data Protection Regulation (GDPR).

Definitions

  • “LeakIX”, “we”, “our”, “us”: Company organized and existing under the laws of Belgium, having its registered office at Chaussée de Renaix 329, 7862 Ogy, Belgium, registered with the Crossroads Bank for Enterprises under company number 1000.644.872.
  • “Client”: Person having subscribed to a commercial plan on the Platform.
  • “Platform”: The LeakIX platform, accessible on https://leakix.net.
  • “Researcher”: Person utilising the Platform to identify vulnerabilities and exposures and report them to Recipients.
  • “User”: Person utilising the platform, including Clients and Researchers.
  • “Visitor”: Visitor of the LeakIX website that is no User.
2. Collection and processing of Visitors’ personal data

When Visitors visit our website, we may process certain personal data. To know more about the processing of Visitors’ personal data, see our Cookie Policy.

3. Collection and processing of Users’ personal data
A) Identity verification (KYC):

To comply with regulatory requirements and guidelines, as well as ensure the security of our Platform, we may collect and process Users’ personal data for identity verification purposes (KYC). We use the services of iDenfy to verify the identity of our Users. The data collected may include Users’ name, date of birth, address, e-mail, identification documents, and any additional information required for verification.

We rely on the legitimate interests identified above (compliance with regulatory requirements and guidelines, ensure the security of our Platform) to perform this personal data processing activity.

B) Payment processing:

In order to facilitate payments on our Platform, we utilise the services of Stripe. When Clients proceed with payments, Stripe may collect and process personal data, including payment card details, billing information, and transaction details.

The personal data processing activity consisting in processing your personal data for the purpose of payments is based on the contractual necessity: we would not be able to receive Clients’ payments without such data, and would thus not be able to contract with Clients.

The transfer of personal data to Stripe is based on our legitimate interests to have a smooth and secure payment process.

4. Data retention

We will retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Once the data is no longer necessary, we will securely delete or anonymize it.

Thus, we generally keep the identity verification data until one year after Users stopped using the Platform. We do not personally host any personal information regarding the processing of payments.

5. Data subject rights

As a data subject, you have certain rights under the GDPR, including the right to access, rectify, and erase your personal data. You also have the right to restrict to the processing of your personal data and the right to data portability. To exercise these rights or obtain further information, please contact us using the details provided in Section 9.

In addition to these rights, you also have the right to object to the processing of your personal data based on our legitimate interest due to your specific situation.

You also have the right to lodge a complaint with the competent supervisory authority. In Belgium, you can contact this Data Protection Authority.

6. Data transfers

Except for Stripe and iDenfy, we do not ourselves transfer your personal data to third-parties nor to third-countries. If Stripe transfers personal data to third-countries, i.e. countries of out the European Economic Area, it relies on standard contractual clauses.

7. Contact information

If you have any questions or concerns regarding the collection, processing, or protection of your personal data, or if you wish to exercise your rights as a data subject, please contact us at support[at]leakix.net.

8. Changes to the privacy policy

We reserve the right to update or modify this Privacy Policy from time to time. Any changes will be effective upon posting the revised version on our website. We encourage you to review this Privacy Policy periodically for any updates.

Last updated: 19/07/2023