Privacy Policy

Kufu is a trading name of Sentit BV (BE 0739.672.510), registered office at Senthout 98, 2570 Duffel, Belgium. Sentit BV is responsible for the processing of personal data via this website. Questions about this policy or about your data: [email protected].

• Contact form. If you fill in the contact form on this site (on the contact page, or the short form on a package page), we process your name, email address, optional company name and the content of your message to answer your query. The form sends that data as an email to our mailbox, via the Gmail API and a Google Workspace service account — the same mailbox as emailing us directly, the message just arrives through the form instead of your own mail client. Legal basis: performance of (or steps prior to) a contract, or our legitimate interest in being able to answer your query. Before sending, Cloudflare Turnstile checks in the background whether the submission comes from a human rather than an automated script; that check runs without setting cookies and without processing any data beyond what the check itself needs.
• Contact by email. If you email [email protected] directly, we process your name, email address and the content of your message to answer your query. That mail is delivered through Google Workspace (Google Ireland Limited), which hosts our mailbox. Legal basis: performance of (or steps prior to) a contract, or our legitimate interest in being able to answer your query.
• Booking an intro call. Booking the free intro call runs through Cal.com, an external service. When booking, you share your name and email address directly with Cal.com; we receive that data to hold and prepare the call. Cal.com's own privacy policy applies to the booking itself. Legal basis: steps prior to a contract.
• Technical data. On every visit our hosting partner (Cloudflare) processes standard technical data by default, such as IP address and time of visit, needed to keep the site running and secure. Legal basis: our legitimate interest in a working, secure site.
• Analytics and advertising cookies. Once we deploy those, it will only happen after you give consent via the cookie banner. Legal basis: your consent, which you can withdraw again at any time. See the cookie policy for details.

We do not keep personal data longer than needed for the purpose it was collected for. We keep email correspondence — including messages that arrive via the contact form, which lands there directly as email and is never stored separately in a database — as long as it remains relevant to following up your query or engagement. We keep data on invoices for 7 years, the statutory retention period for accounting records in Belgium.

We do not sell personal data. Data only reaches external parties needed to make the site and our contact with you work: Cal.com (bookings), Google Workspace (email, including messages sent via the contact form), Cloudflare (hosting, security, and the spam check performed by Cloudflare Turnstile on the contact form), and — only after your consent — analytics or advertising services for measuring and improving this website.

Cal.com, Google Workspace and Cloudflare are US companies or run infrastructure in the US, which means your data may be transferred there during processing. That transfer rests on the EU Standard Contractual Clauses and on each provider's own data processing agreement (DPA).

Under the GDPR you have the right to:

• access your data;
• have inaccurate data corrected;
• have your data erased;
• have processing of your data restricted;
• object to a processing activity;
• receive your data in a portable format;
• withdraw a previously given consent at any time;
• lodge a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be).

To exercise any of these rights, email [email protected].

We may update this policy, for example when new functionality — such as a cookie banner — is added to the site. The most recent version always sits on this page.