How we handle your data

Privacy: the full Policy.

We believe in transparency as much as we believe in performance. No secrets, no fluff – just a clear-eyed look at how we protect your information.

1. Who are we?

  1. Name: Clyde and Bonnie SRL (“we”, “us”, “our”)

  2. Registered Office: Chaussée de Saint-Job 70, 1180 Uccle (Belgium)

  3. Company Number: 0807.698.016

  4. Website: https://clydeandbonnie.be/ (the “Website”)

  5. Data Protection Contact: nicolas@clydeandbonnie.be

2. Who are the data subjects?

  1. We process personal data relating to:

    • Representatives of our clients;

    • Representatives of our suppliers;

    • Job applicants;

    • Visitors to our Website and our premises; and

    • Other data subjects (collectively “data subjects”, “you”, “your”).

  2. This privacy policy (the “Policy”) applies to all processing of your personal data carried out by us.

3. What is our commitment to data protection?

  1. We are committed to making our best efforts to ensure that our personal data processing activities comply with applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”) and the Belgian Law of July 30, 2018, as amended or replaced from time to time (“Applicable Data Protection Legislation”).

4. For what purposes do we process your personal data?

  1. If you are a representative of one of our clients, we process:

    • Personal and professional identification and contact data for the activation and management of our business relationship;

    • Identification data for billing purposes;

    • Bank details, where applicable, to verify payments;

    • Contact data for sending marketing communications, where applicable.

  2. If you are a representative of one of our suppliers: We process your identification and contact data to manage our business relationship.

  3. If you are a job applicant: We process your identification data, professional life data (skills, qualifications, experience), and CV content to evaluate your profile.

  4. If you visit our Website: We may process electronic identification data in an aggregate manner to measure traffic, improve the user experience, and prevent fraud or security breaches.

  5. Surveillance: If our premises are equipped with surveillance cameras, we may access images only when necessary for our legitimate interest in detecting offenses, within the limits of the law.

  6. General purposes: We may also process data to:

    • Conduct restructuring operations;

    • Perform internal and external audits;

    • Manage disputes and legal claims.

  7. Automated decision-making: We do not subject data subjects to decisions based solely on automated processing with legal or significant effects.

5. In what capacity do we process your personal data?

  1. We process your personal data as a Data Controller. We determine the purposes and means of the processing.

6. On what legal basis do we process your personal data?

  1. The provision of your data may be necessary for:

    • The performance of a contract or pre-contractual measures (e.g., a job application);

    • Compliance with a legal obligation (e.g., accounting or tax);

    • The pursuit of our legitimate interests, provided they prevail over your fundamental rights.

  2. We seek your prior, free, and informed consent for specific processing (e.g., image rights).

  3. Failure to provide certain data may prevent us from providing our services or fulfilling our legal obligations.

7. Where does your personal data come from?

  1. Data is collected:

    • Directly from you (e.g., during our first contact);

    • From publicly available sources (e.g., the Internet for screening job applicants).

8. Who has access to your personal data?

  1. The following recipients may have access (only as necessary):

    • Our administrative and sales staff;

    • Our procurement team (for suppliers);

    • Legal advisors and lawyers in the event of restructuring or litigation.

  2. We use processors (sub-contractors) only under written instructions in accordance with Applicable Data Protection Legislation.

  3. In restructuring cases (e.g., financing), data may be shared with involved third parties (e.g., banks) as permitted by law.

9. How do we manage our processors?

  1. We ensure our processors comply with Applicable Data Protection Legislation.

  2. They are bound to process data only on our instructions, ensure data security, maintain confidentiality, and assist us in fulfilling data subject rights.

10. Where do we process your personal data?

  1. Some recipients may be located outside the European Economic Area (EEA).

  2. In such cases, we ensure safeguards are in place:

    • An adequacy decision by the European Commission;

    • Standard Contractual Clauses (SCCs);

    • For the US, the EU-US Privacy Shield framework (or current equivalent legal mechanism).

11. What are the applicable retention periods?

  1. Data is kept only as long as necessary for the purposes for which it was collected.

  2. Accounting documents (invoices, etc.) are kept for seven (7) years per legal requirements.

  3. Other criteria include the date of last contact, security needs, ongoing disputes, and legal erasure obligations.

12. What are your rights?

  1. Under the Applicable Data Protection Legislation, you have the right to information, access, rectification, erasure, objection, restriction of processing, data portability, and the right to withdraw consent.

  2. Summary of Rights:

RightDescription
Right to InformationYou have the right to clear and transparent information about how we process your data.
Right of AccessYou can request confirmation of processing and a copy of your personal data.
Right to RectificationYou can have inaccurate or incomplete data corrected or completed.
Right to ErasureThe “right to be forgotten”—subject to legal exceptions (e.g., legal retention obligations).
Right to ObjectYou can object to processing based on our legitimate interests due to your specific situation.
Direct Marketing ObjectionYou can object at any time to your data being used for prospecting/marketing.
Right to RestrictionYou can request that processing be limited in certain circumstances.
Data PortabilityYou can request to receive your data in a structured, machine-readable format to transfer it.
Withdrawal of ConsentIf processing is based on consent, you can withdraw it at any time.
 

  1. To exercise your rights, contact: nicolas@clydeandbonnie.be. We will respond as soon as possible. We may request proof of identity in case of doubt.

13. What level of security do we provide?

  1. We implement appropriate technical and organizational measures to ensure a level of security adapted to the risks.

  2. We follow industry best practices to prevent accidental or unlawful destruction, loss, alteration, or unauthorized access.

14. Do you have questions or complaints?

  1. Please address questions or complaints first to: nicolas@clydeandbonnie.be.

  2. You also have the right to lodge a complaint with the Data Protection Authority: Autorité de Protection des Données, rue de la presse 35, 1000 Brussels, +32 (0)2 274 48 00, contact@apd-gba.be.

15. Anything else?

  1. We reserve the right to update this Policy. We will inform you of any changes.

  2. This Policy prevails over any other conflicting document regarding personal data processing.

We get it

In the marketing industry, choosing the “impressive” option often feels like the safest move.

We know the game: shiny decks, big claims, clever wording, weel-it theatre. It looks good. It sells hope. It can even feel reassuring.

The problem is: it’s rarely effective (at least not for long).

And we don’t think it’s ethical either. Because it shifts attention away from what matters—impact, proof, accountability—and toward appearance.

At Clyde & Bonnie, we don’t play that game. Not because we can’t. Because we choose not to.

What you will get (if you stay)

  • clear choices and hard priorities
  • work that ships
  • proof, metrics, iteration
Ok. Tell me how you do it.
Marvin is coming…
Securing session