Privacy policy

1. Who are we?

The website makeitsimpl.ai is published by MAKE IT SIMPL - AI SRL (“SIMPL”, “we”), a Belgian private limited company with its registered office at Rue des Frères Lefort 6, 1480 Tubize, Belgium, registered with the Crossroads Bank for Enterprises under number 1027.426.176.

We are the controller of the personal data described below. For any question about your data: scott@makeitsimpl.ai.

2. What data, why, and on what legal basis?

2.1 Call requests (website forms)

• Data: first name, last name, email address, phone number; depending on the form, company name and size and estimated budget; campaign parameters present in the page address (utm_source, utm_medium, utm_campaign, utm_term, utm_content).
• Purposes: contacting you, scheduling the discovery call, sending you emails related to your request (confirmation, reminder, follow-up), keeping track of our exchanges and knowing which campaign brought you to us.
• Legal bases: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); our legitimate interest in measuring the performance of our campaigns (Art. 6(1)(f) GDPR).

2.2 StateFlow waitlist

• Data: first name, last name, work email address, company (optional), phone number, your answers to the questionnaire (profile, activity volume, current organisation, expectations) and the signup page.
• Purposes: managing the waitlist, inviting you to early access and contacting you about StateFlow.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

2.3 Booking through Calendly

• Data: after the form, you are redirected to Calendly, pre-filled with your name and email; Calendly records the time slot you choose and any answers you provide.
• Purpose: scheduling the call.
• Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR). On calendly.com, Calendly also applies its own privacy notice and cookie management.

2.4 Analytics: Microsoft Clarity (only with your consent)

• Data: interactions with pages (clicks, scrolling, movements), session recordings with form content masked, device and browser type, approximate location, cookie identifiers.
• Purpose: understanding how the website is used in order to improve it.
• Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

2.5 Advertising: Meta pixel and Conversions API (only with your consent)

• Data: pages visited and actions taken (visit, form submission), advertising identifiers (_fbp and _fbc cookies), IP address and browser; if you submit a form, your email, first name, last name and phone number in hashed (pseudonymised) form.
• Purposes: measuring and optimising our ads on Facebook and Instagram, and showing them to people likely to be interested.
• Legal basis: your consent (Art. 6(1)(a) GDPR). For the collection and transmission of this data, we are joint controllers with Meta Platforms Ireland Ltd. Meta is solely responsible for its subsequent processing, described in its privacy policy.

2.6 YouTube videos

Videos are only loaded when you click the play button, through the youtube-nocookie.com domain. Google Ireland Ltd then receives your IP address and technical information, and may use your browser's local storage. Legal basis: your consent, given by starting the video (Art. 6(1)(a) GDPR).

2.7 Hosting and security

On each visit, our servers record technical logs (IP address, date and time, requested page, browser) to keep the website running and secure. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

2.8 Email exchanges

If you write to us, we use your contact details and the content of your message to reply. Legal basis: pre-contractual steps or our legitimate interest in answering requests (Art. 6(1)(b) and 6(1)(f) GDPR).

3. Recipients and processors

Your data is only accessible to the people at SIMPL who need it. We use the following service providers, who act on our instructions or, where indicated, on their own behalf:

We do not sell your personal data.

4. Transfers outside the European Economic Area

Some providers may process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified, or otherwise on the standard contractual clauses adopted by the European Commission.

5. Retention periods

• Call requests, waitlist signups and contact details: 3 years from our last contact. If we work together, the necessary data is kept for the duration of the contract and then for the applicable legal periods (notably accounting and tax).
• Microsoft Clarity data: according to the periods set by Microsoft, at most 13 months.
• Cookies: see our cookie policy. Your cookie choice is kept for 6 months.
• Hosting technical logs: 30 days.

6. Your rights

You have the following rights over your data:

• access, rectification and erasure;
• restriction of processing and portability;
• objection, in particular to processing based on our legitimate interest;
• withdrawal of your consent at any time, for example via “Manage cookies” at the bottom of the page, without affecting processing carried out before.

To exercise your rights, email us at scott@makeitsimpl.ai. We reply within one month. If we have reasonable doubts about your identity, we may ask you to confirm it.

You can also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

7. Security

We implement appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), access limited to authorised people, and service providers offering sufficient guarantees.

8. Automated decisions

We do not make any decision producing legal effects concerning you based solely on automated processing.

9. Changes

We may update this policy. The date of the last update is shown at the top of the page. If we make a significant change regarding cookies, we will ask for your consent again.