Privacy Policy (Website)


Effective date: [1 September 2025] • Version: 1.0


This Privacy Policy explains how Confidential Reporting (“we”, “us”, “our”) collects and uses personal data on our website located at Https://www.confidentialreporting.network (the “Site”).


Note: Our technology providers have there own dedicated privacy notices. This Policy covers the website only.


1) Who we are (Data Controller)

  • Controller: BV Frank Staelens
  • Registered address: Kerkstraat 64/0401 – 8420 De Haan, Belgium
  • Contact (privacy): [email protected]


2) What data we collect on the Site

  • Technical & usage data: IP address, device/browser info, pages viewed, timestamps, referrer URLs, cookie IDs, error logs.
  • Contact forms / demo requests: name, work email, phone, company, role, message content.
  • Newsletter sign-ups: name, email, preferences.
  • Cookies & similar tech: see Cookies below.

We do not intentionally collect special categories of data via the Site. Please avoid sharing sensitive information in free-text fields.


3) Purposes & lawful bases (GDPR)

  • Operating the Site; security (load balancing, fraud prevention, diagnostics) | Legitimate interests (Art. 6(1)(f))
  •  Responding to enquiries / demo requests | Contract steps (Art. 6(1)(b)) or Legitimate interests
  •  Sending newsletters / product updates | Consent (Art. 6(1)(a))—you can withdraw anytime
  •  Analytics to improve the Site | Consent (cookies/analytics) or Legitimate interests (if using privacy-friendly, self-hosted analytics)
  •  Legal, regulatory, or compliance needs | Legal obligation (Art. 6(1)(c))


4) Cookies

We use essential cookies (to run the Site) and, with your consent, analytics and/or functional cookies.


5) How we share data

We don’t sell personal data. We may share with the processors who help us run the Site (Squarespace Inc for hosting, Google for email) under Data Processing Agreements.


6) International transfers

If data is transferred outside the EEA/UK, we rely on adequacy decisions (where available), Standard Contractual Clauses (SCCs), and/or additional safeguards. 


7) Retention

We keep personal data only as long as necessary for the purposes above:

  • Contact requests: typically 12–24 months after last interaction.
  • Newsletter data: until you unsubscribe or become inactive.
  • Server logs: typically 30–180 days, unless needed for security/investigations.
    Actual periods may vary by system—ask us for specifics.


8) Your rights (EU/UK GDPR)

You can access, rectify, erase, or restrict processing of your data, object to certain processing, and port your data. Where processing is based on consent, you may withdraw it at any time (this won’t affect past lawful processing).

  • To exercise rights: contact [email protected]
  • You also have the right to lodge a complaint with your local supervisory authority (e.g., GBA/APD in Belgium, Autoriteit Persoonsgegevens in NL, ICO in the UK).


9) Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, least-privilege roles, and vendor due diligence. No system is 100% secure; we maintain incident-response procedures consistent with legal obligations.


10) Children

This Site is not intended for children under 16. We do not knowingly collect data from children through the Site.


11) Links to other sites

Our Site may link to third-party websites. Their privacy practices are governed by their own policies.


12) Speak-Up / Whistleblowing portals

Reports submitted via our Confidential Reporting portals (including anonymous options) are governed by a separate privacy notice from the technology provider Faceup. That notice explains legal bases that may include legal obligation, public interest or employment law grounds, special security measures, restricted access, retention, and data minimisation specific to whistleblowing. https://www.faceup.com/en/privacy-policy 


13) Changes to this Policy

We may update this Policy from time to time. We’ll post changes here and adjust the Effective date above. Material changes may be communicated on-site or by email (if appropriate).


14) Contact us

Questions or requests about this Policy or your data rights:
Email: [email protected]