Privacy Statement

Last updated: 14/10/2026

Who we are

This statement covers the website kangacoders.com and our own dealings with clients, prospects and suppliers. The controller is KangaCoders BV, Quellinstraat 49, 2018 Antwerp, Belgium, company number 0637.897.338 (VAT BE0637897338). Questions about your data go to [email protected].

We also build apps for clients. For those apps we usually process data on behalf of the client, and each app has its own privacy policy that describes what it collects. See Apps we build below.

What we collect and why

Contact form and email. When you use the contact form or mail us, we get your name, email address, company name if you give it, and your message. We use this to answer you and, if it leads somewhere, to prepare a quote. Legal basis: steps you ask us to take before a contract (art. 6(1)(b) GDPR) and our legitimate interest in replying to business enquiries (art. 6(1)(f)).

Clients and suppliers. For quotes, contracts, invoices and project work we keep contact details of the people we work with, plus billing and payment data. Legal basis: performing the contract (art. 6(1)(b)) and our legal obligations under Belgian accounting and tax law (art. 6(1)(c)).

Hosting and server logs. The website runs on Cloudflare. Like any web server, it logs technical data such as your IP address, browser type and the pages you request. We use this only to keep the site running and secure. Legal basis: legitimate interest (art. 6(1)(f)).

Statistics and advertising. The website loads Google's tag (gtag.js) for Google Ads conversion measurement and Google Analytics, and Ahrefs Web Analytics for traffic statistics. These tools can set cookies or similar identifiers and record which pages you visit, where you came from and roughly where you are. We use them to see which pages work and whether our ads lead to enquiries. You can block them in your browser settings or with a content blocker; the site keeps working.

Who we share data with

We don't sell personal data and we don't share it for other companies' marketing. We use these service providers, who only process data on our instructions:

  • Cloudflare (website hosting and network security)
  • Google (Google Ads and Google Analytics)
  • Ahrefs (web analytics)
  • our email and accounting providers
  • our own servers in the EU for the contact form and project data

We share data with authorities only when the law requires it, for example with the tax administration.

Transfers outside the EU

Some of these providers, such as Google and Cloudflare, are based in the United States. Where data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

  • Enquiries that don't lead to a project: up to 2 years after our last contact.
  • Client and supplier contact details: for the duration of our collaboration and up to 2 years after.
  • Invoices and accounting records: 10 years, as required by Belgian law.
  • Server logs: a few weeks at most, unless we need them to investigate an incident.

Your rights

Under the GDPR you can ask us for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Mail [email protected] and we will reply within one month. We may ask you to confirm your identity first.

If you think we handle your data wrongly, you can file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, www.gegevensbeschermingsautoriteit.be. We would appreciate hearing from you first, so we can try to fix it.

Security

We limit access to personal data to the people who need it, use encrypted connections, and keep our systems up to date. No system is perfectly secure, but if a breach puts your data at risk, we will tell you and the authorities as the GDPR requires.

Apps we build

Most apps we build are commissioned by a client. In that case the client decides what the app does with personal data and is the controller; we act as their processor and follow their instructions under a data processing agreement. Each app has its own privacy policy:

Changes

We update this statement when our practices change. The date at the top shows the latest version.