Privacy notice

FlowAppeal, Provinciale Steenweg 455A, 2627 Schelle, is responsible for your data (the controller). For any question about it, or to use your rights below, write to info@route27.be.

• Your name, email address and phone number.
• What you'd like help with, and the meeting time you pick.
• Your answer to whether you're 18 or older.
• Whether you agreed to a confirmation on WhatsApp, with the exact wording you agreed to and when.
• Our WhatsApp conversation with you: the confirmation, the messages you send us and our replies, with their times and whether they were delivered and read. Photos, voice messages and files you send aren't stored, only that you sent one.
• Your browser's time zone, so the times in your emails are your local times.
• A one-way scrambled code made from your IP address (not the address itself), to limit how many bookings one connection can make.
• For the booking, the meeting link and whether the confirmations reached you.

• To book and hold the meeting you asked for: the calendar invitation, the video link and the confirmation email. This is a step you asked us to take before any agreement (GDPR article 6(1)(b)). Without your name, email and phone number we can't book it.
• WhatsApp meeting confirmation: If you opt in, we will use your phone number to send you a meeting confirmation via WhatsApp. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time by replying "STOP" on WhatsApp or emailing info@route27.be. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
• To answer the messages you send us on WhatsApp, and keep the conversation with your booking so we know what was agreed: handling your request before any agreement (article 6(1)(b)).
• To keep the form safe from abuse and spam, and to only book meetings with adults: our legitimate interest in running a secure booking service (article 6(1)(f)).

We don't sell your data, use it for advertising, or make automated decisions about you.

Your booking, with our WhatsApp conversation, is deleted automatically 12 months after the meeting date. If you ask us to delete it sooner, we delete the booking, the conversation and its calendar event straight away. The emails about your meeting are in FlowAppeal's own mailbox; we delete those on request too. Our hosting provider keeps technical logs, which include IP addresses, for a short time for security.

These companies handle your data only on our instructions, each under a data processing agreement (DPA):

• Vercel (hosting the website; bookings are handled in an EU data center) and Supabase (storing the bookings and WhatsApp conversations, in the EU).
• Resend, which sends us, not you, an email about each new booking.
• Cloudflare (Turnstile), which checks that the form is filled in by a person, using your IP address and browser details.
• Google (our calendar, video meetings and email), which creates the invitation and sends the confirmation.
• Meta (WhatsApp), which delivers the WhatsApp confirmation if you asked for one, our replies, and the messages you send us.

Some of these companies are based in the United States. Where your data leaves the EU, their agreements with us include the EU's safeguards for such transfers.

You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to how we use it, or receive a copy to take elsewhere. Write to info@route27.be; we answer within one month. If you think we handle your data wrongly, you can complain to the data protection authority in your country.