Privacy and Cookies.
Effective date: September 1, 2026
Who is responsible for your data
BPG Labs is operated by Brian Goodman, who is the controller of personal data collected through this website:
Brian Goodman
Email: [email protected]
Enterprise number: 1031062884
What we collect and why
When you use the contact form or email us, we receive the information you provide, such as your name, email address, organization and message. We use it to respond, assess whether we can work together, and maintain appropriate business correspondence.
We process inquiries because it is necessary to take steps at your request before a possible engagement and because we have a legitimate interest in communicating with people who contact BPG Labs. We do not sell personal data or use contact information for unrelated advertising.
Our hosting provider may process limited technical information, such as an IP address, request time, requested page and browser details, in routine security and access logs. This information is used to operate and protect the site, not to profile visitors.
Service providers and international transfers
The website is hosted by DigitalOcean. Contact-form messages are delivered by Brevo and received in Google Workspace. These providers process data only to provide hosting, email delivery and business communication services.
We select providers that offer contractual data-protection commitments. Where personal data is transferred outside the European Economic Area, we rely on an appropriate transfer mechanism, such as the European Commission’s Standard Contractual Clauses, when required.
How long we keep information
Contact inquiries that do not lead to an engagement are normally deleted within 12 months after the last substantive communication. If an inquiry leads to work, relevant correspondence may be retained for the duration of the relationship and afterward where reasonably necessary for contractual, accounting, tax or legal obligations. Routine technical logs are retained only for the limited period needed for security and operations.
Website measurement
BPG Labs uses Plausible Analytics to understand, in aggregate, which public pages and pathways are useful. Plausible does not use analytics cookies or persistent identifiers, and BPG Labs does not use it to follow people across websites, devices or days. The measurements include page paths, referring sources, broad device and browser categories, approximate country-level location, and the limited interaction events described on this site. We do not send form responses, Consilium workspace content, private-link tokens, advertising identifiers or precise location data.
Plausible processes limited connection information to produce daily aggregate statistics and does not retain raw IP addresses. BPG Labs uses this measurement in its legitimate interest to improve the clarity, usefulness and operation of its public website while minimizing visitor data. The measurement does not affect access to the website or Consilium.
You can turn measurement off at any time through “Website measurement choices” in the footer. That preference is stored in a first-party cookie named bpg_measurement_consent for up to 180 days and is shared across BPG Labs and Consilium so both experiences respect it. The preference cookie is used only to remember your choice. Turning measurement off blocks further measurement on that browser; information already included in aggregate statistics cannot be separated back to an identifiable visitor.
BPG Labs reviews its measurement data at least every six months. Detailed aggregate analytics are retained for no more than 24 months. At that point BPG Labs may preserve only a management summary that excludes event-level records and small slices, then deletes or resets the Plausible property. Questions about website measurement may be sent through the contact details on the BPG Labs website.
Our hosting infrastructure may set a short-lived, HTTP-only security cookie named __cf_bm. Cloudflare uses it to distinguish legitimate traffic from automated abuse and protect the service. It is not used by BPG Labs for analytics or advertising. If we add non-essential technologies in the future, we will update this notice and obtain consent before activating them where required.
Your rights
Depending on the circumstances, you may ask us to access, correct, delete or restrict your personal data; object to processing based on legitimate interests; or receive data you provided in a portable format. You may also withdraw consent where consent is the legal basis, without affecting earlier lawful processing.
To exercise a right, email [email protected]. We may need to verify your identity before acting on a request. You may also lodge a complaint with the Belgian Data Protection Authority or your local supervisory authority.
Security and changes
We use reasonable technical and organizational safeguards designed to protect information in transit and at rest. No internet service can be guaranteed completely secure.
We may revise this notice when the website, our providers or legal requirements change. The effective date above identifies the current version.