

Privacy Policy
Last updated: September 24, 2026
Data Controller
Dr. Frank Van Praet
AZORG Clinic, 164 Moorselbaan, 9310 Aalst, Belgium
Contact: contact form
What Data We Collect
When you use the contact form on this website, we collect the personal data you voluntarily provide, which may include:
- Name
- Email address
- Phone number (if provided)
- Country of residence and biological sex (if provided)
- The content of your message
- The IP address of the device that submitted the form, recorded to detect abuse and to investigate messages reported as not sent by the address owner
After you submit the form, we email a copy of your message to the address you entered. That email contains a private link. If someone used your address without your knowledge, you can use the link to tell us that the message was not sent by you. We then stop handling the message and delete it.
Purpose of Data Processing
Your personal data is processed solely to respond to your inquiry or request submitted through the contact form. We do not use your data for marketing purposes, profiling, or automated decision-making.
Legal Basis and Consent
The processing of your personal data is based on your consent (Article 6(1)(a) GDPR), given when you voluntarily submit the contact form, and on our legitimate interest (Article 6(1)(f) GDPR) in responding to professional and patient inquiries.
The contact form includes an explicit opt-in consent checkbox. By checking this box and submitting the form, you freely and specifically consent to the processing of your personal data for the purpose of handling your inquiry.
Third-Party Services
This website relies on the following third-party services to function:
- Google Analytics — Measures, in aggregate, how many people visit this website and from which country they come. It is used for statistics only: no personal profile is created and no advertising or cross-site tracking takes place. Google Analytics is loaded only after you give your explicit consent. See the Google Privacy Policy.
- Cloudflare (contact form storage and delivery) — Contact form submissions are stored in a Cloudflare D1 database located in the European Union. Cloudflare Workers AI assigns a category to each message so it can be routed correctly; this classification happens inside the EU-hosted Cloudflare platform and is not shared with third parties. Cloudflare Email Service delivers the notification email to our mailbox and the copy of your message to you. Cloudflare acts as a data processor on our behalf under its Data Processing Addendum. See the Cloudflare privacy policy.
- Cloudflare — Provides hosting, DNS, and security services (including bot protection). Cloudflare may process technical data such as your IP address and browser information. See the Cloudflare privacy policy.
Cookies
This website uses Google Analytics, a web analytics service provided by Google LLC. It is used for one purpose only: to measure, in aggregate, how many people visit this website, which pages they read and from which country they come. This tells us whether the information on this site is found and understood. No personal profile of you is created: we use no advertising, remarketing or personalisation features, we do not follow you across other websites, and we do not combine this data with other information about you.
The following cookies may be placed:
- _ga and _ga_2PJHK31Q63 (Google (Google Analytics) — first-party cookies that distinguish visitors and sessions so that visits can be counted without double counting. Maximum lifetime 180 days. Set with the Secure attribute and SameSite=Lax.
- c15t — stores the cookie choice you made, so that this banner does not reappear on every visit. Maximum lifetime 180 days.
Google Analytics is loaded only after you give your explicit consent in the cookie banner. Before you make a choice, no analytics script is loaded, no analytics cookie is placed and no data is sent to Google. If you decline, nothing is loaded and no statistics are collected. You can change or withdraw your consent at any time using the “Cookie preferences” link in the footer; upon withdrawal the analytics cookies are deleted from your browser and the statistics stop.
Our Google Analytics configuration is deliberately limited: cross-device tracking (Google Signals) is switched off, all advertising and personalisation signals are switched off, the analytics cookies expire after 180 days, and the IP address of visitors is not stored by Google Analytics. Your approximate location — country, and at most city level — is derived from your IP address at the moment the page is visited. Analytics data is retained for a maximum of 2 months and is never used for advertising or shared with third parties for advertising purposes.
Google may process this data on servers outside the European Economic Area. Google LLC is certified under the EU–U.S. Data Privacy Framework and acts as our processor under Google's data-processing terms. The legal basis for analytics is your consent (Article 6(1)(a) GDPR). See the Google Privacy Policy.
Functional cookies may also be set by Cloudflare for security purposes (e.g., bot protection). These are strictly necessary cookies and do not require consent under the GDPR.
Medical Confidentiality and Patient Data
This website contains no patient data and no medical records. Any personal data of patients that reach us are processed with the necessary care and with respect for the medical confidentiality to which every physician is bound (professional secrecy / beroepsgeheim).
The forms on this website are intended for administrative and appointment-related messages. Please do not send medical information or medical questions through them: medical advice can only be given in a personal consultation, and no diagnosis can be made online.
Data Retention and Deletion
Personal data collected through the contact form is retained only for as long as necessary to handle your inquiry. Once your request has been resolved, your data will be deleted unless a longer retention period is required by law.
Every stored submission carries a fixed deletion date. Unresolved messages are deleted after 12 months. Resolved messages are deleted after 24 months, and messages marked as spam after 30 days. An automated process removes expired submissions. Messages reported as not sent by the address owner are deleted after 30 days. The IP address is deleted together with the submission.
Upon request, we will delete your individual form submission earlier. Quote the reference number shown after you sent your message so we can find it quickly.
Your Rights Under the GDPR
As a data subject, you have the following rights under the General Data Protection Regulation:
- Right of access — request a copy of your personal data
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your personal data
- Right to restrict processing — request limitation of how your data is used
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to the processing of your personal data
- Right to withdraw consent — withdraw your consent at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please write to us through the contact form.
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35, 1000 Brussels, Belgium
Website: www.gegevensbeschermingsautoriteit.be
Email: contact@apd-gba.be
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.