Privacy, in plain language.
This policy covers the public Shape2Scale website and enquiries sent to Madsea SRL. A customer project has its own agreed data-processing terms.
Who is responsible?
Madsea SRL is the controller for website enquiries. Registered address: Rue Souveraine 96, 1050 Ixelles, Belgium. Company/VAT number: BE 0686.655.674. Contact: company@madsea.be.
What we receive and why
We process the information you choose to give us: your answers about the business, company name, contact name, role, email address and phone number. We use it to understand and answer your request and, where appropriate, prepare a proposed engagement. Do not include customer files, passwords, confidential documents or sensitive personal data in the public assistant.
How the assistant works
Answers are sent to our server as you use the assistant. Cloudflare Workers AI may process the conversation to prepare its summary. When you choose to send the completed conversation, your contact details, answers and summary are delivered to our business mailbox through Resend. We may search public business information using the company name to prepare for our reply; we do not research your private life. AI-generated summaries are not decisions about eligibility and should be checked by a person.
Legal basis and optional information
We handle a request at your initiative to take steps before a potential contract, and rely on legitimate interests for ordinary business correspondence, relevant company research and protecting the website. Where information is not necessary, you can omit it from your free-text answers. Email is an alternative to the assistant. We do not add you to a marketing mailing list through this form.
Service providers and international processing
Hosting and AI processing use Cloudflare; email delivery uses Resend and the providers of our business mailbox. Public company research may send the company name to Google News. Authorised people working for Madsea can access an enquiry. Some providers may process data outside the EEA; applicable contractual safeguards and provider terms govern these transfers. Contact us for information about the safeguards relevant to your request.
How long we keep it
The public assistant keeps its on-page conversation in browser memory, not a persistent browser chat history. On submission, we temporarily store the prepared email to prevent duplicate delivery if a connection fails. Its content is removed when delivery is acknowledged; otherwise it expires after 24 hours and is cleared by an hourly cleanup. Technical delivery records follow the same expiry. Providers may retain logs or backups under their service settings and terms. The delivered email becomes business correspondence, retained to handle the enquiry, any resulting relationship and applicable recordkeeping obligations. Contact us about a specific record or an erasure request.
Your rights
Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Write to company@madsea.be; we may need proportionate information to verify your identity. You may also complain to the Belgian Data Protection Authority. No automated decision with legal or similarly significant effects is made through this website.
Website storage and security
We use no advertising pixels or analytics cookies. The cookie page explains essential preference storage. We use HTTPS, restricted administrative access and service-provider controls; no online service can promise absolute security. Please report a suspected issue privately to company@madsea.be without including unnecessary personal data.