Privacy policy

ReDesign (Brussels, Belgium) is the data controller for personal data processed via firmindex.eu. Contact: info@firmindex.eu.

When you sign up to be notified at launch: your email address, the page that referred you, your locale and a hashed timestamp.

When you create an account: your email address (used for the magic-link sign-in flow) and login session metadata.

When you purchase a dataset: your email and Stripe customer ID. Payment details are processed by Stripe and never reach our servers.

No analytics cookies, no tracking pixels, no fingerprinting, no third-party ad networks. We do not sell or share your personal data with any third party.

Service delivery: authenticate you, send you the dataset you bought, send mandatory transactional emails (receipt, invoice).

Product communications: notify you of the launch, of new datasets, of major changes — only if you opted in. You can opt out at any time with one click in the footer of any email.

Legal obligations: keep invoicing records as required by Belgian tax law.

The datasets sold on firmindex contain only public company information (legal name, registered address, sector, size, registration number) sourced from official EU public registries (KBO/BCE for Belgium, INSEE for France, KvK for the Netherlands, etc.). They never include personal contacts, mobile numbers, personal email addresses or director identities. These datasets are not personal data within the meaning of the GDPR.

Email signups: retained until you ask us to delete your record or unsubscribe. Account data: retained while your account exists, plus 12 months after the last activity. Invoicing records: retained for 7 years (Belgian legal requirement).

Under the GDPR you have the right to access, rectify, delete or restrict the processing of your personal data, and to data portability. To exercise these rights, write to info@firmindex.eu — we respond within 30 days. You may also lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

We use a single technical cookie (NEXT_LOCALE) to remember your language preference across visits. No other cookies are set unless you sign in, in which case a session cookie is added (deleted when you sign out).

Hostinger (hosting, Paris). Stripe (payments). Resend / Hostinger SMTP (transactional email). All three have SCCs in place where applicable and are GDPR-compliant.