Legal
Privacy Policy
How Project Lipsius handles personal data when you visit Project Lipsius, request access, or subscribe for updates.
Effective date: 16 July 2026
Legal entity formation in progress. Project Lipsius is currently in the process of establishing a formal legal entity. As a result, certain legal details, including the registered address, enterprise number, and competent court information, are not yet available and will be added once the incorporation process has been completed.
In the meantime, Project Lipsius continues to operate in accordance with applicable Belgian and European laws, including relevant data protection requirements. Questions concerning this policy, privacy, or the current legal status of Project Lipsius can be sent to contact@lipsiusproject.eu.
1. Who is responsible for your data?
The data controller is Project Lipsius, which is currently operating as an initiative while its formal legal entity is being established.
Privacy questions and data-rights requests can be sent to contact@lipsiusproject.eu.
2. Personal data we collect
Waitlist and contact information
When you subscribe or request access, we may collect your full name, work email address, phone number, organisation, selected role, submission source, and any message you choose to provide.
Consent-based product analytics
We use PostHog Cloud EU only after you actively allow analytics. The implementation is configured to collect selected events such as page paths without query parameters, the role selected in the waitlist form, submission success or failure, and interactions with ecosystem cities on the map. Form contents such as your name, email address, phone number, organisation, and message are not intentionally sent to PostHog.
Autocapture, session replay, automatic exception capture, and page-leave tracking are disabled. The analytics preference is stored in your browser so that the website can remember your choice. You can change that choice through the persistent “Analytics preferences” control shown on the website.
Aggregated web analytics and technical data
The website also uses Vercel Web Analytics for aggregated usage statistics. Hosting and security providers may process limited technical information, such as request metadata, browser information, timestamps, and IP addresses, where needed to deliver and protect the service.
3. Why we use personal data
- To manage the beta waitlist, send requested product updates, and respond to access or partnership enquiries.
- To understand how the website and ecosystem map are used and improve the product, where you have allowed PostHog analytics.
- To operate, secure, troubleshoot, and prevent misuse of the website and its infrastructure.
- To comply with applicable legal, accounting, and regulatory requirements.
4. Legal bases
- Consent: newsletter communications and PostHog analytics are based on your consent. Consent can be withdrawn at any time without affecting earlier lawful processing.
- Legitimate interests: responding to business enquiries, operating the website, measuring aggregated site performance, maintaining security, and preventing abuse.
- Legal obligations: processing necessary to meet applicable legal or regulatory duties.
5. Service providers
We use selected providers to operate the website and process data on our behalf. They may include:
- Supabase for waitlist database storage and related backend services.
- Resend for confirmation and product-update email delivery.
- PostHog Cloud EU for consent-based product analytics.
- Vercel for website hosting, delivery, operational logs, and aggregated web analytics.
Where data is processed outside the European Economic Area, we rely on an applicable transfer mechanism and review provider regions and contractual safeguards as part of our ongoing compliance work.
6. Retention
- Waitlist and enquiry data is intended to be retained until the request is resolved and for no longer than 24 months after the last meaningful interaction, unless you withdraw consent or a longer period is legally required.
- PostHog analytics is intended to be retained for no longer than 12 months, subject to the production project settings.
- Technical and security logs are retained according to the settings of the relevant provider.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data. You may also object to processing based on legitimate interests and withdraw consent at any time.
Send a request to contact@lipsiusproject.eu. We may need to verify your identity before completing a request.
You may also lodge a complaint with the Belgian Data Protection Authority or another competent supervisory authority.
8. Security and automated decisions
We use reasonable technical and organisational safeguards to protect personal data. No website or storage system can be guaranteed to be completely secure. We do not currently use this data to make decisions based solely on automated processing that produce legal or similarly significant effects.
9. Changes to this policy
We may update this policy as the product, providers, or legal requirements change. The effective date will be updated when material changes are published.