Privacy policy

Last updated: 11 October 2026.

This page is not yet final. The identity and contact details of the data controller are filled in. The company number (BCE/KBO) is still missing, as it is issued upon registration. The descriptions below are taken from the site’s program — they describe what it actually does.

1. In summary

The site sets no cookie for audience measurement or advertising.
Favourites and settings do not leave the device : they live in the browser's local storage, not on a server.
The site records no IP address and no device identifier.
Only one thing can leave the device : the sign-up address, and only if the person has entered it themselves. This form is not yet active (see § 5).

2. Who is the data controller

Data controller : Billal Hamecha (natural person (sole trader))
Address : Bief des Péniches 6, 7090 Ronquières, Belgique
Contact for any question relating to data : info@kazendra.com

A data protection officer (DPO) has not been appointed : the processing described here falls under none of the cases in which this is mandatory. Requests are made to the contact above.

3. What is stored on your device

These items of information are written to the browser's local storage (localStorage) or session storage (sessionStorage). They are not transmitted to anyone, including to the site's publisher : without a server, there is nowhere for them to be received.

What is stored	Why	For how long
Favourites and settings (theme, display, language, country)	So as not to ask again at every opening for what has already been chosen	Until the data on this device is cleared, or the browser data is cleared
Activity log : country viewed, language, source of the visit, device type, timestamp	Allow the person to consult their own activity in the administration panel	2,000 records at most, after which the oldest are replaced

No data that makes it possible to recognise someone is recorded in this log : no IP address, no device identifier, no cookie, no browser fingerprint. A country, a language, a source, a device type and a time.

4. Legal basis

Favourites and settings : this data is not processed by the publisher, it remains with the person. No processing within the meaning of the GDPR takes place on the publisher's side.
Local activity log : legitimate interest (Article 6.1.f of the GDPR) — measuring one's own audience without a tracker and without personal data.
Sign-up : consent (Article 6.1.a), given by the voluntary entry of the address.

5. Signing up — what will happen, and what happens today

Today (8 October 2026), the sign-up form sends nothing. The address of the receiving service is not set in the program : the form therefore refuses to send instead of giving the impression of a recorded sign-up. No data is collected to date.

When it is active, and only then :

only the address entered will be transmitted, for the purpose of being notified of new promotions ;
it will be received by a spreadsheet hosted by the site's publisher (Google Sheets service, via a Google Apps Script) — there is no Kazendra server ;
it will be neither resold, nor transferred, nor used for any other purpose ;
it will be kept until a request to unsubscribe, which is made by a simple reply to the message received or via the contact in § 2.

This page will be updated before the form is activated, in particular to name precisely the recipient and the retention period.

6. Recipients and transfers outside the European Union

Site hosting : GitHub, Inc. (GitHub Pages), United States. Visitors to the site therefore pass through a host established outside the Union. GitHub declares that it complies with the EU–US data protection framework and with the standard contractual clauses.
No other third party is involved : no advertising network, no audience measurement tool, no remote font, no embedded social network.

TO BE VERIFIED — replace the sentence above with the reference to the hosting contract actually in force at the time of publication.

7. Your rights

You have the rights of access, rectification, erasure, of restriction, objection and portability in respect of the data concerning you.

An important and unusual point : most of the data described in § 3 is not held by the publisher — it is on your device. To consult or erase it, the most direct action is therefore your own : the site's settings allow you to export and delete your data package, and clearing the browser data erases the rest.

For the data received by the publisher (the sign-up address, when the form is active), write to the contact in § 2. A reply is provided within one month.

If the reply does not satisfy you, you may lodge a complaint with the Belgian Data Protection Authority (GBA/APD), Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be.

8. Security

The site is served over HTTPS. No password is asked for or stored : there is no account to create and no sign-in. Signing up for the deals requires only an e-mail address.

An information system can never be guaranteed to be free of flaws. Since the site collects neither identifier, nor IP address, nor payment data, the scope of any breach remains limited to the data described in § 3.

9. Changes

Any change to this policy is dated at the top of the page. In the event of a significant change concerning the data transmitted, the information is brought to the knowledge of the persons concerned through the channel by which they signed up.