Sinplify
The methodFrameworksThe journeySecurityLite or MultiQuestions
FRNLEN
Log inBook a demo
Legal information

Privacy and cookie policy

Last updated: October 12, 2026

This policy explains which personal data we process when you visit the website www.sinplify.com, request a demo or use the Sinplify platform (app.sinplify.com), why we process it and what your rights are.

1. Data controller

The data controller is ALV Networks, a private limited company (SRL/BV), Stationsstraat 42, 9400 Ninove, Belgium, company number 1006.596.417, represented by its directors Valentino Anzalone and Anthony Leonardo. For any question about your data, write to us at info@sinplify.com.

For the data our customers upload to the platform (documents, answers, details of their staff), the customer organisation is the data controller. ALV Networks then acts as a processor, under the data processing agreement concluded with it.

2. Data processed, purposes and legal bases

Demo request

Data
name, business email address, organisation, the framework that concerns you, website language.
Purpose
organising the demo and following up on your request.
Legal basis
pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
Retention
three years after our last contact, unless a contractual relationship follows.

Accounts and use of the platform

Data
surname, first name, email address, language, role, login data.
Purpose
creating and managing accounts, providing the service and support.
Legal basis
performance of the contract (Article 6(1)(b) GDPR).
Retention
as long as the account is active, then deletion at the end of the subscription.

Invoicing and payments

Data
billing details and payment history. Card or bank details are processed directly by Stripe.
Purpose
managing subscriptions, invoicing and payments.
Legal basis
performance of the contract and compliance with our accounting and tax obligations (Article 6(1)(b) and 6(1)(c) GDPR).
Retention
ten years, in line with Belgian accounting and tax obligations.

Security and technical logs

Data
IP address, browser type, date and time of requests, login logs.
Purpose
ensuring the security and proper operation of the website and the platform, detecting and preventing abuse.
Legal basis
our legitimate interest in protecting our services (Article 6(1)(f) GDPR).
Retention
six months for platform logs; a limited period set by the hosting provider for website logs.

Website audience measurement, with your consent

Data
pages viewed, referring website, device and browser type, approximate location, random identifier stored in a cookie.
Purpose
measuring visits to the website and improving it. This data is not used for advertising.
Legal basis
your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Retention
14 months in Google Analytics; cookies are valid for 13 months at most.

We do not take any decision based solely on automated processing within the meaning of Article 22 GDPR. In the platform, suggestions made by the artificial intelligence are always confirmed by a person.

3. Protecting the form against bots

The demo form is protected by ALTCHA, an open source solution hosted with the website. Before sending, your browser performs a short calculation showing that it is not a bot. This check sets no cookies and passes no data to any third party.

4. Recipients

Your data is only accessible to the members of our team who need it, who are bound by confidentiality, and to the following processors, who are bound by contract:

Vercel Inc. (United States)
hosting of the website www.sinplify.com. Demo requests are processed in a data centre located in Paris.
Brevo (France)
sending the email that forwards your demo request to our team.
Google (Ireland and United States)
website audience measurement through Google Analytics, only if you accept it.
Stripe (Ireland and United States)
payment processing.
Cloudflare (United States)
delivery of the platform and protection against attacks.
Google and Font Awesome (United States)
loading fonts and icons in the platform; these services receive the browser's IP address.
Platform hosting provider
data centres located in Europe. The up-to-date list of the platform's sub-processors is set out in the data processing agreement.

We do not sell or rent your data. It may be disclosed to the authorities where required by law.

5. Transfers outside the European Union

Some processors are established in the United States. These transfers are based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework where the provider participates in it, or otherwise on the standard contractual clauses adopted by the European Commission.

6. Security

ALV Networks implements technical and organisational measures to protect your data against loss, unauthorised access and any other breach, including encryption of communications and restricting access to those who need it.

7. Cookies

The website www.sinplify.com sets no cookies without your consent. If you accept audience measurement, Google Analytics sets the _ga and _ga_* cookies, valid for 13 months at most. The website uses no advertising pixel; the font and the protection of the demo form rely on no third-party service.

Your choice is kept in your browser for six months, then asked again. You can change it at any time with the "Manage cookies" link at the bottom of every page. If you withdraw your consent, measurement stops and the Google Analytics cookies are deleted.

The Sinplify platform only uses cookies that are strictly necessary for it to work: login session, protection against request forgery and remembering your language. These cookies do not require your consent. You can block them in your browser settings, but you will no longer be able to log in to the platform.

8. Your rights

Under the GDPR, you have the following rights:

Access
obtain a copy of the data concerning you.
Rectification
have inaccurate or incomplete data corrected.
Erasure
have your data deleted, within the limits set by law.
Restriction
have the use of certain data restricted.
Objection
object to processing based on our legitimate interest.
Portability
receive your data in a structured, commonly used format.
Withdrawal of consent
withdraw your consent to audience measurement at any time with the "Manage cookies" link.

To exercise your rights, write to info@sinplify.com. We reply within one month and may ask you to prove your identity.

9. Complaints

For any complaint about the processing of your data, contact us at info@sinplify.com. You may also contact the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, +32 2 274 48 00, contact@apd-gba.be, www.dataprotectionauthority.be.

10. Changes

We may amend this policy to reflect changes to the website, the platform or the regulations. The date of the last update is shown at the top of this page.

Sinplify

Cybersecurity compliance made simple, designed in Belgium and hosted in Europe.

Solution distributed byCyber Security Management
FRNLEN

Product

  • The method
  • The journey
  • Sinplify Lite
  • Sinplify Multi-framework
  • Book a demo

Frameworks

  • CyFun® and NIS2 Belgium
  • ISO 27001
  • ReCyF and NIS2 France
  • DORA, GDPR, CRA

Sinplify

  • Contact
  • Events
  • LinkedIn
  • Log in
  • Legal notice
  • Terms and conditions
  • Privacy and cookies
  • Official CyFun® clause
The CyFun® Framework and the CCB

The CyFun® Framework is a framework owned by the Centre for Cybersecurity Belgium (CCB), operating under the authority of the Prime Minister of Belgium.

The abbreviation "CyFun®" stands for "CyberFundamentals Framework" and is a registered trademark owned by the CCB.

The CyFun® Framework and CyFun® Conformity Assessment Scheme (CAS) are available on www.cyfun.eu, which is their only authentic source.

The services offered by ALV Networks may contribute to third party assessments, but they do not replace nor fulfill any accredited third-party assessment as described by the CyFun® Framework. Therefore, ALV Networks can never claim that its services fully meet the requirements of the CyFun® Framework and the services cannot be considered for use in conformity assessments resulting in obtaining a presumption of conformity with the NIS2 Directive and its Belgian transposition.

If there is any discrepancy between the products and services offered by ALV Networks and the documents on the website, only the latest version of the documents on the website is deemed authentic.

© 2026 Sinplify. All rights reserved.Sinplify structures and accelerates your approach without replacing an assessment by an accredited body.