Privacy Policy

Last updated on 5 May 2026

1. Who are we?

Punchlister is an initiative based in Ghent, Belgium. We are the data controller of the personal data you share with us through this website, within the meaning of the General Data Protection Regulation (GDPR).

For questions about this policy or about your data, you can reach us at hello@punchlister.ai.

2. What data do we collect?

We only collect the data you provide to us yourself via the pilot request form on this website:

• Company name
• Name (first and last name)
• Email address
• Job title or role within your organisation
• Any message you optionally include

We do not collect special categories of personal data (such as health data or biometric data), and we do not use tracking cookies or advertising cookies.

3. What do we use this data for?

We use your data solely to:

• contact you regarding your interest in the Punchlister pilot programme;
• answer your questions;
• where relevant, schedule a follow-up meeting.

We do not send newsletters, marketing emails, or unsolicited commercial messages, and we do not sell your data to third parties.

4. What is the legal basis?

We process your data on the basis of your explicit consent (Article 6.1.a GDPR), which you give by completing and submitting the form, and on the basis of our legitimate interest (Article 6.1.f GDPR) in following up on your request.

5. How long do we retain your data?

We retain the data from your request for a maximum of 24 months after the last contact, unless you ask us to delete it sooner, or a commercial relationship is established that requires a longer retention period (e.g. for accounting or contractual reasons).

6. Who do we share your data with?

We only share your data with the service providers listed below, and only to the extent necessary to operate the website and the request process:

We do not transfer your data outside the European Economic Area (EEA), except via the European Commission's standard contractual clauses where our service providers process parts of their service outside the EEA.

7. Cookies

This website does not place advertising or tracking cookies and does not use analytics software that tracks your individual behaviour. Only strictly necessary technical cookies (e.g. for the operation of the hosting platform) may be placed briefly. No consent is required for these under cookie legislation.

Should this change in the future (e.g. if we add analytics), we will update this policy and ask for your prior consent via a cookie banner.

8. What rights do you have?

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access — you can request which data we hold about you.
• Right to rectification — you can have inaccurate data corrected.
• Right to erasure ("right to be forgotten") — you can request that your data be deleted.
• Right to restriction of processing.
• Right to data portability of your data.
• Right to object to the processing.
• Right to withdraw your consent, at any time.

To exercise any of these rights, email us at hello@punchlister.ai. We generally respond within 30 days.

9. Filing a complaint

If you believe that we are not processing your data correctly and we are unable to resolve this together, you have the right to file a complaint with the Belgian Data Protection Authority (APD/GBA):

Drukpersstraat 35, 1000 Brussels
gegevensbeschermingsautoriteit.be
contact@apd-gba.be

10. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. Traffic to this website is encrypted via HTTPS. Access to the requests is internally limited to those who need it to follow up on your request.

11. Changes to this policy

We may amend this privacy policy from time to time, for example to align it with new regulations or changes to our services. The most recent version is always available on this page, with an updated date at the top.