Privacy Policy
Last Updated: January 15, 2025
At Ouralex, we believe your family's financial information deserves careful protection. This privacy policy explains how we handle the data you share with us when you use our family investing education services.
We've written this in plain language because privacy shouldn't require a law degree to understand. If something isn't clear, just reach out.
Who We Are
Ouralex operates from Rue Saint-Martin 5, 7500 Tournai, Belgium. We provide educational resources and guidance for families interested in building their investment knowledge together.
Under Belgian and European data protection laws (specifically the GDPR), we act as the data controller for the personal information you provide when using our services. That means we decide how and why your data gets processed, and we're accountable for keeping it safe.
What Information We Collect
Information You Give Us Directly
- Your name and contact details when you sign up for our learning programs
- Email address for course communications and updates
- Phone number if you request a consultation (completely optional)
- Payment information when you enroll in paid courses
- Questions or feedback you send through our contact forms
- Family investment goals and experience level during course registration
Information Collected Automatically
When you visit our website, some technical data gets collected automatically. This includes your IP address, browser type, pages you visit, and how long you spend on each page. We use this to understand which content resonates with families and where we might need to improve the learning experience.
We also use cookies — small text files stored on your device. Some are essential for the site to function (like keeping you logged in), while others help us see which educational topics attract the most interest.
How We Use Your Information
We Never Sell Your Data
Let's be absolutely clear about this: we don't sell, rent, or trade your personal information to third parties. Your family's data isn't a revenue stream for us. Our business model is straightforward — we provide quality investment education, and families pay for that education directly.
Legal Basis for Processing
Under GDPR, we need a legal reason to process your data. Here's what applies to our services:
- Contract Performance: When you enroll in a course, we need your information to deliver what you've paid for
- Legitimate Interest: We have a genuine business need to improve our educational content and communicate with prospective students
- Legal Obligation: Belgian law requires us to maintain certain financial and educational records
- Your Consent: For marketing emails and optional data collection, we ask for your explicit permission first
Who We Share Information With
We keep your data circle small. Here's the complete list of who might see your information:
Service Providers
We work with a handful of trusted companies that help run our educational platform. This includes email delivery services, payment processors, and our website hosting provider. These companies can only use your data for the specific services they provide to us, and they're contractually bound to protect it.
Legal Requirements
If Belgian authorities or courts require us to disclose information, we'll comply with valid legal requests. We'd also share data if necessary to prevent fraud or protect someone's safety.
Business Transfers
If Ouralex were ever acquired or merged with another company, your information would transfer to the new owners. We'd notify you before this happens and explain any changes to how your data gets handled.
Your Rights Under Belgian and EU Law
European data protection law gives you substantial control over your personal information. Here's what you can do:
- Access Your Data: Request a copy of everything we have about you, delivered in a readable format within 30 days
- Correct Mistakes: If we have outdated or wrong information, you can ask us to fix it
- Delete Your Data: Request complete removal of your information (with some legal exceptions, like financial records we must keep)
- Restrict Processing: Tell us to stop using your data for certain purposes while keeping it stored
- Data Portability: Get your data in a format you can transfer to another service
- Object to Processing: Say no to how we're using your information, particularly for marketing purposes
- Withdraw Consent: Change your mind about any permissions you've given us
To exercise any of these rights, send us an email at [email protected] with your request. We'll respond within one month. There's no charge for most requests, though we might ask you to verify your identity first.
Right to Complain
If you're not happy with how we've handled your data, you can file a complaint with Belgium's Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit). You can reach them at [email protected] or visit their office at Rue de la Presse 35, 1000 Brussels.
How Long We Keep Your Data
We don't keep information longer than necessary. Here's our retention approach:
International Data Transfers
Your information stays primarily within the European Economic Area. However, some of our service providers (like email platforms) might process data on servers located in other countries.
When data leaves the EEA, we make sure it's protected by approved transfer mechanisms — either the service provider is in a country the EU considers adequate for data protection, or we use standard contractual clauses approved by European authorities.
We never transfer data to countries or companies that don't meet European privacy standards.
How We Protect Your Information
Security isn't just a checkbox for us. Here's what we do to keep your data safe:
- All data transmission uses SSL/TLS encryption (that's the lock icon in your browser)
- Our databases are encrypted and sit behind multiple security layers
- Staff access to personal data is limited to those who genuinely need it
- We use secure authentication and monitor for suspicious activity
- Regular security audits help us spot and fix potential vulnerabilities
- Payment information goes directly to PCI-compliant processors — we never see your full card numbers
No system is completely immune to attacks, but we take reasonable precautions and stay current with security best practices. If we ever experience a data breach affecting your information, we'll notify you and the Belgian Data Protection Authority within 72 hours.
Children's Privacy
While we focus on family investing education, our services are designed for adults. We don't knowingly collect information from anyone under 16 without parental consent.
If you're a parent who discovers we've accidentally collected data about your child, please contact us immediately and we'll delete it. Under Belgian law, children aged 13-15 can consent to certain online services with parental permission, but we prefer parents handle all account setup and management.
Cookies and Tracking
Our website uses cookies to function properly and understand how families use our educational content. You'll see a banner when you first visit asking for your cookie preferences.
Essential Cookies
These keep the site working — things like remembering you're logged in or maintaining your course progress. We don't ask permission for these because the site can't function without them.
Analytics Cookies
These help us see which topics interest families most and where people might be getting stuck in our courses. We use this to improve content. You can decline these without affecting site functionality.
Marketing Cookies
We occasionally use these to show relevant content to people who've visited our site before. Again, completely optional.
You can manage cookie settings through your browser or by clicking the cookie preferences link in our website footer. Most browsers let you block or delete cookies entirely, though this might affect how well the site works.
Changes to This Policy
We update this privacy policy occasionally as our services develop or laws change. The date at the top shows when we last revised it.
If we make significant changes — particularly anything that affects how we use your existing data — we'll email active students and post a notice on our website at least 30 days before the changes take effect. This gives you time to review the new terms and decide whether to continue using our services.
Minor updates (like clarifying existing practices or fixing typos) happen without special notification. We recommend checking this page every few months if you're actively using our courses.
Questions About Your Privacy?
Rue Saint-Martin 5
7500 Tournai
Belgium