Privacy policy
Last updated: 19 September 2026
This policy explains what personal data we collect when you visit mainstream.academy or contact us, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR) and Belgian law.
1. Who is responsible for your data
The data controller is Teem Group, trading as Mainstream Academy, registered in Belgium under company number BE 1028475756, with its registered office in Brussels, Belgium.
For any question about this policy or your data, write to hello@mainstream.academy.
2. What data we collect and why
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You send us a message through the contact form | Name, email address, company name, the content of your message, the language you used | To answer your enquiry and prepare a training proposal | Steps taken at your request before entering into a contract (art. 6.1.b GDPR) | 24 months after our last exchange, or longer if a contract follows |
| You browse the site | Technical data such as IP address, browser type, pages requested, handled by our hosting provider for security and load balancing | To serve the site securely and prevent abuse | Our legitimate interest in keeping the site available and secure (art. 6.1.f GDPR) | Short-lived server logs, generally under 30 days |
| You browse the site | Aggregated, cookieless usage statistics (page views, referrers, country, device type) | To understand how the site is used | Legitimate interest (art. 6.1.f GDPR); no cookie or individual identifier is used | Aggregated only, no personal data kept |
| You accept marketing cookies | Google Ads conversion cookie | To measure whether our advertising leads to enquiries | Your consent (art. 6.1.a GDPR), which you can withdraw at any time | Up to 90 days, set by Google |
We do not sell personal data, and we do not use it for automated decision-making or profiling.
3. Who has access to your data
We work with a small number of service providers who process data on our behalf under data processing agreements:
- Cloudflare, Inc. hosts the site, serves it through its content delivery network, and provides the cookieless analytics described above.
- Web3Forms relays contact form submissions to our mailbox.
- Microsoft 365 (Microsoft Ireland Operations Ltd) hosts our email and documents.
- Google Ireland Ltd provides the advertising measurement described above, only if you consent to marketing cookies.
Some of these providers are established in the United States. Where data leaves the European Economic Area, transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.
4. Cookies
The site works without cookies. Your cookie choice itself is stored in your browser's local storage so that we do not ask again on every visit. Marketing cookies are only set if you click "Accept" in the cookie banner. You can change your choice at any time through the "Cookie settings" link in the footer.
5. Your rights
You may at any time ask us to access, correct, delete or restrict the personal data we hold about you, receive it in a portable format, or object to processing based on our legitimate interest. Where processing relies on your consent, you may withdraw it at any time without affecting what was done before.
To exercise these rights, email hello@mainstream.academy. We reply within one month. You also have the right to lodge a complaint with the Belgian Data Protection Authority: Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.
6. Security
The site is served over HTTPS only. Contact form messages go straight to our form provider over an encrypted connection, and access to enquiries is limited to the two co-founders.
7. Changes
We will update this page when our practices or providers change. The date at the top tells you when it was last revised.