Last updated: 11 August 2026
1. Who we are
ThePhoneHub BV (“we”, “us”, “our”) is the data controller for the personal data described in this policy.
ThePhoneHub BV
Da Vincilaan 1, 1930 Zaventem, Belgium
Email: hello@thephonehub.eu
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.
2. Scope of this policy
This policy covers the website www.thephonehub.eu and the sales communication that follows from it.
We sell business to business. The data we hold is therefore mostly professional contact data of people acting for a company, rather than consumer data. That data is still personal data under the GDPR, and this policy applies to it in full.
3. What data we collect
Data you give us:
Contact form. Name, company, email address, phone number, the topic you select and the content of your message.
Quote requests. Company, contact name, email address, phone number, any notes you add, and the products, quantities and prices that make up the request.
Newsletter. Your email address.
Email and phone. Anything you choose to send us when you contact our sales team directly.
Data collected automatically:
With every form submission we record your IP address and browser user agent. We do this to detect and block spam and abuse of the forms, and we keep it separate from the commercial handling of your enquiry.
Server logs. Our hosting provider records standard technical request data, including IP address, requested page, timestamp and user agent.
Analytics cookies — only if you accept them. See section 5.
We do not use the website to collect special categories of data, and we do not carry out profiling that produces legal effects for you.
4. Why we use it and on what basis
To answer your enquiry and prepare a quotation — legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries.
To perform a contract — to process orders, arrange shipping and provide after-sales support. Legal basis: performance of a contract.
To send our newsletter — legal basis: your consent. Every newsletter contains an unsubscribe option, and you can withdraw at any time.
To keep the website secure and free of spam — legal basis: our legitimate interest in protecting our systems.
To measure and improve the website — legal basis: your consent, given through the cookie banner.
To meet legal obligations — in particular Belgian accounting and VAT record-keeping. Legal basis: compliance with a legal obligation.
5. Cookies and analytics
When you first visit the site we show a cookie banner. No analytics or marketing cookies are set, and no data is sent to Google, until you press Accept. If you press Reject, nothing is loaded and any analytics cookies from an earlier visit are deleted.
If you accept, we use:
Google Analytics 4 — to understand how many people visit the site, which pages they use and where they arrive from. It sets cookies named _ga and _ga_<id>, which expire after two years.
Google Tag Manager — a container used to manage the tags above. It does not collect data by itself.
Google Ads — to measure the results of our advertising. It sets a cookie named _gcl_au, which expires after 90 days.
We use Google Consent Mode, so these services are told your choice and stay switched off until you consent.
Changing your mind. Select Cookie Settings at the bottom of any page to review or withdraw your choice. Withdrawing consent does not affect processing that took place while consent was valid.
The site also stores your cookie choice in your browser’s local storage so we do not have to ask again on every page. This is strictly necessary to honour your choice and does not require consent.
6. Who we share data with
We do not sell personal data, and we do not share it for anyone else’s marketing.
We do share it with service providers who process it on our instructions under a data processing agreement:
Hosting and infrastructure — the providers that run this website and its database.
Google Ireland Ltd. — analytics and advertising measurement, only where you have consented.
Carriers — DHL, UPS and comparable carriers receive the delivery details needed to ship an order.
Professional advisers — our accountant and, where necessary, our legal advisers.
We may also disclose data where we are legally required to do so, or to establish, exercise or defend legal claims.
7. International transfers
Some of our providers, in particular Google, may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses together with additional safeguards. You can ask us for a copy of the safeguards that apply.
8. How long we keep data
Contact messages and quote requests — up to three years after our last contact with you, so we can pick up an earlier conversation and handle any dispute.
Customer and invoicing records — seven years, as required by Belgian accounting and VAT law.
Newsletter subscriptions — until you unsubscribe.
Spam-prevention data (IP address, user agent) — twelve months.
Analytics data — in line with the retention setting configured in Google Analytics, at most fourteen months.
When a period ends we delete the data or anonymise it irreversibly.
9. Security
The website is served over HTTPS. Access to the database and to the admin area is restricted to authorised staff and protected by authentication. We apply organisational and technical measures appropriate to the risk, and we review them periodically.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the supervisory authority and, where required, you.
10. Your rights
Under the GDPR you have the right to:
Access — obtain a copy of the personal data we hold about you.
Rectification — have inaccurate or incomplete data corrected.
Erasure — have your data deleted where we no longer have grounds to keep it.
Restriction — ask us to pause processing while a dispute is resolved.
Portability — receive the data you gave us in a structured, machine-readable format.
Objection — object to processing based on our legitimate interests, and object at any time to direct marketing.
Withdrawal of consent — withdraw consent for analytics or the newsletter at any time, without affecting the lawfulness of what came before.
To exercise any of these rights, email hello@thephonehub.eu. We answer within one month. If a request is complex we may extend that by two further months and will tell you why.
11. Complaints
If you believe we have handled your data incorrectly, please contact us first so we can put it right. You also have the right to lodge a complaint with the Belgian supervisory authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données
Drukpersstraat 35, 1000 Brussels, Belgium
contact@apd-gba.be — www.dataprotectionauthority.be
If you are based in another EU country, you may also complain to your own national authority.
12. Children
Our services are directed exclusively at businesses. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as our services or the law change. The current version is always published on this page, with the date of the last update at the top. Where a change materially affects you, we will draw attention to it.
14. Contact us
For any question about this policy or about how we handle your data:
hello@thephonehub.eu
ThePhoneHub BV — Da Vincilaan 1, 1930 Zaventem, Belgium
See also our Terms and Conditions.