Privacy Policy

Data we collect

When you contact us through the website form, we collect: first name, last name, email address, phone number, your message and, where applicable, the artist of interest and the type of request.

For campaign measurement we may also record technical attribution data (UTM parameters, Google Ads click identifier, referring page).

When you contact us on WhatsApp, we process your phone number, your display name and the content of the conversation.

Purposes and legal basis

Your data is used exclusively to respond to your inquiry, prepare quotes and manage the customer relationship (pre-contractual measures and performance of the contract), and — with your consent — to measure the effectiveness of our advertising campaigns. No data is sold or shared with third parties for their own commercial purposes.

AI processing of WhatsApp conversations

Incoming WhatsApp messages are first handled by an AI assistant (Anthropic technology) that qualifies your request — event type, date, location, budget — before a member of our team takes over the conversation. No decision producing legal effects is made automatically; every request is reviewed by a human. Conversations are stored for a maximum of 12 months.

Processors

We rely on the following processors, each bound by a data processing agreement:

• Supabase — database hosting (EU, region eu-west-1, Ireland)
• Vercel — website hosting and delivery
• Resend — transactional email delivery
• Anthropic — AI processing of WhatsApp conversations
• Cloudflare Turnstile — anti-spam protection of our forms
• Upstash — request rate limiting (abuse prevention)
• Sentry — technical error monitoring
• Google Analytics / Google Ads — audience measurement and advertising, only with your consent

Transfers outside the EU

Our data is hosted within the European Union. Some providers (Vercel, Resend, Anthropic, Cloudflare, Upstash, Sentry, Google) may process limited data in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Retention periods

We apply the following retention periods:

• Contact form inquiries (leads): 24 months if no contract is concluded
• WhatsApp conversations: 12 months after the last message
• Active clients: duration of the commercial relationship + 5 years (legal tax obligation)

After these periods, data is deleted or anonymised.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to withdraw your consent at any time. To exercise these rights, write to info@shadowtolive.com — we respond within 30 days. You may also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

Cookies

Our website uses Google Tag Manager, Google Analytics and Google Ads for audience measurement and advertising. These services are only activated after your consent via the cookie banner. You can withdraw your consent at any time or disable cookies in your browser settings.