Worker Housing by Shefa ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information you provide when using our website or services.

1. Who We Are

Worker Housing by Shefa is a workforce accommodation provider operating across Belgium. Our contact details:

Email: shefarealestatebe@gmail.com
Phone: +32 485 98 13 08

2. What Data We Collect

We may collect the following personal data when you contact us or use our services:

Name and surname
Company name
Email address and phone number
Project details (location, crew size, dates)
With your consent: visits and returning visits, page paths, active time, scroll depth, page-load timing, link clicks, form starts, submission errors, quote-form submissions and WhatsApp handoffs. We also collect the connection's reported IP address, browser category and major version, operating-system category, device type, screen dimensions, browser and website languages, timezone, referring domain and campaign tags (utm_source, utm_medium, utm_campaign, utm_term and utm_content).
A random first-party identifier links consented visits from the same browser. This is not a verified personal identity. We do not collect typed form contents through analytics, record keystrokes, replay sessions, fingerprint devices, inspect installed applications or read files on your computer. IP and browser data may be approximate, shared or supplied by a proxy.

3. How We Use Your Data

We use your personal data to:

Respond to your enquiries and provide quotes
Manage accommodation bookings and contracts
Send relevant service information (with your consent)
Comply with legal obligations
Improve our website and services

4. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

Contract performance — when processing is necessary to fulfil a housing contract
Legitimate interests — for business communications and service improvement
Legal obligation — where required by Belgian or EU law
Consent — for optional website analytics and marketing communications. You can reject analytics without losing access to our services.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law. Contract-related data is typically retained for 7 years in accordance with Belgian accounting regulations. Enquiry data is retained for up to 2 years.

Detailed analytics, including reported IP addresses and page histories, are retained for up to 30 days and automatically removed during analytics processing. Aggregate daily counts are retained for 90 days. Consent preferences and the random browser identifier expire after 90 days. Withdrawing consent deletes the detailed profile linked to the current browser and stops collection; previously aggregated counts cannot be linked back to that profile.

6. Sharing Your Data

We do not sell your personal data. We may share it with:

Service providers who assist in operating our business (e.g. email services, booking systems)
Legal authorities when required by law

All third parties are required to handle your data securely and in compliance with GDPR.

7. Your Rights

Under GDPR, you have the right to:

Access — request a copy of your personal data
Rectification — request correction of inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Restriction — request that we limit processing of your data
Portability — receive your data in a portable format
Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at shefarealestatebe@gmail.com. We will respond within 30 days.

8. Cookies

Optional analytics starts only after you select Accept analytics. The first-party, secure, HTTP-only cookie __Host-shefa-analytics remembers your acceptance or rejection for up to 90 days. After acceptance, session storage shefa-visit groups page activity into visits, with a new visit after 30 minutes of inactivity. Neither is used for cross-site advertising.

Use the Analytics settings button on any public page to change your preference, reject tracking or withdraw consent and delete your detailed profile. Do Not Track and Global Privacy Control signals prevent analytics collection. Hiding the automatic banner does not grant consent; the settings button remains available. If your consent cookie has been deleted, we may not be able to associate a request with an old profile, which expires under the retention schedule.

The private admin dashboard uses a necessary, secure login cookie with an eight-hour maximum lifetime and a 30-minute inactivity timeout. Hosting providers may separately process technical access logs to operate and secure the website. Analytics does not reveal individual organic search queries: Google Search Console reports search performance separately in aggregate. Campaign keyword tags are labels supplied in campaign links.

The WhatsApp form prepares a message containing the details you enter and opens WhatsApp for you to review and send. Analytics records the handoff, not the message contents or confirmation that a message was sent. WhatsApp processes information under its own privacy policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date of last update.

11. Complaints

If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de Protection des Données / Gegevensbeschermingsautoriteit) at www.dataprotectionauthority.be.