Privacy Policy

Last updated: February 2025

At Korveth Wave, we take your privacy seriously. This document explains how we handle your personal information when you interact with our investment mindset education services. We're based in Belgium, which means we follow European data protection standards – but we believe good privacy practices are just common sense.

Information We Collect

We only collect information that helps us provide better educational experiences. When you sign up for webinars or contact us, we ask for basic details like your name and email address. Sometimes we collect more, depending on what you need from us.

  • Contact information: name, email address, phone number when you reach out to us
  • Account data: username, preferences, and course enrollment details
  • Technical information: IP address, browser type, device information through standard web analytics
  • Communication records: emails you send us, feedback forms, webinar participation data
  • Payment information: billing details processed through secure third-party payment providers

We don't collect sensitive financial data about your personal investments. That's your business, not ours. Our focus stays on education delivery.

How We Use Your Information

Everything we collect serves a specific purpose. We're not interested in hoarding data for its own sake – we use it to run our educational programs and improve what we offer.

  • Delivering educational content you've signed up for, including webinar access and course materials
  • Responding to your questions and providing support when you need it
  • Sending updates about programs you're enrolled in or have expressed interest in
  • Improving our teaching methods based on how people engage with our content
  • Meeting legal obligations under Belgian and European law
  • Protecting our systems from security threats and ensuring platform stability

We base our data processing on several legal grounds under GDPR: your consent when you sign up, contractual necessity to deliver services, legitimate interest in improving our offerings, and legal obligations we must fulfill.

Data Sharing and Third Parties

We work with a small number of trusted service providers who help us run our platform. These companies only access your data to perform specific tasks on our behalf.

  • Email service providers who help us send course updates and newsletters
  • Payment processors handling transactions securely on our behalf
  • Web hosting services that keep our platform running
  • Analytics tools that help us understand how people use our site

All these partners sign agreements requiring them to protect your information and use it only for specified purposes. We don't sell your data to marketing companies or third-party advertisers. That's not how we operate.

In rare cases, we might need to disclose information to comply with legal requirements – court orders, regulatory requests, or situations where we need to protect someone's safety. But we'll always challenge unreasonable requests and notify you when legally permitted.

Your Rights Under GDPR

European data protection law gives you significant control over your personal information. Here's what you can do:

Access Your Data

Request a copy of all personal information we hold about you. We'll provide this in a readable format within 30 days.

Correct Inaccuracies

Ask us to fix any incorrect or incomplete information in your account or records.

Delete Your Information

Request deletion of your personal data when there's no legitimate reason for us to continue holding it.

Restrict Processing

Limit how we use your data while we investigate a concern or verify accuracy.

Data Portability

Receive your data in a machine-readable format to transfer to another service provider.

Object to Processing

Oppose our use of your information for direct marketing or other purposes based on legitimate interests.

To exercise any of these rights, contact us using the details at the bottom of this page. We'll respond within one month and won't charge fees unless your request is clearly excessive or repetitive.

Data Security Measures

We protect your information using industry-standard security practices. Our systems use encryption for data transmission, secure servers with regular security audits, and access controls limiting who can view personal information.

Staff members receive training on data protection requirements and only access information necessary for their work. We maintain backup systems to prevent data loss and have incident response procedures ready if something goes wrong.

That said, no online system is completely invulnerable. While we do everything reasonable to protect your data, we can't guarantee absolute security. You should use strong passwords and keep your login credentials confidential.

Data Retention

We keep your information only as long as needed for legitimate purposes. Active account data remains available while you use our services. After you stop using Korveth Wave, we typically retain basic records for seven years to meet Belgian accounting and tax requirements.

Marketing communications data gets deleted if you unsubscribe or after two years of inactivity. Technical logs and analytics data usually get anonymized or deleted after 18 months. Payment transaction records follow financial regulations requiring longer retention periods.

If you request account deletion, we'll remove personal information within 30 days except where we must retain certain data for legal compliance or dispute resolution.

Cookies and Tracking

Our website uses cookies – small text files stored on your device that help us provide a better experience. Some are essential for the site to function properly, while others help us understand how people use our platform.

  • Essential cookies: Required for login functionality, security, and basic site operations
  • Analytics cookies: Help us see which content works well and where people encounter problems
  • Preference cookies: Remember your settings and choices for a more personalized experience

You can control cookie settings through your browser, though disabling certain cookies might affect site functionality. We don't use advertising cookies or share tracking data with third-party advertisers.

International Data Transfers

We primarily store data within the European Economic Area. When we work with service providers outside the EEA, we ensure appropriate safeguards are in place – typically through Standard Contractual Clauses approved by the European Commission.

Any international transfers comply with GDPR requirements, ensuring your information receives adequate protection regardless of where it's processed.

Children's Privacy

Our services target adults interested in developing investment mindsets. We don't knowingly collect information from anyone under 16 years old. If we discover we've inadvertently gathered data from a minor, we'll delete it promptly.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active users via email and update the "last updated" date at the top of this page.

Continuing to use our services after changes take effect means you accept the updated policy. If you disagree with modifications, you can close your account and stop using our platform.

Belgian Privacy Authority

You have the right to file a complaint with Belgium's Data Protection Authority (Gegevensbeschermingsautoriteit) if you believe we've mishandled your personal information. We'd prefer you contact us first so we can try to resolve any concerns directly, but the choice is yours.

The Belgian DPA can be reached at Drukpersstraat 35, 1000 Brussels, or through their website for electronic complaints.

Contact Us About Privacy

Questions about how we handle your data? Need to exercise your privacy rights? Reach out to us:

Email: [email protected]

Phone: +32 51 20 33 12

Mail: Korveth Wave, Universiteitstraat 4, 9000 Gent, Belgium

We aim to respond to privacy requests within five business days, with full resolution within 30 days as required by GDPR.