Version dated 26 August 2026
Law Right Newsletter privacy
This page explains in plain language which data is used for subscription, delivery, WhatsApp, Lexi and activity measurement.
1. Who decides?
Law Right, Avenue Louise 231, 1050 Brussels, is the controller for this newsletter. Full professional details appear in the firm’s legal notice.
2. Email: two clicks, one consent
We use your address, language, date, source page and consent record to request confirmation and then deliver the edition. If the address exactly matches a validated client record, we may use the first and last name already known to personalise the thank-you; no external search runs during sign-up. Consent remains the legal basis for delivery. Resend handles delivery and the unsubscribe link. You can withdraw at any time.
3. WhatsApp: one more proof
If you choose WhatsApp, we handle your mobile number and that preference separately. After confirming email, you must still reply GO from the number supplied. No weekly WhatsApp edition is sent without that possession proof. STOP immediately blocks future messages. Meta/WhatsApp then provides the channel.
4. Social networks
Once their apps are enabled, LinkedIn or Facebook may prefill only the data you authorise. The one-use session is kept briefly and nothing is posted to your profile. If no email is supplied — including through Instagram or X — the form asks for it. Unavailable buttons remain a straightforward route to the form.
5. Hosting, security and abuse prevention
Netlify hosts the pages, functions, workflows and technical evidence. Netlify Blobs keeps the states needed for subscription and delivery. Cloudflare Turnstile may check that a request is not automated. Each provider is used only for the feature that has been enabled.
6. Issue companion
If enabled after evaluation, the companion processes your question through Netlify AI Gateway and answers only from this issue. Do not enter personal or confidential information. The question is not added to your profile and the model call requests no application storage; the AI provider’s terms still govern technical processing.
7. Counter, measurements and preferences
The counter uses a random session code to avoid counting the same page twice in one day. It creates no advertising profile and does not use your IP address as an identifier. Useful actions are measured only in aggregate. Language, theme and reading session may be stored locally so the service works.
8. Email measurement and weekly report
Resend may report delivery, bounce, complaint, open and click events. Law Right keeps only deduplicated totals in its dashboard; any IP address and user agent received with a click are not retained. Open figures are indicative because software may preload or block them. An aggregate report is sent weekly to the editor.
9. How long?
An unconfirmed request and WhatsApp verification expire after seven days. Counter deduplication keys disappear after eight days. Confirmed tokens and redacted transaction logs are removed after thirty-five days; technical delivery evidence after one hundred and eighty days. A social session expires after fifteen minutes. An active subscription remains until withdrawal, with only the evidence strictly needed.
10. Your choices and rights
You may request access, correction, deletion, restriction or portability where the conditions apply, and withdraw each consent separately. Write to cboeraeve@law-right.com. You may also complain to the Belgian Data Protection Authority.