REDFOXX Privacy Statement
Last updated: 13 October 2026
REDFOXX helps technical B2B companies win new customers through outbound prospecting (calling, email, LinkedIn) and the follow-up of inbound leads. In doing so, we process personal data. This statement explains which data we process, why, for how long, and what rights you have.
1. Who is responsible?
REDFOXX is the trade name of Soroush Qanawizian, a business under Belgian law.
- Address: Liersesteenweg 97, 3200 Aarschot, Belgium
- Company number: BE 0651.909.383
- Email: info@redfoxx.be
- Phone: +32 456 36 98 48
We are the data controller for the processing described in this statement, except where we process data on behalf of our clients (see section 4.3).
2. Short summary
- Website visitors: we only place analytics cookies (Google Analytics) with your consent via the cookie banner.
- The chat on our website is an AI assistant, not a person. Your details only go to our team if you explicitly confirm this in the chat.
- Business contacts we approach are found through public and professional sources. You can object at any time and we will not contact you again.
- Calls with prospects and clients may be recorded and transcribed. We tell you at the start of the call.
- We do not sell personal data.
3. Which data, why, and on what legal basis
3.1 Visitors to our website
| Data | Purpose | Legal basis |
|---|---|---|
| Technical data (IP address, browser, time) in server logs at our hosting provider | Keeping the website secure and working | Legitimate interest (art. 6.1.f GDPR) |
| Usage statistics via Google Analytics (pages visited, device, approximate location) | Understanding how the site is used and improving it | Consent via the cookie banner (art. 6.1.a GDPR) |
| Your choice in the cookie banner | Remembering your choice and being able to prove it | Legal obligation / legitimate interest |
More about cookies in section 9.
3.2 The AI chat on our website
On our website you can chat with an AI assistant. So you are not talking to a person. The assistant answers questions based on the information on our website.
| Data | Purpose | Legal basis |
|---|---|---|
| The messages you type | Answering your questions | Legitimate interest: informing visitors quickly (art. 6.1.f GDPR) |
| Name, email address, company, your question or need and the conversation, only if you explicitly ask in the chat to be contacted | Passing your details to our team so we can contact you | Consent (art. 6.1.a GDPR) and pre-contractual measures at your request (art. 6.1.b GDPR) |
| A hashed (not directly readable) form of your IP address, temporarily | Preventing abuse and overload of the chat | Legitimate interest (art. 6.1.f GDPR) |
How it works:
- To generate an answer, your messages are sent to the language model of Anthropic, which processes them as our processor. According to its terms, Anthropic stores inputs and outputs via the API temporarily (for a maximum of 30 days, or longer where needed to prevent abuse or required by law) and does not use them to train its models. The processing may take place outside the European Economic Area, with appropriate safeguards (see section 4.1).
- We do not store chat conversations on our own server. Only if you ask to be contacted do we receive the conversation by email at info@redfoxx.be (via Microsoft 365).
- If you book a call through the button in the chat, we pass the name and email address you gave in the chat to Calendly so the form is already filled in.
- Do not share sensitive data in the chat (health, financial data, passwords).
- Prefer a person? Email info@redfoxx.be or call +32 456 36 98 48.
- The chat contains a link to continue on WhatsApp. If you click it, WhatsApp's (Meta's) privacy policy applies to that conversation.
3.3 Booking a call via Calendly
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address, chosen time, any remarks | Planning and preparing an introductory call | Pre-contractual measures at your request (art. 6.1.b GDPR) |
Calendly is embedded as a calendar on our website. Calendly may place its own cookies (see section 9).
3.4 Business contacts we approach (prospecting)
This is our core activity. We approach companies, for ourselves or on behalf of a client (see 4.3), and look for the right contact person at that company.
Which data: name, job title, employer, business email address, business or mobile phone number, LinkedIn profile, and notes about our contacts (e.g. "call back in March", "not interested").
Where do we get it (art. 14 GDPR):
- public sources: the Crossroads Bank for Enterprises, annual accounts at the National Bank of Belgium (including the directors listed), company websites, press releases, LinkedIn;
- professional databases for business contact details: Apollo.io and Clay;
- contact lists that a client provides to us as part of an assignment.
Purpose: contacting companies with a business offer that is relevant to their role, and planning an introductory call.
Legal basis: legitimate interest (art. 6.1.f GDPR): business prospecting aimed at people in their professional role. We weigh our interest against your rights and freedoms. We limit ourselves to business data, only approach roles for which the offer is relevant, and stop immediately if you ask us to.
Objection: you can object to prospecting at any time, free of charge and without giving a reason (art. 21.2 GDPR). Reply to our message, tell us during the call, or email info@redfoxx.be. We then only keep your name and contact details on a suppression list so that we do not contact you again.
3.5 Recordings and transcripts of calls
| Data | Purpose | Legal basis |
|---|---|---|
| Audio recording and automatic transcript of phone and video calls with prospects and clients | Monitoring and improving the quality of our calls; reporting and follow-up for the client we are calling for; recording agreements correctly | Legitimate interest (art. 6.1.f GDPR) |
We tell you at the start of the call that it is being recorded. If you do not want that, we stop the recording. For recordings and transcripts we use Fathom and Apollo.io.
3.6 Clients, suppliers and partners
| Data | Purpose | Legal basis |
|---|---|---|
| Name, job title, contact details of contact persons; invoicing details | Quotes, contracts, performing the assignment, reporting, invoicing | Performance of the contract (art. 6.1.b GDPR); legal obligation for accounting (art. 6.1.c GDPR) |
3.7 Job applicants
| Data | Purpose | Legal basis |
|---|---|---|
| CV, motivation, contact details, notes of interviews | Assessing your application | Pre-contractual measures (art. 6.1.b GDPR) |
| The same data after the procedure has ended | Contacting you about a new vacancy | Consent (art. 6.1.a GDPR) |
You can apply by email, as stated on the vacancy page.
4. Who do we share data with?
We do not sell personal data. We only share it with service providers who process it on our behalf (processors), and with clients where that is necessary for the assignment.
4.1 Our processors
| Service provider | What |
|---|---|
| Hostinger | Hosting of the website |
| Microsoft | Email and files (Microsoft 365, OneDrive), also for forwarding leads from the chat |
| Anthropic | AI chat on the website |
| Google Analytics (only with consent) | |
| CookieYes | Cookie consent |
| Calendly | Appointment scheduling |
| lemlist | Sending and following up email and call campaigns |
| Apollo.io | Business contact data, email, recordings |
| Clay | Enrichment of business contact data |
| Fathom | Recording and transcription of calls |
| Notion | Shared campaign reports and notes |
| Dexxter | Invoicing and accounting |
These service providers process data on our behalf and according to our instructions, on the basis of their processing terms. If data is processed outside the European Economic Area, this only happens with appropriate safeguards, such as an adequacy decision (e.g. the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.
4.2 Staff and partners
Our staff and regular partners who run campaigns have access to the data they need for that, and are bound by confidentiality.
4.3 When we work on behalf of a client
When we run a campaign or follow up inbound leads for a client, that client is the data controller and we are the processor. We then process the data only according to the client's instructions and the agreement with that client. We share booked appointments, notes and recordings with that client. If you want to exercise your rights for such a campaign, you can contact us or the client. We will pass your request on.
5. How long do we keep data?
| Data | Retention period |
|---|---|
| Server logs of the website | According to the settings of our hosting provider |
| Google Analytics | According to the setting in Google Analytics (maximum 14 months) |
| Chat messages at Anthropic | Maximum 30 days (according to Anthropic's terms) |
| Hashed IP address for chat security | In use for a maximum of 24 hours; the files are cleaned up automatically, usually within a few days |
| Leads from the chat, Calendly and contact requests | 2 years after the last contact |
| Prospects (business contacts) | 2 years after the last contact. On objection: deleted immediately, only name and contact details remain on the suppression list |
| Recordings and transcripts | 6 months after the end of the campaign, unless the client asks for a shorter period |
| Data processed on behalf of a client | According to the agreement with the client; by default returned or deleted at the end of the assignment |
| Clients and suppliers | Duration of the cooperation; invoices and accounting records 7 years (statutory retention period) |
| Job applicants | Up to 6 months after the end of the procedure; with your consent up to 2 years for future vacancies |
6. How do we protect your data?
We take appropriate technical and organisational measures, including: access only for those who need it, strong passwords and two-step verification where possible, encrypted connections (https), and no API keys in public code. The chat rejects requests from other websites and limits the number of messages per visitor.
7. Your rights
You have the right to:
- access your data;
- have incorrect data corrected;
- erasure;
- restriction of processing;
- data portability;
- object, in particular to prospecting (we always respect this, see 3.4);
- withdraw your consent, without affecting earlier processing.
Email info@redfoxx.be. We reply within one month. We may ask you to confirm your identity.
Not satisfied? You can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.
8. Automated decision-making
We do not take decisions about people that are based solely on automated processing and that have legal effects (art. 22 GDPR). We do use AI tools to find business data, summarise conversations and prepare texts. A person decides whom we contact.
9. Cookies
| Cookie | Provider | Purpose | Retention | Consent needed |
|---|---|---|---|---|
| cookieyes-consent | CookieYes | Remembering your cookie choice | 1 year by default | No (necessary) |
| _ga | Google Analytics | Distinguishing visitors for statistics | 2 years by default | Yes |
| _ga_CMZ9MWK0XW | Google Analytics | Tracking the session for statistics | 2 years by default | Yes |
| Calendly cookies | Calendly | Working of the embedded calendar | According to Calendly | See the cookie banner |
The chat itself stores nothing in your browser (no cookies or local storage). You can change your choice at any time via the cookie settings of our cookie banner. The full, current list is in the CookieYes cookie banner, which scans the cookies on the site automatically.
10. Changes
We may amend this statement, for example when we start using new tools. The date at the top shows the latest version. For important changes we will announce this on the website.