Privacy
Last updated 29 September 2026
What happens to the details you share with me through this site. The short version: I use them to answer your enquiry, I never sell them, and you can ask me to delete them at any time.
Who is responsible
This site is run by To confirm: the business name and legal form, To confirm: the registered address, enterprise number To confirm: the enterprise number, the business through which I, John Heymans, work as a speaker. In this policy, “I” and “me” mean that business and me. I decide what happens to your personal data here.
For anything about your data, write to hello@johnheymans.com.
What I collect and why
When you send a booking enquiry, I receive the answers you give: your name, your company or organisation, your email, your phone number if you give it, and what you tell me about your event. I use them to reply with my availability and a fee, and to prepare the booking if you go ahead. The legal basis is taking steps at your request before a contract (Article 6(1)(b) of the GDPR).
If we work together, I keep what I need to deliver the keynote and to invoice it. The legal basis is our contract and, for invoices, my obligations under Belgian accounting and tax law. If you email me directly, the same applies to what you send.
When you visit, To confirm: the hosting provider processes your IP address and technical details of your browser to deliver the pages and keep the site secure. That is my legitimate interest in running a safe website (Article 6(1)(f)).
To stop abuse of the enquiry form, the site keeps a scrambled (hashed) version of your IP address in memory for one hour and accepts five enquiries per hour from the same address. It is not written anywhere and is forgotten after the hour.
The enquiry form also runs a short spam check in your browser while you type (ALTCHA, an open-source proof-of-work check that runs on this site). Your device solves a small puzzle and the answer is sent along with your enquiry. It sets no cookie, uses no outside service and keeps nothing about you. So that one answer can't be sent twice, the site holds the used puzzle in memory until it expires ten minutes later.
I don't measure visits at the moment. If I start, it will only happen after you agree in the cookie banner, and the cookie policy will name the tool first.
Who else sees it
- Resend, Inc., which delivers the enquiry form to my inbox as an email.
- To confirm: the email provider, where my email is kept.
- To confirm: the hosting provider, which hosts the site.
- My accountant, if a booking leads to an invoice.
Nobody else. I never sell or rent your details, and I don't use them for advertising.
Outside the European Union
Some of these providers are based in the United States. When your data leaves the European Economic Area, the transfer is covered by an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or by the Commission's standard contractual clauses.
How long I keep it
- Enquiries that don't lead to a booking: up to two years after our last contact, in case you come back to me.
- Bookings: as long as Belgian accounting and tax law requires me to keep the records.
- Security logs: only for the short period To confirm: the hosting provider keeps them.
- Your cookie choice: six months, then the site asks again.
Your rights
You can ask to see the personal data I hold about you, to correct it, to delete it, to limit how I use it, to object to it, or to receive it in a format you can take elsewhere. Where you gave consent, you can withdraw it at any time. Write to hello@johnheymans.com and I'll reply within one month.
If you think I've handled your data wrongly, you can complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be. I'd appreciate the chance to put it right first.
Links, photos and video
Instagram and LinkedIn are plain links, not embedded widgets, so nothing from them loads until you click. Once you're there, their own privacy policies apply.
The videos, photos and fonts on this site are served from the site itself, not by other companies.
If you appear in a photo or video here and would rather not, write to me and I'll take it down.
Changes
If I change this policy, the new version appears here with a new date.