Legal & privacy
This Privacy Policy explains how Lobbipad BV collects, uses, stores and protects personal data when you visit our website, contact us, request a demo, register for a free trial or use our services.
Version 7.0 · Effective date: October 18, 2026
Lobbipad BV ("Lobbipad", "we", "us" or "our") respects your privacy. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Belgian data protection legislation.
When you submit a form, request a demo or register for a free trial, we may collect:
When a trial request is approved, we process the information needed to create and configure your Lobbipad account, including company details, contact details, company branding and account identifiers.
When you schedule a demo, we process your booking details, meeting date and time and related communication. Bookings are made through Calendly, whose own privacy terms also apply. Within the embedded booking calendar, Calendly may use its own cookies and similar technologies and may show its own cookie banner; Lobbipad does not control these and they are separate from your Lobbipad cookie choices.
If you use the support chat on our website, we process the messages you type in order to answer them.
We process technical information needed for the operation, security and reliability of the website, such as browser information, technical logs and security events. Analytics and advertising information is collected only with the relevant consent.
With your advertising consent, we may store Google Ads click identifiers (GCLID, GBRAID or WBRAID), the time of the ad click and related campaign information.
We record your cookie choices, the time of your choice, the version of the consent wording shown to you, and later changes or withdrawals.
| Purpose | Legal basis |
|---|---|
| Handling trial and demo requests | Steps taken at your request before entering into a contract, where applicable (Art. 6(1)(b) GDPR) |
| Answering general business enquiries and support chat messages | Legitimate interests (Art. 6(1)(f)) |
| Creating and managing customer accounts | Performance of a contract, where applicable (Art. 6(1)(b)), or legitimate interests where the contract is with a business (Art. 6(1)(f)) |
| Website analytics | Consent (Art. 6(1)(a)) |
| Advertising conversion measurement | Consent (Art. 6(1)(a)) |
| Keeping records of consent | Legal obligation to demonstrate consent (Art. 6(1)(c)) |
| Website and account security | Legitimate interests (Art. 6(1)(f)) |
| Accounting and statutory administration | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we consider whether the processing is necessary and its impact on you.
Refusing optional cookies does not prevent you from submitting a contact, demo or free trial request.
Our website uses strictly necessary technologies and, with your permission, optional analytics and advertising technologies. On your first visit you can choose:
These support essential website functions, security and remembering your privacy choice. They do not require consent where they qualify as strictly necessary under applicable law.
With your consent, we use Google Analytics 4 to understand how visitors use our website, such as which pages are visited. We do not intentionally send names, email addresses or form contents to Google Analytics.
With your consent, we use Google Ads technologies to measure whether ad clicks lead to free trial, demo or contact requests, and we may store ad click identifiers to link a later conversion to an earlier ad click (see section 5).
With the same advertising consent, we also use the ChatGPT Ads Measurement Pixel from OpenAI (see section 5). It does not depend on Google Tag Manager: it loads as soon as Advertising is accepted, even if Analytics is rejected.
Google Tag Manager currently loads only when both Analytics and Advertising are accepted. If you accept only one category, no Google measurement tools are loaded. We will update this policy if this changes materially.
A choice that accepts Analytics or Advertising is valid for six months. After six months we ask you again, and optional measurement stays switched off until you renew your consent. A choice that rejects both categories is kept until you change it; we never switch optional measurement on without your new consent. When the consent wording changes, earlier acceptances are no longer used and we ask you again, while earlier rejections stay in place.
We do not use website remarketing audiences or personalised advertising. Our Google consent settings always keep advertising personalisation switched off.
You can review, change or withdraw your consent at any time through the Cookie settings link in the website footer. Withdrawing is free and does not affect your ability to use our forms.
We use Google Ads to promote our services and evaluate our campaigns. Where advertising consent has been given, we may measure the following events:
| Event | When it is measured |
|---|---|
| Free Trial | When a free trial request form is successfully submitted. This is the form submission, not the creation of a trial account. |
| Demo | When a demo request form is successfully submitted. |
| Contact | When a contact form is successfully submitted. |
| Qualified Lead | When a submitted request is later qualified, for example when a trial account is successfully created, or another approved qualification step is completed. |
| Converted Lead | When a prospect becomes a paying Lobbipad customer. |
Free Trial, Demo and Contact are measured in your browser by Google Ads tags. Qualified Lead and Converted Lead are reported by us to Google afterwards. Such a report may contain:
These reports do not include your name, email address, telephone number or company name. Each report passes eligibility checks first, including valid advertising consent, the age of the ad click and duplicate prevention. Not every lead is reported to Google.
We do not use Enhanced Conversions email matching. We do not send the email address you submit to Google, in plain or hashed form, for advertising measurement. If we introduce this in the future, we will update this policy and ask for the required consent before activating it.
More about Google's business data practices: https://business.safety.google/privacy/
We may also advertise in ChatGPT. To measure whether those ads lead to requests, we use OpenAI's ChatGPT Ads Measurement Pixel. It loads only after you accept Advertising and does not load at all if you reject it. Once loaded, it works as follows:
OpenAI offers automatic advanced matching, which detects names and email addresses on web pages and sends them in hashed form. We have switched this off on our website: we do not send your name, email address, telephone number or form contents to OpenAI, in plain or hashed form.
The pixel stores the following in your browser:
| Stored item | Lifetime |
|---|---|
| __obref cookie: random browser reference | 365 days from creation |
| __oppref cookie: ChatGPT ad click reference (only after arriving through a ChatGPT ad) | 30 days |
| __oaiq_consent cookie and oaiq_consent browser storage: the pixel's copy of your choice | Cookie: 30 days. Browser storage: until it is cleared |
| oaiq_cs session storage: technical status for the current visit | Until the browser tab is closed |
OpenAI's content delivery network may also set short-lived security cookies (__cf_bm, _cfuvid) on OpenAI's own domain when the pixel loads. When you withdraw Advertising consent, the pixel is stopped immediately and its cookies are removed from our website.
OpenAI uses this information to attribute conversions to ChatGPT ads and to report campaign results to us. We do not use it for remarketing or personalised advertising. OpenAI's privacy policy: https://openai.com/policies/privacy-policy/
We keep records of consent choices to respect them and to be able to show how consent was obtained. A record may contain:
When you submit a form, the matching consent record may be linked to your request. The anonymous consent reference identifies a recorded browser choice; it does not by itself identify you. Earlier records are not overwritten when you make a new choice.
When you withdraw advertising consent, we stop further advertising processing that depends on it, remove ad click identifiers from your browser storage and, where technically possible, stop pending offline conversion reports for your request from being sent. You can also ask us to withdraw advertising information linked to an existing request by emailing privacy@lobbipad.com.
Withdrawal does not affect processing that took place lawfully before it. Where information was already sent to Google, we assess what further action is required under data protection law.
We share personal data only where necessary to provide our services, run our business, meet legal obligations or carry out processing you have consented to. Depending on the service, recipients include:
We do not sell personal data. We require service providers acting as processors to handle personal data under appropriate contractual and security arrangements.
Some service providers may process personal data outside the European Economic Area, including in the United States. Where this applies, transfers are subject to appropriate safeguards, which may include an adequacy decision (including the EU–US Data Privacy Framework for certified organisations), the European Commission's Standard Contractual Clauses and additional safeguards where required. The mechanism depends on the recipient, the service and the contract.
Contact privacy@lobbipad.com for more information about these transfers and safeguards.
We keep personal data only as long as reasonably necessary for the purposes in this policy, including legal, contractual and administrative obligations.
| Data | Retention |
|---|---|
| Cookie choice (in your browser) | Acceptances: six months, then we ask again. Rejections: until you change them. |
| Anonymous consent records (on our servers) | Deleted automatically after 13 months, unless linked to a request you submitted; linked records are kept as long as that request. |
| Ad click identifiers in your browser | Removed after 90 days from the click, or earlier when advertising consent is withdrawn or no longer valid. |
| Ad click identifiers linked to a request | Target: 90 days from the click. Automatic deletion on our servers is not yet active (see below). |
| Unsuccessful sales enquiries | Normally up to 24 months after the last meaningful contact. |
| Trial and customer records | During the relationship and for an appropriate period afterwards. |
| Offline conversion report records | As necessary for attribution, reconciliation, auditing and possible claims. |
| Accounting and statutory records | For the period required by Belgian law. |
| Google Analytics data | According to the retention settings configured in Google Analytics. |
| ChatGPT Ads measurement data at OpenAI | According to OpenAI's terms and policies; we do not set this period. |
These periods may be extended where needed for legal claims, statutory obligations or ongoing contractual matters.
A scheduled process on our servers is designed to remove ad click identifiers 90 days after the click. It currently runs in reporting-only mode and does not yet delete stored identifiers automatically. Until it is switched on, we remove such identifiers on a valid request or when they are no longer needed.
Subject to applicable law, you have the right to:
To exercise your rights, email privacy@lobbipad.com. We normally reply within one month, subject to legal exceptions and extensions. You can also contact the Belgian Data Protection Authority: https://www.dataprotectionauthority.be/
Lobbipad is a business service and is not directed at children. We do not knowingly collect personal data from children for marketing or trial registration. If we learn that a child's data was collected inappropriately, we will take appropriate steps.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and misuse, including access controls, encrypted connections, restricted administrative permissions, secure authentication and monitoring of relevant system activity. Access is limited to authorised people who need it. No internet service can guarantee absolute security.
We may update this policy when our services, legal obligations or processing change. The latest version is published on this page with its effective date. Where a change requires new consent, we ask for it before the processing starts.
Questions about this policy: privacy@lobbipad.com