Privacy
Updated: 15 October 2026.
This site sets no cookies, uses no trackers or audience measurement, and loads nothing from other sites.
Controller
Hung (Henri) Lu Vinh (HLV Advisory), avenue Louise 231, 1050 Brussels, henri@hlvadvisory.com, +32 498 72 63 96.
What I receive
What you send me yourself, through the form, by e-mail or by phone: your name, your organisation, your contact details, the details of your meal (date, number of people, delivery postcode, budget, diets and allergies) and how you found me. The quote form sends your request to Netlify, which hosts this site: Netlify passes it on to me by e-mail and keeps a copy in the site's dashboard.
For diets and allergies, give a number of people per diet, without names: an allergy linked to a named person is health data.
Why, and on what basis
Answering your request and preparing a quote: steps you ask me to take before a contract, or my legitimate interest in replying to an organisation that contacts me.
Organising your meal if you order, and keeping my accounts: performance of the contract and my legal obligations.
Knowing where requests come from (your answer to “How did you find me?”): my legitimate interest.
Running the site securely: my legitimate interest, through the host's technical logs.
Giving me this information is not mandatory, but without it I cannot quote. No automated decision is made.
Who has access
I do. Google (Google Workspace) and Microsoft (Microsoft 365), which host my mailboxes. Instantly, the tool that sends some of my prospecting e-mails. Plaud, which records and transcribes some of my calls, for my notes. Netlify, which hosts this site, receives the requests sent through the quote form and keeps technical logs, including visitors' IP addresses. Akismet, Netlify's spam filter, reads the form requests. Anthropic, whose assistant helps me write my messages and prepare my replies. The kitchen that prepares your meal (D'Asie Express, or the one named in the quote), for the date, number of people, diets and allergies; if the quote states that D'Asie Express sells you the meal, it also receives your billing details, which it processes for its own accounts. My accountant, if you order. Nothing is sold or given away.
Outside the European Union
Google, Microsoft, Netlify, Anthropic, Automattic (which runs Akismet), Instantly and Plaud are US companies; Plaud may also process data in other countries. Transfers rely on the European Commission's adequacy decision for certified companies (EU-US Data Privacy Framework), or on the standard contractual clauses, which are the basis for Plaud's.
How long
A request with no follow-up: 12 months after our last exchange, including the copy kept at Netlify. A prospecting contact: 24 months after my last unanswered message. A call recording and its transcript: 12 months at most after the call. A client: the length of our relationship, then the periods the law sets for accounting. Technical logs: the short period set by the host. If you ask me to stop contacting you, your address stays on my opt-out list so that your choice is respected.
If I contacted you (e-mail, call or LinkedIn)
I offer my team meals to organisations in and around Brussels, by e-mail, by phone and on LinkedIn. For this, I keep your name, your job title, your work e-mail address and phone number, the address of your LinkedIn profile, the name of your organisation and my notes on our exchanges. I find them on your organisation's website, on LinkedIn, in the Lusha business contact database, or in the out-of-office reply of a colleague who named you. If we speak on the phone, I tell you at the start of the call that it is being recorded and transcribed, for my notes; if you would rather I did not record, say so and I stop. Basis: my legitimate interest in making my offer known. Retention: 24 months after my last unanswered message.
You can object at any time, without giving a reason: reply “stop” or write to me. Your address then goes on my opt-out list, and I will not write to you again, from any of my addresses.
Your rights
You can ask for access to your data, its correction, deletion, restriction or portability, and object to its use: write to henri@hlvadvisory.com, I reply within a month.
You can also lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.