Privacy Policy

This Policy applies to:

• Visitors to our website (hi-milly.eu)
• Prospects and leads who request a demo, book an Operations Scan, or contact our sales team
• Customers and their authorized users who access the Platform
• Anyone who communicates with us by email, form, or scheduling tool

Section 10 below covers, separately, how personal data is handled when it is processed through the Platform on behalf of a customer (for example, consultant or candidate records) — that is a distinct relationship from the one described in Sections 1–9.

For the purposes described in Sections 1–9, the data controller is:

Depending on how you interact with us, we may process:

• Identification data: name, job title, company name
• Contact data: email address, phone number
• Communications: the content of emails, form submissions, and meeting requests
• Technical and usage data: IP address, browser type, pages visited, referral source
• Account data: login credentials and access logs for customers using the Platform
• Billing data: invoicing and payment details for paying customers

We process personal data for the following purposes:

• Operating our website and responding to inquiries — legitimate interest
• Managing sales relationships (demos, Operations Scans, proposals) — legitimate interest / pre-contractual steps
• Administering customer contracts and providing the Platform — performance of a contract
• Security and fraud prevention — legitimate interest / legal obligation
• Resolving disputes and enforcing our agreements — legitimate interest / legal obligation
• Marketing communications, where permitted — consent or legitimate interest, with an opt-out always available

We do not sell personal data. We share it only with:

• Service providers who support our operations under contract — for example hosting, email delivery, customer relationship management (HubSpot), and scheduling tools
• Integration partners that a customer chooses to connect to the Platform (for example an ATS such as Bullhorn, the Peppol e-invoicing network, payroll providers, or accounting software) — data flows to these only as configured by the customer
• Authorities, where required by law or to protect our legal rights

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or transfer only to providers operating under an adequacy decision.

We keep personal data only for as long as necessary for the purposes described above, to comply with our legal and accounting obligations (including Belgian retention periods for invoicing and accounting records), or to resolve disputes. When data is no longer needed, it is deleted or anonymized.

We apply technical and organizational measures appropriate to the sensitivity of the data we process, including access controls, encryption in transit, and regular review of who has access to what. No system is completely secure, but we work to reduce risk on an ongoing basis.

Under the GDPR and applicable Belgian law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure, where applicable
• Object to or restrict certain processing
• Request a portable copy of your data
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit)

To exercise any of these rights, contact us at contact@wiseworks.be.

When a customer uses MILLY to manage placements, contracts, timesheets, invoicing, or payroll preparation, that customer is the data controller for the personal data of their consultants, candidates, and clients (for example names, contact details, contract terms, hours worked, and payment information). MILLY acts as a data processor, processing that data only on the customer's instructions and as described in our Data Processing Agreement with that customer.

If you are a consultant, candidate, or client of one of our customers and have questions about your data, please contact that company directly — they control how your data is used.

Where the Platform uses third-party AI or automation features, customer data is not used to train third-party AI models. Any such functionality is documented in the relevant Data Processing Agreement.

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date above reflects the most recent revision. Material changes will be communicated to customers directly.

For any question about this Policy or how we handle personal data, contact us at contact@wiseworks.be. See also our Cookie Policy.