Privacy policy

LEXPAT Connect processes personal data with a clear purpose: enabling credible, professional and secure matching between Belgian employers and international workers.

We apply the principles of the General Data Protection Regulation (GDPR), including purpose limitation, data minimization, accuracy, security and transparency.

For processing related to the matching platform, website forms, user accounts, applications, messaging and tester feedback, the data controller is LEXPAT SRL, through LEXPAT Connect.

When a matter moves into a separate legal support workflow, the LEXPAT law firm acts within a distinct framework, with its own purposes, obligations and, where applicable, its own legal basis.

For international workers: identity data, contact details, location, languages, availability, experience, skills, CV, information about the target occupation, target sector and any administrative status shared voluntarily.

For employers: company identity, contact details, recruitment needs, relevant shortage occupation, region, contact information and offer-related criteria.

For contact forms and email exchanges: name, email address, phone number, message content, exchange history and information useful to handling the request.

For the eligibility simulator: the region, the target occupation and the details you enter to obtain a result. If you ask to receive that result by email, your email address and, optionally, your company name and a phone number.

For website use: technical data strictly necessary to operate the service, session information, cookie preferences and, if you allow them, non-essential audience measurement data.

Data is used to receive requests, structure profiles and needs, enable matching, organize introductions and ensure the operational follow-up of the platform.

When necessary after a match, some information may also be used to route a matter to the LEXPAT law firm in connection with a single permit, right to work or economic immigration.

Website forms may also trigger an email sent to the LEXPAT Connect contact mailbox so requests can be handled more quickly.

The address you leave in the eligibility simulator is used to send you the result you asked for, and to let the firm get back to you about that simulation.

That same address is used for our monthly newsletter only if you ticked the box provided for it. That box is separate from the request to receive your result and is never pre-ticked: asking for your result subscribes you to nothing. The newsletter is signed by Candice DEBRUYNE and covers shortage occupation lists and changes to the single permit procedure. Every mailing carries an unsubscribe link, and withdrawing your consent does not affect mailings already sent.

Depending on the situation, processing is based on pre-contractual steps, the legitimate interest of LEXPAT Connect in organizing matching, compliance with legal obligations, or consent where required.

Non-essential cookies or audience measurement tools rely on your choice. Core platform processing mainly relies on pre-contractual steps, legitimate operational interests and, where required by law, legal obligations.

Sending you your simulator result relies on carrying out your own request: you give us your address precisely in order to receive it. Sending the newsletter relies on your consent, collected separately through a box left unticked by default, with the date recorded so that it can be evidenced. The two are independent: withdrawing your newsletter consent does not take away the result you already received.

Data is not kept indefinitely. It is reviewed by category and may be deleted, anonymized or archived when no longer useful, or where a legal obligation requires a specific retention period.

• Contact forms and inbound requests: up to 24 months after the last useful exchange.
• Worker and employer profiles: for as long as the account remains active, then review or deletion after a prolonged period of inactivity.
• Applications, matching records and messaging: during the active relationship, then archiving or deletion depending on operational need and legal obligations.
• Tester feedback: short product-work retention, in principle up to 12 months unless a longer follow-up is needed.
• Addresses left in the eligibility simulator: 3 years from the last contact, then automatic deletion. This applies whether or not you accepted the newsletter.

Data is accessible only to authorized persons within LEXPAT Connect and, when necessary, to the LEXPAT law firm. Matching naturally involves the transfer of relevant information between employers and workers, strictly to the extent useful for the connection.

Some directories shown to members are intentionally anonymized or partially masked until a more advanced relationship is justified.

The site is deployed on Vercel. Some data or technical metadata may therefore transit through or be hosted on this infrastructure. The platform may also rely on Supabase for authentication, database and application storage.

The site may also use Resend for certain transactional emails or notifications. Where processing involves service providers located outside the European Union, we seek to frame such transfers using appropriate safeguards provided for by the GDPR.

You have, in particular, the right of access, rectification, erasure, restriction, objection and, where applicable, the right to data portability. You may also withdraw your consent when processing is based on consent.

You may also lodge a complaint with the competent data protection authority in Belgium.

For any question about your personal data or to exercise your rights, you may write to: contact@lexpat-connect.be.

You may also ask for more detail about retention logic, subprocessors used and the point at which a matter moves from the platform to the law firm.

This policy is interpreted in accordance with Belgian law and the GDPR framework applicable in the European Union.