Privacy statement

Version of 26 October 2026

Who is responsible

Happy Rainbow Factory CommV, Cederstraat 10, 8560 Wevelgem, Belgium, company number BE 0537.199.757, register of legal entities Ghent, Kortrijk division, email [email protected], is the controller for the data of your account and of visitors to cablecad.be.

For your clients’ data that you include in your projects, you are the controller and we are the processor. The data processing agreement attached to the terms and conditions then applies.

Which data, why and on what basis

• Your account: name, email address and your password (only as an irreversible hash). To create your account, sign you in and email you about your account: confirmation, new password, the end of your trial and payments. Basis: the contract.
• Your installer details: company name, address, VAT number, phone, email, registration, logo and signature. To put them in the title block of your printouts. Basis: the contract.
• Your billing details and payments: name or company, address, VAT number, the amount and status of your payments. To let you pay, grant your plan and create invoices. We do not see your card or bank details: they go directly to Mollie. Basis: the contract and our legal accounting obligation.
• Your projects and files: diagrams, plans, floor plans you upload. To store them, with their history, so you can restore an earlier version. Basis: the contract.
• Your questions to customer support: your messages and our replies, including through the contact form without an account. To help you. Basis: the contract or our legitimate interest in answering questions.
• Technical data: your IP address, the time and the requested page in the server logs, and the number of sign-in attempts per IP address and per email address. To keep the service secure and working and to curb abuse. Basis: our legitimate interest.

We do not use your data for advertising, do not sell it and do not build profiles. If you send us a question, we reply by email; we only send a newsletter if you expressly ask for it.

Cookies and storage in your browser

We use one cookie, cablecad_sid, to keep you signed in. It is strictly necessary, is not shared, and expires after 30 days or when you sign out. The app also keeps a few preferences in your browser (localStorage): your language, whether the guided tour has been done, the width of the panels and tablet mode. Changes to a project that could not be saved yet (for example without a connection) are kept temporarily in your browser (IndexedDB) so they are not lost; they disappear as soon as they are saved and when you sign out. This data stays on your device and does not reach us, except when it is sent to your project like any other change. We use no analytics or advertising cookies and no third-party trackers; that is why we do not ask for cookie consent.

Who we share data with

Only with partners that help us provide the service, and only what they need for it. They process the data on our behalf.

• Hetzner Online GmbH, Germany: the servers and storage, in the European Union.
• Cloudflare, Inc., United States: the network for the site, for speed and protection against attacks. Sees your IP address and the traffic to the site.
• Mollie B.V., the Netherlands: payments. Receives your name, email address and the amount; you give your payment details directly to Mollie.
• Billit BV, Belgium: invoices, including through Peppol. Receives your billing details.
• Twilio Inc. (SendGrid), United States: sending our emails. Receives your email address and the content of the message.
• The European Commission (VIES): to check a VAT number you enter in your billing details. We keep the answer (valid or not) for at most one year.
• Digitaal Vlaanderen and the Service public de Wallonie: when you type an address, what you type is sent to their address services to show suggestions. They receive no data from your account.

Cloudflare and Twilio are US companies. Transfers take place under the EU–US Data Privacy Framework, to which both have signed up, and the standard contractual clauses of the European Commission. Beyond that, we only pass on data when the law requires us to.

How long

• Your account, installer details, projects, files and questions to customer support: as long as your account exists. If you delete your account, they disappear from the service immediately, and from the backups within 14 days.
• Payments and invoices: ten years, as accounting law requires. After your account is deleted, they are no longer linked to an account.
• Questions through the contact form without an account: up to two years after the last reply.
• Server logs: briefly; they are overwritten automatically, usually within a few weeks.
• Sign-in attempts per IP address: in memory only, for a few minutes.

Security

All connections are encrypted (https). We store passwords only as a hash. The servers are in the European Union, only the administrator has access to them, and we make a backup every day. If a breach that poses a risk to you happens nonetheless, we inform you and the Belgian Data Protection Authority as the law requires.

Your rights

You have the right to access your data, to have it corrected and erased, to have processing restricted, to object to processing based on our legitimate interest, and to take your data with you. You can do a lot yourself in the app: change your details, print your projects or save them as PDF, and delete your account with everything in it. For anything else, email [email protected]; we reply within a month.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.

Changes

If we change this statement on an important point, we tell you in advance by email. The date at the top shows the version in force.