Privacy

Updated on 16 October 2026.

This translation is provided for information only. In the event of any discrepancy, the Dutch version prevails.

This statement explains which personal data Nummo processes, why, for how long and what your rights are. It concerns two groups of people: those who use Nummo (visitors and users with an account), and those who appear in our data on businesses (managers, directors and sole proprietorships).

1. Who is responsible?

LEAP Advisor BV, Ter Bunder 15, 9070 Destelbergen, enterprise number 0687.978.339, is the controller for Nummo. For any question about your data or to exercise your rights, email hello@nummo.be. We reply within one month.

2. If you appear in our data on businesses

Nummo shows public data on Belgian businesses. This also includes natural persons: the business of a natural person (sole proprietorship), and the managers, directors, permanent representatives and statutory auditors of companies. Because we do not obtain this data from you directly, we explain here what we do (Article 14 GDPR).

Which data and where it comes from

• Crossroads Bank for Enterprises (CBE) (CBE Open Data and the public web service of the FPS Economy): name, enterprise number, legal form, status, address of the registered office and establishments, activities, date of incorporation, the contact details and website the business itself provided, and the positions of directors (surname, first name, position, start and end date).
• Annual accounts filed with the National Bank of Belgium: the business's figures, and the directors, permanent representatives and statutory auditors as they appear in the annual accounts (surname, first name, position, dates). If an annual account contains the address of a natural person, we do not store that address: we keep only an encrypted fingerprint, which lets us see whether two entries concern the same person. No one can recover the address from that fingerprint.
• Belgian Official Gazette: date, type and link to the publications of legal entities, and judgments on bankruptcy and judicial reorganisation. We do not take over dates of birth.
• The business's own website: description, logo, general email addresses (such as info@), telephone numbers and links to social media that the business itself publishes there. For well-known businesses, also Wikidata.

Why, and on what basis

We show this data so that anyone can check who they are doing business with: whether a business exists and is active, who represents it, what its financial position is and whether it can receive e-invoices. The law makes this data public for precisely that purpose. Our basis is the legitimate interest of our users and of ourselves (Article 6(1)(f) GDPR). We have weighed that interest against your privacy and therefore take the following measures:

• For a sole proprietorship, without signing in we show only the name, the municipality, the status, the activities and the contact details the business itself provided. Street, house number and establishments are visible only to signed-in users with Pro, a trial or Onderwijs.
• Searching for persons and the pages showing a person's mandates are available only to signed-in users.
• We do not allow search engines to index profiles of sole proprietorships, pages about persons or board pages.
• We never show a director's private address.
• Our terms prohibit the use of this data for direct marketing, for building profiles or lists of persons, and for further distribution. Through our API we do not provide the name, address or contact details of sole proprietorships.

Who sees the data

Visitors to Nummo, and for the shielded parts only signed-in users, as described above. Our service providers (section 6) process it on our behalf. For the short description of a business, we send the text of its website to an AI service (section 6). We do not do this for sole traders: behind a sole trader there is one person, and the website is often about that person too. We do not sell data.

For how long

We update the data every night in line with the sources. Whatever changes or disappears there, changes or disappears with us too. We show past mandates on the pages of persons and in the search for persons until ten years after they ended. After that, they disappear there.

Shielding and objection

You can object at any time. A business can use this form to ask for its profile to be shown in limited form (without address and contact details) or to be hidden entirely (also from search results, lists, statistics and the API). Mandates at such a business then also disappear from the pages about persons. If you are a director and wish to object to your mandates being shown, or if something is incorrect, email us at hello@nummo.be. We assess each request individually and reply within one month. To handle it, we keep your name, email address and request: an accepted request for as long as the shielding applies, a refused request for twelve months.

3. If you visit Nummo

You can use Nummo without an account. We only place cookies for statistics (Google Analytics) and advertising (the Meta pixel) if you allow them; they are off by default. You can read which cookies we do use in our cookie policy.

• Preventing abuse. To prevent anyone from harvesting Nummo on a large scale, we count how many requests are made per IP address. In doing so we never store the IP address itself, only an encrypted key derived from it. Such a counter disappears at the end of its period, at the latest after about one day. Our hosting partner Vercel sees your IP address, as with any website, in order to deliver the page.
• Anonymous measurement. We count which pages are viewed using Vercel Web Analytics, without cookies. We count which buttons leading to Nummo Pro are clicked: only the type of click, the page without enterprise number, the time and whether it is a mobile phone or a computer. For each business we count how often its profile was viewed, without anything about the visitor; we delete those counts after 120 days.
• Use of the site. To see where people click and get stuck, we use PostHog with servers in the European Union. Without cookies and without storage in your browser: you are not recognised on a subsequent visit and we link nothing to your account. We mask text on the page and whatever you enter. We do not send enterprise numbers, names of persons or search queries. Basis: our legitimate interest in improving Nummo.
• Logos. Your browser sometimes loads a business's logo directly from its own website, from Wikimedia or from Brandfetch. Those sites then see your IP address, as with any image on the internet. We do not send any data about the page you are on.

4. Search and AI

If you type a sentence in the search box (for example "bakers in Ghent with staff") or the ordinary search finds nothing, Nummo may have an AI model convert that search text into filters. The search text then goes to the AI service (section 6), without your account or IP address. We keep those search texts with their result for 90 days, so that the same question does not have to go to the AI again. Words the AI has learned to recognise (for example a profession) are kept without the original sentence. So do not type any data in the search box that you do not want to share.

The AI only converts language. Figures, signals and labels always come from fixed rules. We produce the "In plain language" summary of annual accounts only for companies, not for sole proprietorships.

5. If you have an account

Account and signing in

We keep your name, email address, your password (only in encrypted form, never readable) and your signed-in devices (browser, operating system, a shortened IP address without its last part, and time), to keep you signed in and to detect abuse. If you sign in with Google, Microsoft or LinkedIn, we receive from that service only your name, email address and profile picture. If you are not signed in and view a second business, we ask whether Google may show a window to sign in with one click (see the cookie policy). Basis: the contract with you.

Nummo Pro and payments

For a subscription we keep your billing details (company or name, address, VAT number, billing address) and your subscription. We check your VAT number with VIES. Payments are handled by Stripe: we never see your full card or account number. Stripe creates your invoice and sends it by email. We keep invoices and payments for ten years, as accounting legislation requires. Basis: the contract and that legal obligation.

What you store in Nummo

We keep your lists of businesses, your alerts on changes, your display and layout preferences and your API keys (only in encrypted form) for as long as your account exists. With a free account we count each month which profiles and persons you opened, to keep track of your monthly credit. With Nummo Onderwijs (education) we keep your school email address, the monthly check of whether you are still at school and which profiles you opened each month.

If you connect Nummo to an AI assistant such as Claude or ChatGPT (see Nummo in your AI assistant), we keep which app you connected and when, the access keys that app uses (only as an unreadable fingerprint) and, per day, how many times the app called each tool. We do not see or keep your questions or your conversation with the assistant; they stay with the assistant's provider (Anthropic or OpenAI), under its own privacy policy. You revoke access in your profile; we then delete the connection, its keys and its counters. Daily counters are also deleted after twelve months. Basis: the contract with you.

Emails

We send emails for your account (confirmation, sign-in code or sign-in link, new password), your alerts and the monthly email about your credit via Resend. You can turn off alerts and the monthly email in your profile.

Deleting your account

You can delete your account at any time in your profile. We first cancel any ongoing subscription. We then delete your account, your devices, your billing details, your lists, alerts, preferences, API keys, connected AI assistants and your credit. Invoices and payments are kept without any link to your account, for as long as the law requires. Messages you sent us are kept as stated in section 7, without any link to your account. Mollie itself keeps your customer data in accordance with its own legal obligations.

6. Our service providers

These parties process data on our behalf, under a data processing agreement:

For the Meta pixel, Meta is not a processor acting on our behalf: Nummo and Meta Platforms Ireland are joint controllers for collecting and passing on data through the pixel, under Meta's terms for joint controllers. What Meta then does with the data falls under Meta's privacy policy. You can exercise your rights with us or with Meta.

If data is transferred to a country outside the European Economic Area, this happens only with the safeguards the GDPR requires: a decision of the European Commission (such as the EU-US Data Privacy Framework) or the standard contractual clauses of the European Commission.

For the Peppol check we consult the Peppol network (SML and Peppol Directory), and for the VAT check the European Commission's VIES. In doing so we pass on only the enterprise number.

7. Messages, newsletter and waiting list

• Contact, help requests and feedback on search results. We keep your message, your email address and, for a contact message, your name, and forward them to our own mailbox in order to reply. We delete them after 24 months. Basis: our legitimate interest in answering your question.
• Bankruptcy barometer by email. We keep your email address, the province you chose, your language and when you confirmed. We send nothing until you confirm; an unconfirmed subscription is deleted after 7 days. Every email contains a link to unsubscribe with one click, and we then delete your data immediately. Basis: your consent.
• Waiting list. We keep your email address, the time and what you came for, solely to email you once when sign-up opens. After that, or at the latest after twelve months, we delete your address. Basis: your consent.
• The free check of VAT numbers and names is not stored by us: whatever you enter stays in your own browser.

8. Chrome extension

The extension looks for VAT and enterprise numbers on the page, in your browser. The page itself, the addresses you visit and what you type never go to Nummo. Only when you hover over a number, click on it or search in the panel does the extension look up that one number or search term at nummo.be, without cookies and without your account. Your settings and "Recently viewed" stay in your browser. We do not keep any history of what you looked up.

9. Retention periods at a glance

10. Your rights

You have the right to access your data, to have it rectified or erased, to have its processing restricted, to object and, where the processing is based on consent or a contract, to take your data with you. You can withdraw consent at any time. Email hello@nummo.be; if we are not certain who you are, we may ask you to prove it. We reply within one month. We do not take decisions about persons based solely on automated processing.

If you disagree with how we handle your data, you can lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

11. Changes

If anything changes in how we process data, we amend this statement and update the date at the top. We notify users with an account of significant changes by email.