Falcon — Privacy Notice

Version 1.0 of 26 August 2026

1. Introduction

Falcon AI BV ("Falcon", "we", "us" or "our") respects the privacy of its (prospective) Clients, suppliers, business partners and visitors of falcon.law (the "Website"). All personal data you give us is processed in line with this Privacy Notice, the EU General Data Protection Regulation (Regulation (EU) 2016/679) and any other applicable data protection law.

This notice explains how we use your personal data and what rights you have over it. We may update it from time to time — this version was last updated on 26 August 2026.

2. When does this notice apply?

This notice covers the personal data of our (prospective) Clients, suppliers, business partners and visitors of the Website. It does not cover the personal data of our own staff, processed in the context of their professional relationship with us.

3. Who is the controller?

Falcon AI BV is the controller of the personal data covered by this notice. Falcon AI BV is a Belgian company, with its registered office at Ikaroslaan 1, 1930 Zaventem, Belgium, registered with the Crossroads Bank for Enterprises under number 1035.757.981.

4. How do we collect personal data?

We collect your personal data:

• when you give it to us directly (for example, by signing up on the Website or contacting us);
• when we receive it from third parties (for example, from a company you work for, or a service provider);
• when it is collected automatically (for example, technical information about your visit to the Website).

5. What personal data do we collect, and why?

We collect:

• identification and contact information, such as your name, job title, company and contact details;
• information about your visit to the Website and how you interact with it, including technical information about the device you use;
• your email address, where you sign up for updates through our sign-up form;
• information relevant to the services we provide you, such as billing information or information about your business.

6. For what purposes do we use your personal data?

We use your personal data to:

• ensure proper communication with you;
• deliver the services you or your organisation request from us;
• establish and manage our (potential) relationship with you;
• keep you informed about Falcon, where you have signed up to hear from us;
• optimise the quality of our services and the Website;
• keep our systems and the Website secure;
• operate and manage our business processes and IT infrastructure;
• carry out business development activities;
• conclude, perform and end agreements for the products or services we procure;
• establish, exercise or defend our legal rights;
• comply with applicable law, court orders or requests from an authority;
• in the context of a (potential) corporate transaction, such as a merger, sale or change of control.

Which of these purposes apply to you depends on your relationship with us. We will not use your personal data for a purpose incompatible with what you were told, unless the law requires or allows it.

7. On what legal grounds do we use your personal data?

We rely on one or more of the following:

• performance of a contract — where using your personal data is necessary to enter into or perform an agreement with you or your organisation;
• legal obligation — where we must, for example under tax and accounting law;
• our legitimate interests — for example, to communicate properly with you, run and secure our Website and systems, manage our business, and protect our rights; and
• your consent — for example, when you sign up for updates through our Website. We only send you marketing communications after you have consented, and you can withdraw that consent at any time by unsubscribing or contacting us (section 12).

8. How do we secure your personal data?

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and any other unlawful form of processing. Examples of such measures are a secured IT infrastructure, data processing agreements with third parties, and restricting access to personal data to authorised people only.

That said: (i) transmission of information over the internet is, in general, never completely secure, private or confidential; and (ii) information sent to or received from the Website may be intercepted, decrypted, consulted or used by third parties, even where the exchange is encrypted.

The Website may from time to time contain links to and from third-party websites. If you follow such a link, note that these websites have their own privacy policies, and that we do not accept responsibility or liability for those policies or websites. Please consult their privacy policies before sharing any personal data with them.

9. Who do we share your personal data with?

On a need-to-know basis, we may share your personal data with:

• our service providers, such as HubSpot (forms and website analytics), Cybot A/S / Cookiebot (consent management), and our hosting and infrastructure providers;
• parties involved in delivering our services, including subcontractors;
• our professional advisers, such as lawyers and accountants;
• our banks and insurers;
• governmental or administrative authorities;
• third parties in connection with a (potential) corporate transaction.

Recipients may be located outside the European Economic Area (EEA); where that happens, we put appropriate safeguards in place, such as an EU adequacy decision, standard contractual clauses, or supplementary measures.

We do not sell personal data.

10. How long do we retain your personal data?

We keep your personal data only as long as necessary for the purposes above. The criteria we use include:

• if you or your company have an agreement with us, for as long as we provide you with services;
• for as long as we have an ongoing relationship with you, including any disputes or potential claims;
• as needed to comply with our legal and contractual obligations;
• accounting records, for the statutory retention period that applies to us.

11. Cookies

The Website uses cookies. Cookies are small text files stored on your device by your browser. We use HubSpot cookies for analytics, only after you consent — see our Cookie Policy for details and how to change your choices at any time.

12. What are your rights?

Under the GDPR, you have the right to:

• request access to your personal data and information about how we process it;
• obtain a copy of your personal data, and in some cases have it transferred to you or a third party (data portability);
• have inaccurate or incomplete personal data corrected;
• have your personal data erased where we no longer have a legal ground to keep it;
• withdraw your consent at any time, where processing is based on consent — this does not affect what we did lawfully before you withdrew;
• object to processing based on our legitimate interests; we will stop unless we have a compelling reason to continue, or need the data for legal claims or defence;
• have processing put "on hold" in specific situations, or object to it.

If you believe we have not complied with data protection law, you can lodge a complaint with the Belgian Data Protection Authority (www.gegevensbeschermingsautoriteit.be) — though we'd appreciate the chance to resolve it directly with you first.

Questions about this notice, or about exercising your rights? Contact us: