Privacy Policy
Last updated: March 17, 2026
Who we are
UNDRSIEGE is a Belgian company operating the website undrsiege.com and related services including studio production services, an online community, and digital products.
What data we collect and why
When you sign up for our email list or waitlist
Data collected: First name, email address, tier interest (if applicable). Why: To send you updates about UNDRSIEGE, release announcements, community news, and occasional offers related to our services and products. Legal basis: Your consent. You actively sign up by submitting the form. Stored by: MailerLite (their privacy policy: https://www.mailerlite.com/legal/privacy-policy). MailerLite processes data in the EU and US under Standard Contractual Clauses.
When you visit our website
Data collected: Pages visited, time on site, browser type, device type, approximate location (country/city level), referral source. Why: To understand how people use the site, which pages work, and to improve the experience. Legal basis: Your consent, given through the cookie banner before any tracking is activated. Stored by:
- Google Analytics 4 (GA4) - analytics. Google’s privacy policy: https://policies.google.com/privacy
- Google Tag Manager (GTM) - tag management. Does not collect data itself but loads other services.
When you interact with our ads or social media
Data collected: Website activity linked to ad interactions (pages visited, conversions such as email signups). Why: To measure whether our ads work and to show relevant ads to people who have visited our site. Legal basis: Your consent, given through the cookie banner. Stored by:
- Meta Pixel (Facebook/Instagram) - ad tracking and retargeting. Meta’s privacy policy: https://www.facebook.com/privacy/policy
When you book a service or make a purchase
Data collected: Name, email address, payment information, project files you send us. Why: To deliver the service you booked and to process payment. Legal basis: Contract performance - we need this data to deliver what you paid for. Stored by: Payment processing is handled by the relevant platform. Project files are stored securely and deleted after project completion unless you request otherwise.
When you join the community
Data collected: Whatever you provide when joining (Discord username, email if applicable). Why: To give you access to the community and to manage membership tiers. Legal basis: Contract performance for paid tiers. Consent for the free tier.
Cookies
Our website uses cookies. Non-essential cookies (analytics, advertising) are only activated after you give consent through our cookie banner.
Essential cookies: Required for the website to function. These don’t track you and can’t be turned off.
Analytics cookies (Google Analytics 4): Help us understand how people use the site. Activated only with your consent.
Advertising cookies (Meta Pixel): Allow us to measure ad performance and show relevant ads to website visitors on Instagram and Facebook. Activated only with your consent.
You can change your cookie preferences at any time by clicking the cookie settings link in the footer.
How long we keep your data
| Data | Retention period |
|---|---|
| Email list subscribers | Until you unsubscribe or request deletion |
| Website analytics | 14 months (GA4 default) |
| Ad tracking data | As per Meta’s retention policies |
| Service/project files | 90 days after project delivery, unless agreed otherwise |
| Community membership data | Until you leave the community or request deletion |
Who we share your data with
We don’t sell your data. We share it only with the services listed above (MailerLite, Google, Meta) for the purposes described. These are all established companies with their own GDPR-compliant privacy policies.
We may also share data if required by law - for example, in response to a valid legal request from a Belgian or EU authority.
Your rights
Under GDPR, you have the right to:
- Access your personal data - ask us what we have
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Restrict processing in certain circumstances
- Data portability - receive your data in a structured, machine-readable format
- Object to processing based on legitimate interest
- Withdraw consent at any time for consent-based processing (this doesn’t affect processing that happened before withdrawal)
To exercise any of these rights, email mail@undrsiege.com. We’ll respond within 30 days.
Complaints
If you believe we’re not handling your data correctly, you have the right to lodge a complaint with the Belgian data protection authority:
Gegevensbeschermingsautoriteit (GBA) Drukpersstraat 35, 1000 Brussels https://www.gegevensbeschermingsautoriteit.be contact@apd-gba.be
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top will always reflect the most recent version. For significant changes, we’ll notify email subscribers directly.
Questions
Email mail@undrsiege.com with any questions about this policy or how we handle your data.