Back to guides

Legal notices and GDPR in Belgium: the mandatory checklist

Everything your website must legally display in Belgium to comply with the law and GDPR.

Having a beautiful website is good. Having a website that respects the law is better. In Belgium, the legal framework (Code of Economic Law and GDPR) imposes strict rules. Beyond avoiding fines, compliance is above all a powerful trust lever for your clients.

A visitor who sees clear notices and transparent data management will be far more inclined to contact you. Here is the checklist of mandatory elements for your website.

1. Legal Notices: Your identity card

It's a legal obligation: you must allow your visitors (and the administration) to know who is behind the site. This information must be easily accessible (generally in the footer).

  • Full identification: Company name (or your own name if you're a sole trader).
  • Registered office: Your establishment's full address.
  • Contact: A valid email address and phone number.
  • Administrative data: Your company number (CBE) and VAT number (e.g. BE 0XXX.XXX.XXX).

2. Privacy Policy: Transparency above all

Since the arrival of GDPR, you must explain in simple and clear terms what you do with your visitors' data.

  • What data? Do you collect names via a form? IP addresses for your statistics?
  • Why? Explain the purpose (responding to a request, sending a newsletter, analysing traffic).
  • User rights: In Belgium, every citizen has the right to consult, modify or request the deletion of their data ("Right to be forgotten"). You must indicate how to exercise this right.

3. Cookie management: The user's choice

The time of the simple banner "By continuing to browse, you accept cookies" is over. To be compliant in Belgium:

  • "Opt-in" consent: The user must actively click "Accept" before non-essential cookies (such as Google Analytics or advertising pixels) are activated.
  • Right to refuse: It must be just as easy to refuse as to accept cookies.
  • Technical detail: You must list the cookies used and explain their role.

4. Forms and Security: Protect your exchanges

Every form on your site is a data collection point that must be secured.

  • SSL Certificate (HTTPS): This is essential. The small padlock in the address bar guarantees that data sent by your clients is encrypted.
  • Consent checkbox: Before submitting a form, the user must be able to tick a box confirming they have read your privacy policy.

5. General Terms and Conditions (T&Cs)

If you sell products or services online, General Terms and Conditions of Sale are mandatory. They must specify delivery times, payment terms and above all the 14-day right of withdrawal — a strict rule of Belgian and European law.

Why is the technical aspect crucial?

Compliance is not just a matter for lawyers — it's also a matter for developers. Installing a cookie banner that actually blocks scripts before consent, configuring an SSL certificate or structuring a readable privacy policy page requires technical expertise.

Is your site compliant?

Contact me to verify your site's compliance and implement the mandatory elements.

Contact me

This site uses strictly necessary cookies for its operation (Netlify Forms). By continuing to browse, you accept their use. Privacy policy