Privacy statement

A scan says a lot about your health. Here you can read what we do with your data, why, and for how long.

Who we are

Scansake is a trade name of Bloedserieus, company number 1026.949.787, email [email protected]. We are responsible for processing your data.

Which data

• Contact and order details: name, email address, phone (if you give it), delivery address, your order and your comments.
• Your scan: the image files you upload or send, and the 3D model we make from them. This is data about your health.
• Technical data: your IP address in the server logs, only to prevent abuse. We use no trackers or advertising cookies; just one necessary cookie, to secure forms and remember your language choice. It disappears when you close your browser.

Why, and on what legal basis

• Making your model: based on your explicit consent for your scan (Article 9(2)(a) GDPR) and the contract you enter into with us (Article 6(1)(b) GDPR).
• Handling and delivering your order, and communicating with you: based on the contract.
• Accounting and invoices: because the law requires it (Article 6(1)(c) GDPR).

We never use your scan for anything else: no advertising, no reselling, no research, no software training.

How we protect your scan

• Your name, date of birth, address and the details of the hospital and doctors are erased from the files in your own browser, before they are uploaded. The names of folders and files are not sent either. On our server we check this a second time; your scan carries only your order number. If your browser cannot anonymise a file, it is only uploaded if you choose so yourself, and we erase those details as soon as it arrives.
• Your scan is stored on our own server in Belgium, behind an encrypted connection (https). Only we have access.
• Your personal order page can only be reached through a long, secret link. Don't share that link with anyone.

How long

• Your scan and your 3D model: erased 30 days after your order has been shipped or cancelled, and in any case no later than 60 days after your order. If you ask sooner, we erase them straight away.
• Order and invoice details: for as long as the law requires for accounting.

Who we share data with

• Bpost: your name and address, to deliver your parcel.
• Mollie B.V. (Amsterdam), our payment service: the amount and your order number; you enter your payment details directly with Mollie. Mollie sees nothing about your scan or which model you ordered.
• Brevo (Sendinblue SAS, Paris), our email service: your name and email address, to send you messages about your order. Brevo stores its data in the EU.
• Cloudflare, Inc., for the secure connection to our server: all traffic to and from the website passes through it, including your scan while it uploads. By then it has already been anonymised in your browser, and Cloudflare does not keep it. Cloudflare is based in the United States; the transfer relies on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

We share your scan itself with no one.

Your rights

You may view your data, have it corrected or erased, and withdraw your consent to the use of your scan at any time. To do so, email [email protected] with your order number. If you're not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

Last updated: november 2026.