Privacy statement
Updated on 8 September 2026
This statement is about this website: what you send us through the contact form, and what we measure about visits. Data we process on your behalf during an engagement is not covered here; a separate data-processing agreement governs that.
What we receive from you
The contact form asks for your name, your email address and your message. There are no other fields for you to fill in. Your message reaches our own mailbox through Resend, the mail provider for this form. It does not go into a CRM or onto a mailing list. To prevent abuse, the server temporarily keeps your IP address and the times of sending attempts. Visiting the website also involves processing technical data, such as your IP address, the requested page and browser information. Technical server logs may contain information about errors and security incidents. The contact form does not write the contents of your message to those logs.
What we use it for
We use your name, email address and message to answer your enquiry and continue that conversation. The legal basis is our legitimate interest in answering enquiries and communicating with business contacts (GDPR Article 6(1)(f)). We limit this to the data needed for those purposes. If you personally request a quotation for a contract with you, the legal basis is taking steps at your request before entering into that contract (GDPR Article 6(1)(b)). We process technical data to protect the form and website on the basis of our legitimate interest in preventing abuse and investigating faults. We do not sell your data. We do not use your contact details or message for advertising or add you to a newsletter. Separate advertising measurement based on consent is described below. Providing data is not a legal requirement. Your name, email address and message are required to submit the form; without contact details we cannot reply. This website does not make decisions based solely on automated processing that have legal or similarly significant effects on you.
Who receives data
Resend delivers contact-form messages and processes your name, email address and message for that purpose. TransIP provides our business mailbox and stores received email. Hetzner provides the server running this website. Within our organisation, only people handling your enquiry or managing the website use the data they need for that work. Our analytics provider is described below under “What we measure”.
Processing outside the EEA
Resend processes contact-form data in the United States, among other locations outside the European Economic Area (EEA). Selecting a European email sending region does not mean all processing stays in Europe. Resend incorporates the European Commission’s standard contractual clauses into its data-processing agreement for these transfers. These clauses set out obligations to protect personal data. Follow the link to read the clauses and annexes, or ask us for a copy.
How long data is kept
Your message stays in our mailbox for as long as we need it to handle your enquiry and to read back what was agreed. Ask us to delete it and we will, except where the law requires us to keep something. Sending attempts count towards abuse prevention for one hour. The IP address is automatically removed from memory once the last attempt is one hour old, or earlier if the server process stops. The website’s technical logs rotate by storage size: up to three files of 20 MB, with the oldest file replaced when a new file is created. This is not a fixed period in days. For current retention periods for sending data at Resend, see its data protection information.
What we measure
We use Plausible to see which pages get read. Plausible works without cookies and without a profile: no personal data about you is stored, and you are not followed across other websites. What we see back are counts per page, not people. This site itself sets one cookie, and it only remembers which language you read the site in: it holds no personal data and it disappears when you close your browser. We also store your advertising measurement choice in your browser’s local storage for 180 days. The advertising cookies described below are used only if you give consent.
Advertising measurement with your consent
After you give consent, we load the Google tag for Google Ads. This measures whether a click on our ad leads to a successfully submitted contact form. Google receives technical data such as your IP address, visited page, ad click information and the event that a message was sent. We do not send your name, email address or message to Google. The legal basis is your consent (GDPR Article 6(1)(a)). Without consent, the Google tag does not load and we send no data to Google through it. Advertising personalisation is disabled. Google uses cookies including _gcl cookies, which generally last up to 90 days; see Google’s cookie information for individual cookies and retention periods. Google may also process data outside the EEA. Its privacy information describes data processing and transfer mechanisms. You can withdraw consent as easily as giving it through Cookie preferences at the bottom of any page. We then stop measurement, delete advertising cookies on our own domain and reload the page. The contact form remains available.
Your rights
You can ask us for access to your personal data, correction, deletion or to have its use restricted. Where the right to data portability applies, you can receive your data in a common file format. You can object to our use of data based on a legitimate interest. Email the address at the foot of this page. We normally respond within one month of receipt. If your request is complex or you make multiple requests, we may extend that period by up to two further months; we will explain why within the first month. Where necessary, we ask for information to verify your identity. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens. For data we process on a client’s behalf, contact the organisation that is the controller. We help that organisation handle your request.
Getting in touch about this
Questions about this statement, or about what we hold, can go to the address below. You will hear back from the same people who do the work.
The full data-processing agreement comes with the engagement: it sets out the arrangements for data we process on your behalf, and you receive it before we start.