Privacy statement.

What we collect

Information you give us. When you use our contact form, we collect your name and email address and, if you choose to provide them, your company, your role and the content of your message. Please don’t include sensitive details you don’t want us to hold.

Information collected automatically. This is a static website hosted on Vercel. Like any web host, our hosting and form providers automatically record technical data needed to deliver the site and keep it secure: typically your IP address, browser type, language, the page that referred you and the date and time of your request.

Cookies. We do not set advertising or analytics cookies and we do not track you across other websites. If this ever changes, we will update this statement and ask for consent where the law requires it.

Why we use it and our legal basis

We only use your personal data for clear, stated purposes, each with a legal basis under Article 6 of the GDPR:

• To answer your enquiry and follow up. Basis: taking steps at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
• To keep the site secure and stop spam and abuse (for example, the form’s spam filter and our providers’ server logs). Basis: our legitimate interest in protecting the website and its users (Art. 6(1)(f)).
• To meet legal obligations where they apply to us. Basis: compliance with a legal obligation (Art. 6(1)(c)).

Who we share it with

We never sell your personal data. We share it only with the service providers who help us run this website, each acting on our instructions under a data processing agreement:

• Resend (Resend, Inc.), which delivers contact-form submissions to our inbox.
• Vercel (Vercel Inc.), which hosts and serves this website.

We may also disclose data to professional advisers, or to authorities, where we are legally required to do so.

Transfers outside Europe

Some of our providers may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

How long we keep it

Enquiries. We keep your message and contact details for as long as we need them to handle your request and maintain our business relationship, normally up to 24 months after our last contact, unless a longer period is required by law. After that we delete or anonymise them.

Technical logs. These are kept only briefly by our providers for security and troubleshooting, then deleted.

How we protect it

We take appropriate technical and organisational measures to protect your data: the site is served over an encrypted (HTTPS) connection, access is limited to people who need it and we work only with reputable providers. No system can be guaranteed completely secure, but we treat your data as carefully as we expect others to treat ours.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format and, where we rely on consent, to withdraw that consent at any time.

To exercise any of these, write to us at the registered address below. We respond within one month.

If you believe we have mishandled your data, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own country.

Links to other websites

Our site may link to websites we don’t operate. We aren’t responsible for their privacy practices, so we encourage you to read their own privacy statements.

Changes to this statement

We may update this statement from time to time. The “last updated” date at the top always shows the current version and we will make any material change clear.

Contact

Questions about this statement or your data? Write to us at Lelystraat 27C Sliedrecht, The Netherlands.