Privacy Policy

1. What we collect

This is the complete list.

From the contact form

• Your name
• Your email address
• The message you write
• The IP address the message was sent from
• A reCAPTCHA score indicating how likely the submission was automated

From analytics

Google Analytics (GA4) records which pages were read, how long for, where visitors arrived from, approximate region, and the type of device and browser. None of this runs unless you accept analytics cookies.

This site has no accounts and no payments. We never collect passwords, card numbers or any other payment details.

2. Why we process it, and on what basis

Purpose	Legal basis (GDPR Article 6)
Replying to your enquiry, preparing a quote or proposal	Performance of a contract or steps before it (6(1)(b))
Blocking automated and abusive submissions (reCAPTCHA)	Legitimate interests (6(1)(f)) — keeping the site usable
Understanding how the site is used, to improve it	Consent (6(1)(a)) — only after you accept in the cookie banner
Keeping records the law requires us to keep	Legal obligation (6(1)(c))

3. Who else is involved

We do not sell personal data. We use these services to process it:

• Google (Analytics, Tag Manager, reCAPTCHA) — measurement and abuse prevention
• Cookiebot (Usercentrics) — collecting and recording cookie consent
• SAKURA Internet Inc. — the hosting provider for this site

4. Where your data is held, and transfers outside the EU

This website is hosted on servers in Japan. Personal data sent from the EU is therefore transferred to Japan.

Japan is covered by an adequacy decision of the European Commission, in force since January 2019, which recognises its level of data protection as essentially equivalent to the EU's. No additional safeguards are required for this transfer.

Data passing through Google's services is handled under Google's Standard Contractual Clauses.

5. How long we keep it

• Enquiries — three years after the conversation ends, then deleted. If the enquiry becomes a project, accounting records are kept for the period Dutch law requires
• Analytics — up to 14 months, per the Google Analytics retention setting
• Consent records — 12 months, held by Cookiebot

6. Your rights

Under the GDPR you can ask us to:

• Give you a copy of the personal data we hold about you
• Correct anything that is wrong
• Erase your data
• Restrict how we process it
• Hand it over in a machine-readable format (portability)
• Stop processing based on legitimate interests (objection)
• Withdraw consent at any time — this does not affect processing carried out before you withdrew

Email the address at the bottom of this page. We reply within one month.

7. Complaints

If you are not satisfied with how we handle your data, you can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live elsewhere in the EU, your own national authority can also take the complaint.

8. What this site does not do

Stated explicitly, to avoid any doubt:

• We do not sell or rent personal data
• We do not profile visitors for advertising
• We do not load fonts from third-party services — every font is served from our own server, so simply reading a page does not send your IP address anywhere else
• We do not embed social media widgets that track you

9. Changes

When this policy changes we update the date at the top. If a change is significant, we will say so on the site.

For cookies specifically, see the Cookie Policy.