Privacy policy.
This policy explains how we handle personal data when you visit this website or contact us. It covers the website only. If you later become a customer of the Hespoire platform, a separate customer agreement and data processing agreement will apply to the data you put into it.
Who is responsible
The controller for this website under the General Data Protection Regulation (GDPR) is [legal entity name], [street address], [postcode and city], the Netherlands, Chamber of Commerce (KvK) number [KvK number].
For any privacy question, email [email protected].
The short version
- We do not use analytics, advertising or tracking cookies.
- We do not sell personal data.
- We use what you send us to reply to you, and nothing else.
- The SAIL estimator runs in your browser. What you enter is not sent to us.
- Fonts are served from our own domain, so no third-party font service sees your visit.
What we process, why and on what basis
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Delivering and securing the website | IP address, browser details, requested page, time of request | Legitimate interest in a secure, working website (Art. 6(1)(f) GDPR) | Short-term technical logs, according to our hosting provider's retention periods |
| Answering a contact form or email | Name, email address, company, your message | Legitimate interest in answering you, or steps before a contract at your request (Art. 6(1)(f) and (b)) | Up to 12 months after our last contact, unless a business relationship follows |
| Early access | Name, email address, company, type of organisation, what you tell us about your operation | Steps before a contract at your request (Art. 6(1)(b)) | Up to 24 months after our last contact, or until you ask us to remove it |
| Business administration and legal duties | Records of agreements and related correspondence | Legal obligation (Art. 6(1)(c)) | As required by law, generally 7 years for Dutch tax records |
You do not have to give us your personal data. Without an email address, however, we cannot reply to you. Please do not send us special categories of personal data or confidential safety records through the form.
Who receives your data
We use a small number of service providers, who act as processors on our behalf under a data processing agreement:
- Cloudflare, Inc. for website hosting, content delivery and security.
- Resend for delivering contact form messages to our inbox.
- [email provider, e.g. Google Workspace] for our email.
- Strynic, our technology partner, which builds and runs our systems and may access data for that purpose.
We do not share your data with anyone else, unless the law requires it. If we were ever part of a merger or acquisition, your data could transfer to the successor, and we would tell you.
Transfers outside the EEA
Some providers are based in, or have staff in, the United States. Where personal data leaves the European Economic Area, we rely on an adequacy decision (such as the EU-US Data Privacy Framework, for certified companies) or on the European Commission's standard contractual clauses. You can ask us for a copy of the relevant safeguards.
Automated decisions
We do not make decisions about you on this website that are based solely on automated processing and have legal or similarly significant effects. We do not use the content of your messages to train AI models.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have it corrected or erased;
- restrict how we use it;
- object to processing based on legitimate interest;
- receive your data in a portable format, where this applies;
- withdraw consent at any time, where we rely on consent.
To use a right, email [email protected]. We will respond within one month, and we may ask you to confirm your identity first.
Complaints
We would like to hear from you first. You also have the right to file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or with the authority in the country where you live.
Security
We use encrypted connections and limit access to personal data to those who need it. To report a vulnerability, see our security page.
Children
This website is meant for professionals. We do not knowingly collect data from children under 16.
Changes
We may update this policy. The date at the top of this page shows the latest version, and we will notify you directly of important changes where we can.