Legal

Privacy policy

Last updated: 24 July 2026

A privacy policy explains, in plain language, which personal data we collect from you, why, how long we keep it and what rights you have. We keep it as short and honest as possible — no fine print to hide anything.

Who is responsible for your data?

The data controller for the data collected through this website is:

What data do we collect?

The only form on this website is the contact form. If you fill it in, we process:

• your name (required);
• your email address (required);
• the content of your message (required);
• your company name (optional);
• your phone number (optional).

We use this data for one purpose: to get in touch in response to your message and, where relevant, to send a no-obligation quote or proposal. We don't use your data for advertising and we never sell it to third parties.

Our hosting provider also processes some standard technical data (such as your IP address) to keep the website secure and available. That's normal web traffic and we don't link it to you as a person.

Why are we allowed to? (legal basis)

We process your data on two GDPR grounds:

• Performance of (or steps towards) a contract — you get in touch because you may want to work with us;
• Legitimate interest — we may reasonably respond to a message you send us yourself, and keep our website secure.

How long do we keep your data?

We keep the data from your contact message for up to two years after our last contact, so we can pick up an ongoing conversation properly. After that we delete it, unless we are legally required to keep it longer — think of the seven-year Dutch tax retention obligation for invoices and records.

Who do we share data with?

We use a few suppliers that process data on our behalf (processors):

• Vercel — hosts the website and runs the function that handles the contact form. This processing takes place in the EU (Ireland). Vercel is a US company; a data processing agreement applies and, for any processing outside the EU, standard contractual clauses apply as a safeguard.
• Resend — delivers the email from the contact form and in doing so receives the submitted details (name, email, phone, company, message). Its servers are in the EU (Ireland). Resend is a US company; a data processing agreement applies and, for any processing outside the EU, standard contractual clauses apply as a safeguard.
• Microsoft 365 — provides our email. The email from the contact form arrives via Resend and remains, like all further correspondence, in our mailbox there. A data processing agreement applies with Microsoft; our mailbox is stored in the European Union.
• Fonts, icons and images are loaded locally from our own server (self-hosted). No data is sent to external font or image services such as Google Fonts.
• Portfolio examples. The example sites we built ourselves are hosted on this website and open in a window on the page; no connection with another party is made. An example of an external site (such as a client's live site) opens in a new tab. From that moment you are on that party's website and their privacy policy applies. This only happens once you click an example yourself.

Otherwise we share your data with no one, unless we are legally obliged to.

Data inside AI solutions we build for clients

If you later have us build an AI solution or custom software, stricter rules apply to the data processed inside it, which we record separately:

• data stays within the European Union;
• data is not used to train AI models;
• we sign a separate data processing agreement with you for this, tailored to your situation.

What rights do you have?

Under the GDPR you have the right to:

• access your data;
• have incorrect data corrected;
• have your data erased;
• restrict processing;
• object to processing;
• transfer your data (data portability).

You also have the right to lodge a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We'd of course rather hear it from you first, so we can sort it out together.

Making a request or asking a question

Send an email to info@nklaassens.nl. We'll respond as quickly as possible, and at the latest within the statutory four-week period.

Changes

We may update this privacy policy, for example when we start using new tools. The most current version is always on this page; the date at the top shows when we last updated it.