Privacy policy

When you send us a message through the contact form, we process what you fill in:

• your name, your email address and your message;
• your phone number and company name, if you provide them;
• the language of the website and the page you sent the form from, so we know what your question is about.

Why: to answer your question and, if you'd like, to make you a proposal. Legal basis: our legitimate interest in answering messages, or steps you request before we enter into a contract (Article 6(1)(f) and (b) GDPR).

The form sends your message via Resend, an email service that acts as our processor, to our inbox at Zoho Mail. Zoho also acts as our processor; it is where all your messages to us arrive, including when you email us directly. You automatically receive a confirmation. See also Resend's privacy policy (opens in a new tab) and Zoho's privacy policy (opens in a new tab).

To fight spam we don't use a CAPTCHA, but an invisible check field, a minimum time to fill in the form and a limit per IP address. The server only keeps that IP address briefly in memory; we don't store it.

Retention: we keep your message for up to 12 months after our last contact. If you become a client, we keep what's needed for our work together, and invoices for as long as the law requires (7 years).

The Book a call page contains a scheduler from Cal.com. When you book, Cal.com processes your name, email address, any notes and the time you choose, as our processor. You receive a confirmation with a link to the call on Google Meet.

The scheduler only loads once you get close to that part of the page. Inside the scheduler, Cal.com may use its own functional cookies or local storage to make booking work. You can read how Cal.com handles data in Cal.com's privacy policy (opens in a new tab).

The call itself takes place on Google Meet. We do not have a data processing agreement with Google for Google Meet. Google processes what a video call needs, such as your name and IP address, as an independent party, under Google's own privacy policy (opens in a new tab).

Why and legal basis: to schedule and hold the call you request (steps prior to entering into a contract, Article 6(1)(b) GDPR). Retention: up to 12 months after the call, unless you become a client.

The speed check on the homepage measures how fast a website is. The web address you enter is passed on to Google PageSpeed Insights, which visits that public page and measures it. See Google's privacy policy (opens in a new tab).

We don't store the address or the result. Only to avoid running the same test over and over, the server keeps the result in memory for up to ten minutes. To keep things fair there's a limit per IP address, also only in memory. Legal basis: our legitimate interest in offering this free tool and preventing abuse.

Only enter the address of a public website, not an address that contains personal information.

This website runs on Vercel. Like any website, the server records technical data when you request a page: your IP address, the time, the page requested and details about your browser. These logs are needed to keep the site secure and working, and they are deleted automatically after a short time.

Fonts and images are served from our own server, not from Google or other parties. Legal basis: our legitimate interest in a secure, well-functioning website. See also Vercel's privacy policy (opens in a new tab).

To see which pages work well, we use Vercel Web Analytics. It works without cookies and doesn't follow you across other websites. We only see totals, such as the number of visits per page, the website you came from, the country and the type of device.

No profiles are created and we can't trace the numbers back to you as a person. Legal basis: our legitimate interest in improving the website.

We don't use tracking or advertising cookies. That's why you won't see a cookie banner here. What we do use is purely functional:

None of this contains personal data and we share it with no one. You can always clear cookies and local storage in your browser settings. The site will keep working just fine.

We never sell or rent out your data. We only share it with service providers that make this website work, and with whom we have agreed how they handle your data (data processing agreements). Beyond that, only if the law requires us to.

Some of these parties are based in the United States. Data only leaves the European Economic Area when appropriate safeguards are in place, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

No longer than necessary. At a glance:

• Contact form messages: up to 12 months after our last contact.
• Bookings: up to 12 months after the call.
• Client data: for as long as we work together, and invoices for 7 years due to the statutory retention obligation.
• Server logs: briefly, then deleted automatically.
• Speed check: up to 10 minutes in memory, never stored.

We protect your data with appropriate measures. The whole site runs over an encrypted connection (HTTPS), only Thijs and Ryan have access to our inbox and accounts, and we use two-factor authentication wherever possible. Notice something that doesn't look right? Email us straight away.

Under the GDPR you have these rights:

• Access: you may know which data we hold about you.
• Rectification: if something is wrong, we'll correct it.
• Erasure: you can ask us to delete your data.
• Restriction: you can ask us to pause processing for a while.
• Objection: you can object to processing based on our legitimate interest.
• Portability: you can request your data in a common file format, to pass it on to someone else.

If you have given consent for something, you can always withdraw it.

Email your request to info@foreverinbusiness.com. We'll respond as soon as possible, and within one month at the latest. To avoid giving data to the wrong person, we may ask you to confirm who you are. Exercising your rights is free.

Not happy with how we handle your data? Let us know first, and we'll gladly sort it out together. You also always have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (opens in a new tab).

If our website or the way we work changes, we update this policy. The date at the top shows when that last happened. If a major change affects you and we have your contact details, we'll let you know.