Privacy
policy

Last updated: 15 November 2026

This Privacy Policy is an English translation of the original Dutch version ("Privacybeleid"), provided for convenience. In case of any discrepancy, the Dutch version prevails.

1. Who we are

Convolutio is responsible for processing personal data as described in this privacy policy. We are a small team: you always deal directly with the people who actually use your data.

Convolutio
Roode Steen 7, 1621 CV Hoorn, The Netherlands
Email: info@convolutio.nl
Phone: +31 (0)6 47 94 17 60
Chamber of Commerce (KvK): 75851792

2. What data we process and why

Contact form and call requests. When you contact us or request a call through our website, we process your name, company name, email address, phone number, your message and your preferred timing. We use this to answer your question and, if you wish, to prepare a quote. Legal basis: taking steps at your request prior to entering into an agreement.

Facebook and Instagram ads. When you fill in a form through a Convolutio ad on Facebook or Instagram, we receive the details you enter there: your name, email address, phone number and the address of your current website. We use this to create a no-obligation example of a new website and to contact you about it. To do so, we look at your current, public website. Legal basis: taking steps at your request. Meta Platforms Ireland Ltd. also processes data under its own privacy policy.

Email, phone and WhatsApp. When you contact us directly, we process the details you provide in order to handle your question.

Clients. For clients we process contact and billing details and the project information needed to carry out the work. Legal basis: performance of the agreement and our legal (tax) obligations.

Client portal. If you have an account on our portal, we process your email address, an encrypted password and the data belonging to your project. Legal basis: performance of the agreement.

Website visits. We use our own simple statistics script to see which pages are visited and which page you came from. This script uses your IP address and browser information, but immediately and irreversibly hashes them into a counter that changes daily and cannot be traced back to you; the IP address or browser information itself is not stored in readable form. We do not set cookies for this and we do not build visitor profiles. Our web server also keeps technical log files, including IP addresses, to keep the website secure and working. Legal basis: our legitimate interest in a secure, working website.

3. Cookies and similar technologies

This website does not set tracking or advertising cookies and contains no advertising pixels. We only store your preference for a light or dark theme in your own browser (local storage). That preference is never sent to us.

We use Google Fonts for the typefaces on this website. Your browser loads the fonts from Google's servers, which means Google can see your IP address.

4. Who we share data with

We never sell your data. We only share data when necessary:

• with the parties that host our website and email for us, on servers within the European Union;
• with Meta, insofar as you contact us through Facebook or Instagram;
• with our accountant and the Dutch Tax Administration, insofar as needed for the administration of assignments;
• when required by law.

5. How long we keep data

• Requests that do not lead to an assignment: no longer than 12 months after the last contact.
• Client data: for as long as we work together, and billing and administrative records for 7 years due to the statutory retention obligation.
• Example websites we create based on a request: deleted when you decide not to proceed, and no later than 12 months after the last contact.
• Statistics and server logs: no longer than needed for their purpose, and at most 12 months.

6. Security

We take appropriate measures to protect your data, including an encrypted connection (HTTPS), encrypted password storage and access to data limited to the people at Convolutio who need it.

7. Your rights

You have the right to access, correct or delete your data. You can also object to processing, have processing restricted, or request your data in a common format. To do so, email info@convolutio.nl. We respond within one month.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl. We appreciate it if you contact us first, so we can resolve it.

8. Changes

We may update this privacy policy, for example when our services change. The date at the top of this page shows when it was last updated.