Security policy

Secure connections

• • HTTPS: The whole website is served over HTTPS, so data between your browser and the site is encrypted with TLS
• • Forms: Information you send through our contact and newsletter forms travels over the same encrypted connection

Reputable providers

We do not run our own servers. We rely on established providers with their own security programmes:

• • Supabase: Website back end and database, hosted in the EU
• • HubSpot: Contact form submissions, newsletter sign-ups and booking calls
• • Resend: The email with the invite and the reminders when you book a call
• • PostHog: Website analytics, only after you accept analytics cookies
• • Google Analytics: Loaded via Google Tag Manager when enabled, and only after you accept analytics cookies

Which data each provider processes is described in our privacy policy.

Access

• • Limited access: Only Jeroen Wilms has access to the website’s admin tools and to the data you send us
• • Multi-factor authentication: Accounts with access to website data and providers are protected with multi-factor authentication
• • Updates: Software and dependencies are kept up to date

If something goes wrong

• • Breach notification: If a data breach affects your personal data, we notify you within 72 hours of discovering it. We also notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), as the GDPR requires
• • Follow-up: We investigate what happened, limit the damage and take steps to prevent it from happening again

Privacy

• • GDPR: We handle personal data in line with the EU General Data Protection Regulation
• • Data location: Data is stored in the EU where possible, with appropriate safeguards for any transfer outside the EEA