# Security policy

> How Narrate keeps this website and your data secure: HTTPS, reputable providers, limited access with MFA and responsible disclosure.

Source: https://narrate.works/security
Language: English (Nederlands: https://narrate.works/beveiliging)
Publisher: Narrate (Narrate B.V.), https://narrate.works

Narrate is a one-person consultancy run by Jeroen Wilms. This page explains, in plain terms, how we keep this website and the information you share with us secure.

## Secure connections

- • **HTTPS:** The whole website is served over HTTPS, so data between your browser and the site is encrypted with TLS
- • **Forms:** Information you send through our contact and newsletter forms travels over the same encrypted connection

## Reputable providers

We do not run our own servers. We rely on established providers with their own security programmes:

- • **Supabase:** Website back end and database, hosted in the EU
- • **HubSpot:** Contact form submissions, newsletter sign-ups and booking calls
- • **Resend:** The email with the invite and the reminders when you book a call
- • **PostHog:** Website analytics, only after you accept analytics cookies
- • **Google Analytics:** Loaded via Google Tag Manager when enabled, and only after you accept analytics cookies

Which data each provider processes is described in our [privacy policy](https://narrate.works/privacy).

## Access

- • **Limited access:** Only Jeroen Wilms has access to the website’s admin tools and to the data you send us
- • **Multi-factor authentication:** Accounts with access to website data and providers are protected with multi-factor authentication
- • **Updates:** Software and dependencies are kept up to date

## If something goes wrong

- • **Breach notification:** If a data breach affects your personal data, we notify you within 72 hours of discovering it. We also notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), as the GDPR requires
- • **Follow-up:** We investigate what happened, limit the damage and take steps to prevent it from happening again

## Privacy

- • **GDPR:** We handle personal data in line with the EU General Data Protection Regulation
- • **Data location:** Data is stored in the EU where possible, with appropriate safeguards for any transfer outside the EEA

## Report a security issue

Found a vulnerability on this website? Please report it responsibly:

- • Email: [impact@narrate.works](mailto:impact@narrate.works)
- • Describe the issue and how to reproduce it
- • We will reply in the next few days
- • We do not penalise responsible disclosure

**Last updated:** October 2026

We update this policy when our setup changes.

## Company details

Narrate B.V.

Statenlaan 8, Studio 1.5

6828 WE Arnhem, the Netherlands

Phone: [+31 20 299 1745](tel:+31202991745)

Email: [impact@narrate.works](mailto:impact@narrate.works)

KvK (Chamber of Commerce): 86369857

VAT: NL863945442B01