Privacy Notice

Website delivery

Cloudflare hosts and delivers this website and helps protect it against misuse. It processes technical request information, including your IP address, approximate location, request time, page or file requested, request method and response status. We use proportionate request and security information to keep the website available and investigate misuse.

Reliability measurement

We use Cloudflare Web Analytics to understand visits and page-loading performance, including visits from Europe. Measurements include the page address, referring page, browser and device characteristics, loading timings and a page-load identifier. Cloudflare states that this service does not use cookies or browser localStorage, fingerprint visitors or track individuals across its customers' websites.

Cloudflare also provides Network Error Logging. Supporting browsers can report connection failures to Cloudflare, including technical details of the failed request and connection. The reporting instructions currently last seven days in your browser and may be renewed on later visits. This is separate from server retention. Cloudflare says it discards the client IP used to process a network-error report when that processing request ends, after deriving approximate network and location information.

We use these measurements for limited website statistics and reliability, not advertising or linking diagnostics to your email correspondence. Cloudflare may use temporary security measures, such as a challenge if it detects suspicious traffic.

Email enquiries

If you email [email protected], we receive your email address, message and any contact details or attachments you send. We use these to answer your enquiry and manage relevant follow-up. Messages reach our business Gmail mailbox, provided through Google Workspace. Ben handles general enquiries sent to this address.

Emailing us is voluntary. If you do not provide enough information, we may be unable to answer. Please send only information relevant to your enquiry. You do not need an account or a contact form to browse this website. Recruitment, customer services and our separate ventures may involve other purposes and notices.

Why we may use data

We rely on legitimate interests under Article 6(1)(f) of the GDPR for three separate purposes: delivering and securing this website; answering general business enquiries and managing relevant follow-up; and understanding and investigating page-loading or connection problems. We limit the information used to what is needed for each purpose. These interests do not authorise unrelated processing. You can object by contacting us.

We do not use website or general-enquiry information for solely automated decisions that have legal or similarly significant effects on you.

How long we keep data

Our adopted policy is to remove inactive general-enquiry correspondence from active use 12 calendar months after the last meaningful exchange. We are introducing manual review to apply this policy to existing correspondence; automatic deletion is not in place. We review the policy every six months. Where particular information remains necessary for an active relationship, a contract, a dispute or an identified legal obligation, we retain only what is needed and document the reason and review or end date.

Deleted messages can remain temporarily recoverable through Google. Gmail normally keeps messages in Trash for 30 days; Workspace administrators may have a further 25-day recovery window. Google's data-processing terms allow up to 180 days for system deletion after customer deletion becomes unrecoverable, subject to legal requirements. We have not verified whether additional retention holds or separately stored copies apply to this mailbox. The 12-month policy is not a promise that every provider copy disappears at the same time.

On our current Cloudflare plan, HTTP request and security-analytics history is available for up to 90 days and security-event history for up to 31 days. Web Analytics keeps unsampled measurements for seven days and then uses sampling or aggregation, with six months of history available. These access windows do not establish when every provider copy is erased. Cloudflare's data-processing terms provide for retention until the service agreement ends or the information is no longer needed to perform it, whichever comes first, subject to legal requirements.

Our policy for identifiable technical copies held by TFH is deletion when the legitimate investigation ends, unless a documented legal or dispute-related need requires keeping the minimum necessary information longer.

Recipients and transfers

Cloudflare processes website delivery, security and reliability information. Google Workspace, billed by Google Cloud EMEA Limited, provides our email service. Provider personnel and their service providers may process information as needed to provide these services. See Cloudflare's service subprocessor list and Google Workspace's subprocessor list.

Our providers may process information outside the European Economic Area, including in the United States. Their data-processing terms provide for the EU-US Data Privacy Framework for covered US transfers and EU Standard Contractual Clauses where required for other restricted transfers. See Cloudflare's data-processing terms, Google's data-processing terms and Google's transfer arrangements. Contact us for information about, or a copy of, relevant safeguards.

Links to our ventures and social platforms take you to separate websites with their own privacy notices.

Your rights

You can ask for access to your personal data, correction, deletion or restriction of its use, subject to the conditions in the GDPR. You can object to processing based on legitimate interests. Where the GDPR conditions apply, you can also ask to receive your data in a portable format or have it transferred to another controller.

Contact [email protected] to ask a question or exercise your rights. You can also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or another competent supervisory authority.

Company