Privacy notice
What we collect, why we collect it, and how to have it removed.
Last updated 29 August 2026
Who is responsible
The controller for the personal data described here is:
What we collect
Only what you type into the report form on the home page:
- Your website address — so we know which business to look for in the answers.
- Your industry — so we ask the questions your buyers actually ask.
- Where you sell — so the questions are scoped to the right place. Optional.
- Your email address — so we can send the report back to you.
That is the whole form, and it is the only place on this site where we ask you for anything.
When you submit it, our host also records the IP address the submission came from and your browser's user-agent string. That happens automatically as part of receiving the form and filtering out automated spam. We do not use either for anything else, and we do not use them to identify or track you. Our legal basis for this narrow use is our legitimate interest in keeping the form usable — Article 6(1)(f).
What we do not collect
This site sets no cookies. There is no analytics, no tracking pixel, no advertising script and no third-party embed. We do not build a profile of you, and we do not track you across other sites. Fonts are served from this domain rather than a font network, so simply reading this page does not report your visit to anyone. The IP address noted above is recorded only when you actively submit the form, never from browsing.
Why we use it, and on what legal basis
We use your details for one purpose: to prepare the report you asked for and send it to you. That is processing necessary to take steps at your request before entering into a contract — Article 6(1)(b) of the GDPR.
If you later ask us not to contact you again, we keep a note of that request so we can honour it. That rests on our legitimate interest in respecting your wishes — Article 6(1)(f).
We will not add you to a mailing list off the back of a report request, and we will not send you marketing you did not ask for.
Who else sees it
We do not sell your data, and we do not share it with anyone for their own purposes.
Two service providers process it on our behalf, under contract and on our instructions only:
- Netlify — hosts this site and receives the form submission. Netlify is a US provider; transfers rely on the EU Standard Contractual Clauses.
- Our email provider — carries the report to your inbox.
If you book a call, that booking happens on Calendly, which is a separate service with its own privacy notice. We do not pass your report-form details to Calendly, and it does not pass its details back to this site.
How long we keep it
We keep your report request and the report itself for 12 months from the date you submit the form, then delete it. If you become a client, the relevant records are kept for as long as we work together and for the seven years Dutch tax law requires of business records.
You do not have to wait for that. Ask us to delete it and we will.
Your rights
Under the GDPR you can ask us to give you a copy of what we hold about you, correct it, delete it, restrict what we do with it, or object to it. You can also ask for it in a portable format.
To do any of that, email hello@vanfound.nl. We will respond within one month. We do not need a form, a reason, or an account — just the request.
If you think we have handled your data badly and we have not put it right, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes to this notice
If we change how we handle your data, we will change this page and update the date at the top of it.