Privacy policy

Who we are

Cypher B.V. is responsible for the personal data described in this policy. We are based at Burgemeester Drijbersingel 51, 8021 JB Zwolle, the Netherlands.

For privacy questions or requests, email tom@cypher.build.

This policy covers our website and enquiries. Personal data we process on a client’s behalf is covered by the relevant client agreement and data processing arrangements.

What we collect

When you use our contact form, we receive your first and last name, job title, business email address, company name, and any message you choose to include. When you email us directly, we receive your email address and the information in your message.

The form marks required fields. We use these to understand your enquiry and respond to you. Your message is optional. You can also contact us by email. Please do not send passwords, sensitive personal information, or client datasets through the form.

Our hosting provider processes technical information needed to deliver and protect the website, such as IP addresses, requested URLs, browser information, and request times.

Why we use it

• Answering enquiries. We use your contact details and message to respond, arrange a conversation, and discuss our services. This serves our legitimate interest in communicating with prospective business clients.
• Preparing an agreement. If you ask us to take steps towards a contract with you personally, we process the information necessary to take those steps.
• Keeping the website working. Technical data helps deliver pages, investigate errors, and prevent abuse. This serves our legitimate interest in operating a reliable, secure website.
• Meeting legal obligations. We may retain or disclose information where the law requires it.

Sending an enquiry does not subscribe you to a newsletter. The contact form does not make automated decisions about you or score your enquiry.

Providers and transfers

Cloudflare hosts and delivers this website. Resend delivers contact-form messages to our business email inbox. Our email provider also processes messages so we can receive and reply to them. We do not sell your personal data.

These providers may process data outside the European Economic Area, including in the United States. Their published data processing terms describe transfer safeguards, including the European Commission’s standard contractual clauses. See Cloudflare’s data processing terms and Resend’s data processing terms. You can contact us for information about the safeguards relevant to your data.

Links to LinkedIn and AI services take you to third-party websites. The AI summary links contain a prompt about our public website, not your contact-form message. Those providers handle your use of their services under their own privacy policies.

Cookies and storage

With your consent, we use PostHog EU to measure page visits, traffic sources, contact-button clicks, testimonial navigation, and successful contact requests. PostHog uses browser storage to recognise anonymous visitors and sessions. We do not send contact-form contents to PostHog, record sessions, or use advertising cookies.

Analytics stays off until you accept. We remember your choice in browser storage for 180 days. You can change your choice or withdraw consent using the cookie button at the bottom of the page. Withdrawal stops new collection and clears PostHog storage; requests already sent with consent may finish or retry. Your browser also lets you clear website storage.

How long we keep data

We keep enquiry correspondence for as long as needed to handle your request and relevant follow-up. We consider whether the conversation is ongoing, whether it leads to a client relationship, and whether records are needed to meet legal obligations or resolve a dispute.

Technical logs follow the retention settings of the services that process them. Contact us if you want to know what information we still hold about you or to request deletion.

Your rights

Under the GDPR, depending on the circumstances, you can:

• Ask for access to your personal data and a copy of it.
• Have inaccurate information corrected or request deletion.
• Request that we restrict processing.
• Object to processing based on legitimate interests.
• Receive data in a portable format where the right to portability applies.
• Withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing.

Email tom@cypher.build to make a request. We may need information to verify your identity. We respond within one month; if a permitted extension is necessary, we explain why within that month.

You can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or your local data protection authority.

Changes to this policy

We update this page when our website or data practices change. If a change affects how we use information you have already provided, we will give any additional notice required by law.