Privacy policy

Who we are

This site belongs to NABNITECH, registered in the Netherlands under KVK number 42144085, with BTW identification number NL005531252B78. We work from Utrecht.

For anything you send through this site, NABNITECH decides why and how it is handled, which makes us the controller for it. Write to hello@nabnitech.com with any question about this policy, or about data we hold on you.

What this site collects

This site sets no cookies. Not for analytics, not for preferences, not for anything else. You can check that yourself: open your browser's developer tools, look under storage, and the cookie list for this domain is empty.

One thing is kept on your device, and it is not a cookie. Once the opening animation has played, the site records a single value in session storage so it does not play again while you are here. It holds the number one. It identifies nothing and nobody, only this site can read it, and your browser discards it when you close the tab.

Everything else we receive is one of two things: something you typed, which means the contact form, or an aggregate count of pages viewed, which means the analytics. Both are described below. We do not build a profile of you, we do not follow you between visits, and we do not share anything with advertisers.

The typefaces are served from this domain rather than from a font network, so opening a page does not hand your IP address to a third party for that.

This site is hosted on Cloudflare, which keeps ordinary server logs of the requests it handles. Those logs include IP addresses and the pages requested.

The contact form

The form asks four things: what you are still doing by hand, which of our disciplines it touches, your email address, and optionally a phone number. The phone number is optional and stays optional. There is no name field, because we would rather ask in the reply than make you fill one in.

It also carries one field you will never see, which has to arrive empty. It is there to catch automated submissions, and it does nothing else.

A submission travels over an encrypted connection to a small function on this domain, which turns it into an email and hands it to Resend, our email provider, for delivery to hello@nabnitech.com. It is not written to a database, and there is no dashboard of past submissions. The only copy that exists afterwards is the email in our mailbox. The reply address on that email is set to yours, so answering it comes straight back to you.

We use what you send to answer you and, if the conversation goes further, to scope the work. Sending the form does not begin an engagement and does not commit either of us to anything.

Analytics and cookies

Analytics on this site is Cloudflare Web Analytics, and it is cookieless. It sets no cookie, writes nothing to your device, and gives you no identifier, so it cannot recognise you on a second visit and cannot follow you to another site.

What we see is a dashboard of aggregate counts, which means pages viewed and where visits arrived from, rather than a list of visitors.

That is why there is no consent banner here. The rules on consent are about storing or reading information on your device, whatever the mechanism, and a tool that stores nothing does not reach that bar. What is still owed is telling you which tool it is, which is what this section does. The session storage entry described above is the only thing this site keeps on your device, and its whole job is to stop an animation repeating.

You do not have to take our word for any of this. Developer tools will show you every cookie and every stored value this site has. We check the analytics script we ship the same way, by fetching it and reading it for anything that writes a cookie or browser storage, rather than relying on the vendor's description of it.

Data in client engagements

The systems we build for clients are a larger question than this website, and this policy does not cover them.

When we build or run something that handles a client's data, the client decides what happens to that data and we act on their instructions. In that arrangement the client is the controller and we are the processor.

International transfers

Two of the companies this site depends on are in the United States, which is outside the European Economic Area. Cloudflare hosts the site, serves every page, runs the small function the contact form posts to, and provides the analytics described above. Resend delivers the email your submission becomes.

Both name the same two safeguards in their own terms for moving personal data out of the EEA: the European Commission's Standard Contractual Clauses, and certification under the EU-US Data Privacy Framework. We rely on what each of them publishes, and we read it rather than take it on trust.

How long we keep things

We keep things for as long as there is a reason to, and the reason is different for each kind of thing.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable form, and object to us holding it at all. Where we rely on your consent for something, you can withdraw it.

Email hello@nabnitech.com and say what you want. We do not ask you to fill in a form to exercise a right. We aim to answer within one month, which is the period the law allows, and we will tell you if a request is going to take longer than that.

If you think we have handled your data badly, you can complain to us and we will process your request for you.

Changes to this policy

This policy carries the date it took effect, at the top of the page, and that date changes when the policy does.

If we change something that affects what we do with data you have already sent us, we will say so rather than quietly reissuing the page.