Privacy and cookies
We collect only what you give us, and only to reply to you or send what you asked for.
Your privacy choices
Change your mind at any time. Each option works on its own, without contacting us first.
If that address gets Foundry Notes, we've emailed it a link to manage your subscription.
Thanks. Your request is with us.
We've emailed a confirmation to your address. We'll reply from privacy@thetransformationfoundry.nl within one month.
What we collect and why
| When | What | Why and legal basis | How long |
|---|---|---|---|
| You send the contact form | Name, work email, company, what it's about, your message, and how you found us if you say | To reply to you (legitimate interest, or steps before a contract) | 12 months, or for the contract if you become a client |
| You send a quick enquiry on the home page | Work email, the service you're interested in | To reply to you (legitimate interest, or steps before a contract) | 12 months, or for the contract if you become a client |
| You ask for a Customer Insights Journeys demo | First name, company, work email | To prepare a demo from public information about your company, and to reply (legitimate interest, or steps before a contract) | 12 months, or for the contract if you become a client |
| You subscribe to Foundry Notes | Email, first name, consent record (time, and which wording you agreed to) | To send the newsletter (your consent) | Until you unsubscribe. After that your address stays on the list marked "unsubscribed", so we never email you by mistake; ask us and we delete it completely. |
| You ask the assistant a question (Ask) | Your questions as you type them, and the answers | To answer you: your questions go to Anthropic, whose AI model Claude writes the answer (legitimate interest). We don't store them, and our logs never contain what you typed. | We keep nothing of the conversation; it stays in your browser tab. To prevent abuse we keep counts only (questions per session and per coded IP address, and the day’s total cost), deleted within two days. |
| You leave your email in the assistant to keep chatting | Work email (never the conversation) | So Sean may email you about your questions (your consent) | 12 months, or for the contract if you become a client |
| You play Mini Spark and ask for your sketch | Until you press send, your answers stay in your browser (for up to 7 days), not with us. When you send: first name, email, company if given, and your answers | To email you your sketch and discount code, and so Sean may follow up once (your consent) | Your details and answers reach Sean by email and are kept in our mailbox like other enquiries: 12 months, or for the contract if you become a client. The discount code is stored without your name or email, until 3 months after it expires. |
| You book a call | Name, email, chosen time, and anything you add in the booking form | To hold the meeting (steps before a contract) | 12 months |
| You send a privacy request | Email, what you asked for, your message | To handle your request (our legal obligation under the GDPR) | 2 years, to show we handled it |
| You visit the site | Anonymous page views, no personal data | To see which pages help (legitimate interest) | Detailed counts for 7 days, then summaries for up to 6 months |
If you arrive through a link with a campaign tag (for example from an ad or a LinkedIn post) and then send us a message, the tag goes with your message, so we know which link brought you. We don't store it anywhere else and we don't use cookies for this.
Messages from our forms, the assistant and Mini Spark reach us by email, so they're kept in our mailbox for the times above. Our website itself stores only two small things: the Mini Spark discount record (the code, the suggested offer and dates, with a coded fingerprint of your email domain so there's one code per company, never your name or email) and the assistant's counters. When you send a form, Cloudflare keeps a short technical log of that request (for example the time, the page and your IP address) for up to 7 days, so we can fix problems. That log never contains what you typed.
Cookies
We don't use tracking or advertising cookies, and our visitor statistics work without cookies. Dutch law only requires your consent for cookies that aren't strictly necessary, so you won't see a cookie banner here. If that ever changes, we'll ask first.
| Type | What we use | Consent needed? |
|---|---|---|
| Strictly necessary | No cookies. On pages with a form, Cloudflare Turnstile checks that you're not a bot, using your IP address and browser details. It runs in Cloudflare's own frame, sets no cookie on this site, and doesn't track you. | No |
| Your preferences | Language and light or dark mode, stored in your browser only when you choose them. A light or dark choice lasts until your device switches between light and dark; then the site follows your device again. The assistant keeps your conversation in this browser tab until you close it, and your Mini Spark answers in your browser for up to 7 days, until you send them or start over. | No: you asked for it |
| Statistics | Cookieless analytics (Cloudflare Web Analytics): a small script from Cloudflare, on this site's live address only, counts page views. Nothing is stored in your browser and no personal data is kept. | No |
| Tracking and advertising | None | Not applicable |
Booking a call opens Microsoft Bookings, which has its own privacy statement and cookies.
Who processes your data
- Cloudflare: hosts this website, handles form submissions, counts visits with cookieless Web Analytics, and runs the Turnstile spam check. It also stores the Mini Spark discount record (Cloudflare D1, kept in the EU) and the assistant's counters. See Cloudflare's privacy policy (opens in a new tab) and Turnstile privacy addendum (opens in a new tab).
- Resend: sends our emails and Foundry Notes. Emails go out from the EU (Ireland). Resend stores its account data, including the Foundry Notes list and a 30-day log of sent emails, in the United States, under the EU-US Data Privacy Framework and the EU's standard contractual clauses. See Resend and the GDPR (opens in a new tab).
- Anthropic (the Claude API): writes the assistant's answers. Your questions are sent to Anthropic only for that, under Anthropic's commercial terms and data processing addendum, which includes the EU's standard contractual clauses. Anthropic may process them outside the EU, including in the United States. It deletes API questions and answers within 30 days, unless they're flagged as breaking its usage policy (then up to 2 years) or the law requires longer, and it doesn't use them to train its models. See Anthropic's commercial terms (opens in a new tab), data processing addendum (opens in a new tab) and how long it keeps API data (opens in a new tab). Mini Spark doesn't use Anthropic: your sketch is put together by our own rules.
- Microsoft: email, calendar and Bookings (Microsoft 365). See the Microsoft privacy statement (opens in a new tab).
Each has a data processing agreement with us. We never sell your data, and never use it to train AI models.
Your rights
Under the GDPR you can ask to see, correct, download or delete your data, limit how we use it, or object to its use. You can withdraw consent at any time. We reply within one month. Use your privacy choices above, or email privacy@thetransformationfoundry.nl.
Contact and complaints
The Transformation Foundry, Spion 8, 4208 AM Gorinchem, Netherlands. KVK 98857495. Privacy questions: privacy@thetransformationfoundry.nl. Anything else: info@thetransformationfoundry.nl.
Not happy with how we handle your data? Tell us first. You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (opens in a new tab).