Privacy Policy

Codiqe VOF is a VOF (vennootschap onder firma) based in the Netherlands. We build websites, web apps, and digital products for businesses across the European Union.

Controller (verwerkingsverantwoordelijke):
Codiqe VOF
Legal form: VOF
KvK: 90478002
BTW: NL865330141B01
Email: support@codiqe.com
Registered address: Herenstraat 12 L, 1211CB Hilversum, Netherlands

Contact form

When you fill in our contact form, we collect:

• Your name
• Your email address
• Your project type and budget (optional fields)
• Your message (optional)

Why: To respond to your enquiry and, if applicable, prepare a project quote.

Legal basis: Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering a contract.

We do not collect this data for marketing purposes. We do not add you to a mailing list. We only contact you in response to your enquiry.

Website analytics

We use two analytics tools, both deliberately chosen for being privacy-friendly:

• Plausible Analytics — cookieless, aggregated, no personal data. Hosted in the EU.
• Vercel Analytics — cookieless and privacy-friendly by design; collects anonymized, aggregated page views and Core Web Vitals only.

Neither tool uses cookies, neither tracks you across sessions or websites, and neither processes personal data under Article 4(1) GDPR. Because no personal data is processed, no consent is required and no cookie banner is shown for analytics. You can read the underlying data policies at plausible.io/data-policy and vercel.com/legal/privacy-policy.

Server logs (hosting)

Our hosting provider (Vercel) keeps short-term technical request logs (IP address, user agent, requested path, timestamp) for the purposes of operating the site, preventing abuse, and debugging. These logs are retained by Vercel for a limited period under their own privacy policy and are not used by us for any other purpose.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in keeping the site secure and available.

No other tracking

We do not use Google Analytics, Meta Pixel, or any other third-party tracking or advertising tool. We do not serve targeted advertisements.

We rely on a small number of EU- or GDPR-aligned sub-processors to operate the site and follow up on enquiries. None of these sell or use your data for any purpose other than delivering the service to us.

• Resend (resend.com) — sends and receives transactional emails (contact-form notifications and your auto-reply). GDPR-compliant under Standard Contractual Clauses.
• Vercel (vercel.com) — hosting and edge delivery for the website. Processes request data under Standard Contractual Clauses.
• Supabase (supabase.com) — stores contact-form submissions and their delivery status in our admin database, hosted in the EU.
• Google Fonts (fonts.gstatic.com) — serves the Inter / Geist / JetBrains Mono webfonts on first page load. The CDN sees your IP address as part of standard HTTP request processing; we do not pass any other personal data.

We do not share your data with any other third parties.

In addition to the public-site processing above, if you become a sales prospect (we send you an outbound email) or a paying client, we store additional information in our internal admin tooling:

• Contact name and email
• Company name and website URL
• Notes from calls and email threads
• For paying clients: invoicing and project-tracking data, retained under Belastingdienst record-keeping rules (see below)

For sales prospects sourced through our AI lead search tool, we use the following additional processors to analyze publicly-available website content before contacting you:

• Anthropic (anthropic.com) — the Claude API analyzes the text content of publicly accessible websites to produce a fit score and draft email. We do not send any personal data; the input is the public homepage HTML.
• Serper.dev(serper.dev) — proxies Google search queries we make to discover prospect websites. The query is a generic industry keyword (e.g. “restaurant Amsterdam”), not your data.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in identifying potential B2B clients from publicly available business information. You can opt out of being contacted at any time by replying to any email from us, or by emailing support@codiqe.com.

Contact-form submissions (name, email, message) are retained for a maximum of 2 years from the date of last contact, or until the matter is resolved — whichever is shorter.

For prospects we have not engaged with, we delete the record within 12 months of the last interaction.

If a project results in a contract, data necessary for the contractual relationship (including invoices, payment records, and tax documentation) is retained for 7 years to comply with the Dutch tax-administration retention rules (Algemene wet inzake rijksbelastingen, art. 52(4)). Our invoices include 21% Dutch BTW (VAT) and are filed accordingly with the Belastingdienst.

Most processing happens within the European Union or under Standard Contractual Clauses (SCCs). Anthropic processes API calls in the United States; we rely on the EU-US Data Privacy Framework and their published SCCs. Google Fonts CDN may route requests through global edge servers as part of HTTP delivery. No personal data beyond what is strictly necessary for delivery of the service is transferred, and never for any marketing or profiling purpose.

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure— request deletion of your data (“right to be forgotten”)
• Restriction — request that we limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to our processing based on legitimate interests (including any outbound sales contact)

To exercise any of these rights, email us at support@codiqe.com. We will respond within 30 days.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Dutch data-protection authority:

Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl
Phone: +31 (0)70 888 85 00

We may update this policy from time to time. The “Last updated” date at the top of this page shows when changes were last made. Continued use of the website after changes constitutes acceptance of the updated policy.