Privacy Statement

1. Introduction

This website (www.plaiwrks.com) is operated under the trade name Plaiwrks. Plaiwrks processes personal data carefully, securely, and transparently, in accordance with the General Data Protection Regulation (GDPR).

Plaiwrks is a trade name of ECVL Digital Services, which acts as the data controller for all personal data processed via this website.

This privacy statement explains what personal data is collected, for what purposes, on which legal bases, how long data is retained, and what rights you have.

2. Personal Data Collected

2.1 Contact form data

When you submit the contact form, the following personal data may be collected:

• Name
• Email address
• Phone number
• Company name
• Selected service type
• Message content

This information is sent to the business email inbox hosted by Google Workspace.

2.2 (Future) website analytics

In the future, Plaiwrks may use Google Analytics 4 (GA4) to gain insight into website usage.

If activated, analytics data may include:

• Pages visited
• Time spent on pages
• Click behaviour
• Referring sources

IP anonymisation will be enabled upon activation. At this moment, no analytics tools are active.

3. Purposes and Legal Bases

Purposes

Personal data is processed for:

• Responding to enquiries or contact requests
• Preparing offers, intakes, or potential collaborations
• Administrative processing if a client relationship is established
• Improving the website (only when analytics is activated)

Legal bases

• Pre-contractual necessity – when you contact Plaiwrks regarding services
• Legitimate interest – managing communication and ensuring proper website operation
• Legal obligation – compliance with tax and accounting laws

Future analytics or marketing activities will only take place with explicit consent.

4. Retention Periods

Personal data is not retained longer than necessary.

• Contact form submissions: up to 12 months
• Client and administrative data: 7 years (statutory obligation)
• Analytics data: up to 26 months (if activated)
• Server logs and backups: standard hosting retention periods

5. Sharing of Personal Data

Personal data is shared only when necessary for website operation or service delivery, with:

• Lovable Cloud – website hosting
• Google Workspace – email hosting, document storage and internal processing
• Hostnet – domain registration and DNS management
• Google Analytics 4 – privacy-friendly website analytics (upon activation)

Where personal data is processed outside the European Economic Area, appropriate safeguards apply, such as Standard Contractual Clauses and applicable Data Processing Agreements.

Personal data is never sold to third parties.

6. Security Measures

Plaiwrks applies appropriate technical and organisational measures, including:

• HTTPS-secured website
• Secure hosting infrastructure
• Secure Google Workspace email environment
• Protected cloud-based document storage
• IP anonymisation for analytics (when active)
• Access restricted to authorised personnel only

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request deletion of your data
• Object to processing
• Request restriction of processing
• Request data portability
• Withdraw consent at any time (where applicable)

You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Controller Information