Privacy Policy

Who is responsible

Bianca Welgraaf is responsible for the personal information submitted through biancawelgraaf.com. For any privacy question or request, email bianca.welgraaf@bwgrowthpartners.org.

Information you provide and why

The contact form collects your first and last names, email address, company, country, phone number and message. Company, country and phone are optional; the country initially shows the Netherlands, which you can change or clear. This information is used only to respond to your enquiry and handle related correspondence, not to subscribe you to marketing.

The newsletter collects your email address and, optionally, your name. We also record the signup source, signup date, confirmation status and confirmation date, together with a random confirmation token. Your information is used only to manage and send the newsletter you opt into, including confirmation, welcome and subscription-management emails. Bianca receives a notification when you confirm.

Newsletter signup requires an affirmative choice and a further confirmation through the link emailed to you. You can unsubscribe using the link in newsletter emails or contact Bianca. Please do not include sensitive personal information in your message.

Legal bases

Enquiries are handled on the basis of legitimate interests in responding to business correspondence or, when relevant, taking steps at your request before entering a contract. Newsletter emails and optional Google Analytics cookies rely on your consent. You can withdraw consent at any time without affecting processing that was lawful before withdrawal.

Necessary security and technical operations, and cookie-free, non-identifying visitor counting, support the legitimate interests of maintaining and improving a secure website. Legal obligations may require some records to be retained.

Cookies and Google Analytics

Google Analytics does not load until you accept optional analytics, regardless of your location. It measures page visits and actions such as contact-form submission and newsletter signup; names, email addresses, phone numbers and message contents are not sent as event details. Google receives technical and usage information and may set first-party analytics cookies, including identifiers used to distinguish browsers. Google Analytics cookies can last up to two years.

Your choice is stored locally in your browser for up to 12 months (a refusal for approximately six months). You can change it through Cookie settings in the footer. A browser Global Privacy Control signal disables optional analytics even after a previous acceptance. Necessary cookies or storage may support security, traffic protection and private administrator sign-in without optional analytics consent.

Lovable visitor analytics

Lovable visitor analytics remains enabled. Clicks are recorded after you accept analytics, for visitors in the EU/EEA, UK, Switzerland, Canada and locations that cannot be established. This site sets denied analytics defaults worldwide, so the same choice is applied for other visitors too. Clicks are not recorded when your browser sends Global Privacy Control.

Page visits, time on page, page speed and errors are recorded for every visitor before any banner choice, without cookies and without identifying anyone. Lovable’s analytics stores nothing on your device, does not keep IP addresses and cannot recognise returning visitors.

It records pages visited, where visitors came from, country, browser, operating system, device type, time spent, page loading speed, errors and, subject to the choice above, clicks. Detailed data is kept for 90 days and daily summaries for a year.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

Storage, hosting and other providers

Lovable Cloud hosts the website, privately stores contact submissions and newsletter records, and provides managed email delivery. Authorised access is restricted to site administration and service providers as needed to operate these services. Cloudflare provides hosting infrastructure, security and delivery of the site’s R2-backed images. Google Fonts supplies the typeface; requests may convey your IP address and browser information to Google. Google Analytics receives usage information only after consent.

Microsoft Bookings opens on Microsoft’s website when you choose to book a conversation. LinkedIn and Credly links similarly open those providers’ websites. They are not loaded as embedded tracking tools here. Information you share there is handled under their own privacy policies. The private administrator area uses sign-in storage to maintain the administrator’s session; public visitors do not need an account.

Your submitted details are not sold or shared for unrelated marketing. Providers may process data outside the European Economic Area. Where personal data is transferred internationally, the applicable provider arrangements should use an adequacy decision or appropriate safeguards, such as standard contractual clauses. You may contact Bianca for information about applicable arrangements; a particular storage country is not promised here.

Retention

Contact correspondence is kept only as long as needed to address the enquiry, maintain necessary related business records and meet legal obligations. Newsletter records are kept while a subscription is active. Unconfirmed or inactive signups should be reviewed and removed when no longer needed. Following withdrawal, details should be deleted or limited to the minimum needed to respect your opt-out and demonstrate the handling of consent.

No fixed deletion schedule or automatic deletion is currently configured for form records. Retention requires periodic review by the site owner; backup and provider log retention can differ. The separate retention periods for Lovable analytics are stated above.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or a portable copy of your personal information. You may object to processing based on legitimate interests and withdraw consent to newsletters or optional analytics. You may also complain to your local data protection authority, including the Dutch Autoriteit Persoonsgegevens.

Send requests to bianca.welgraaf@bwgrowthpartners.org. Only information reasonably necessary to verify and handle your request will be sought. Requests are normally answered within one month; any lawful extension will be explained.

Updates

This policy may be updated when the website or its handling of information changes. The date above identifies the current version.