Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

2. Personal Data We Collect

2.1 Data You Provide

When you sign up for early access or contact us, we collect:

• Email address
• Name (if provided)
• Any information you include in messages to us

2.2 Automatically Collected Data

When you visit our website, we may collect (only with your cookie consent):

• IP address (anonymised)
• Browser type and version
• Pages visited and time spent
• Referring website
• Device information

3. Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): When you sign up for our mailing list, you consent to receive marketing emails about Postnaut. When you accept cookies, you consent to analytics tracking. You can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): We process basic technical data (server logs) to maintain the security and proper functioning of our website. Our interests are balanced against your rights and are not overridden by your interests.
• Legal obligation (Art. 6(1)(c) GDPR): We may process data where required by applicable Dutch or EU law.

4. How We Use Your Data

• To send launch updates and marketing emails (only if you signed up)
• To respond to your enquiries
• To analyse website usage and improve our service (only with cookie consent)
• To comply with legal obligations

We will not use your data for any purpose incompatible with the purpose for which it was collected.

5. Cookies and Tracking

We only set non-essential cookies after you give explicit consent via our cookie banner. You can change or withdraw your consent at any time using the Cookie Settings link in the footer.

Types of Cookies We Use:

• Essential cookies: Required for website functionality (no consent required). We store your cookie preference in your browser's local storage.
• Analytics cookies (consent required): Google Analytics (anonymised IP) and Ahrefs Analytics to understand how visitors use our site. These are only loaded after you click "Accept".

Refusing analytics cookies does not affect your ability to use the website.

6. Data Processors and Third Parties

We do not sell your personal data. We share data only with the following trusted processors who act under our instructions:

We may also disclose data when required by law or to protect our legal rights.

7. International Data Transfers

Some of our processors are based outside the European Economic Area (EEA), including in the United States. Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46 GDPR).

8. Data Retention

• Mailing list (email addresses): Retained until you unsubscribe or request deletion.
• Analytics data: Retained for 14 months by Google Analytics (our setting). Ahrefs analytics are session-based.
• Server logs: Retained for up to 30 days for security purposes.
• Enquiry data: Retained for as long as necessary to resolve your enquiry, and thereafter as required by law.

9. Your Rights (GDPR)

As a data subject under the GDPR, you have the following rights:

• Right of access (Art. 15): Request a copy of your personal data.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18): Request that we restrict processing of your data.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Right to Lodge a Complaint

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Dutch supervisory authority:

We encourage you to contact us first at [email protected] so we can try to resolve the issue.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All data is transmitted over encrypted connections (HTTPS/TLS). However, no method of transmission over the internet is 100% secure.

12. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email (if you are on our mailing list) or by displaying a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

14. Contact Us

For any privacy-related questions or to exercise your rights: