Privacy & cookies

Who is responsible

This site is run by Alfred Westerveld, a sole trader based in the Netherlands. For anything on this page — including access, correction or deletion requests — email hello@alfredwesterveld.com. I am the data controller under the GDPR.

What I collect

When you send a form. The contact and audit forms collect your name, email address, website URL and message. That is emailed to me and nothing else — no CRM, no mailing list, no advertising platform. I keep the correspondence as long as it is useful for the enquiry or an ongoing engagement, and delete it on request.

Analytics, before you decide anything. Google Analytics 4 and Microsoft Clarity run for every visitor, but in their cookieless modes: no cookie is written, no identifier is stored on your device, and you cannot be recognised on a later visit. GA4 sends a consent-mode ping carrying the page, the referrer and a coarse location derived from a truncated IP. Clarity gives each page view a throwaway ID, so a session recording exists but cannot be linked to anything else you do.

Analytics, if you allow cookies. Both tools switch to cookie-backed tracking, which lets me see a whole visit as one journey rather than a series of unconnected page views, and tell a returning visitor from a new one:

• Google Analytics 4 — which pages are visited, where visitors arrive from, and which device they use, joined into sessions. IP addresses are truncated by Google before storage. Retained for 14 months.
• Microsoft Clarity — session recordings and heatmaps showing clicks and scrolling, now stitched across pages, so I can see where the site confuses people. Clarity masks text input by default, so what you type into a form is not recorded. Retained for 13 months.

Advertising storage is refused for both tools at all times, whatever you choose — this site runs no advertising and builds no advertising profile. Both are American companies, so the data reaches servers outside the EU under the EU–US Data Privacy Framework.

What is stored on your device

Without consent: nothing but your choice itself, kept in local storage under analytics-consent, which never leaves your device. The analytics above run without writing any cookie at all.

The site is served by Cloudflare, which processes request metadata such as your IP address to deliver pages and block abuse. That is necessary to run the site at all and happens for every visitor.

Legal basis

Storing cookies on your device runs on your consent, which you can withdraw at any time. The cookieless measurement rests on legitimate interest: it stores nothing on your device and cannot single you out, so it does not need consent — object by email and I will exclude you.

Answering your enquiry and delivering work you have asked for rests on legitimate interest and, where we agree an engagement, on performance of a contract.

Changing your mind

Reopen the banner and choose again — the new choice takes effect immediately. Refusing after having allowed cookies erases the Clarity cookies already on your device and drops both tools back to cookieless mode; ask me by email if you also want data already collected deleted.

Cookie settings

Your rights

You can ask for a copy of your data, have it corrected or deleted, object to processing, or ask for it in a portable format. Email me and I will respond within a month. If you are not satisfied, you can complain to the Dutch DPA, the Autoriteit Persoonsgegevens.