Privacy statement

1. Who is responsible for your data?

Noxtrack is a sole proprietorship of Esmee Peters, established in the Netherlands (Chamber of Commerce no.: 88332217). In this statement we refer to ourselves as 'Noxtrack', 'we', or 'us'.

For questions about this statement or about your personal data, you can reach us at hello@noxtrack.com.

2. What data we process

We process as little personal data as possible. Specifically:

• Email address, company name and language preference — when you request access.
• Email address and language preference — when you request the register template. If you request it below an article, we record which article that was.
• Visitor statistics without personal data — page viewed, referring website, country, browser and device type in broad categories, and a handful of events on the site: that a form was submitted, that the pricing block came into view, and that someone clicked through from an article. No cookies are set and no IP addresses are stored; this data cannot be traced back to you.
• Technical log data — IP address and user-agent are processed temporarily by our hosting provider for security and debugging.

3. Why we process this data

Each processing activity has a purpose and a legal basis under the GDPR:

• Access request: to get in touch, set up your environment and keep you posted — basis: performance of your request (art. 6(1)(b) GDPR).
• Register template: to send you the file, and afterwards to keep you posted — basis: performance of your request (art. 6(1)(b) GDPR) and, for those further messages, your consent (art. 6(1)(a) GDPR). You can unsubscribe from any email. We use the article you came from only to see which texts bring people to the template.
• Visitor statistics via Simple Analytics: to understand which parts of the site work and improve the site — basis: legitimate interest (art. 6(1)(f) GDPR). Because no cookies are set and no personal data is processed, consent is not required.
• Hosting and security: to keep the site safe and available — basis: legitimate interest (art. 6(1)(f) GDPR).

4. How long we keep your data

We don't keep data longer than necessary:

• Access requests and template requests are kept until you unsubscribe or for up to 24 months after Noxtrack becomes publicly available.
• Visitor statistics are stored in aggregate and contain no personal data.
• Server logs are usually deleted by the hosting provider within 30 days.

5. Who we share data with

We don't sell your data. We do rely on a number of processors to deliver the service. We have a data processing agreement with each of them:

• Brevo (Sendinblue SAS, France) — for managing sign-ups and email communication. Processing within the EU.
• Simple Analytics B.V. (Amsterdam) — for visitor statistics. Processing and storage within the Netherlands.
• Netlify, Inc. — for hosting the website. Transfer to the United States under the EU–US Data Privacy Framework, with appropriate safeguards.

6. Transfers outside the EU

Our hosting provider Netlify is based in the United States. Transfers take place under the EU–US Data Privacy Framework, supplemented by standard contractual clauses where needed. For everything else we use processors within the EU.

7. Your rights

Under the GDPR, you have a number of rights regarding your personal data:

• Access — request which data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted ('right to be forgotten').
• Restriction — temporarily pause processing.
• Objection — object to processing based on legitimate interest.
• Data portability — receive your data in a common format.
• Withdraw consent — withdraw any consent given at any time, without affecting prior processing.

Send a request to hello@noxtrack.com. We respond within 30 days.

8. Security

We take appropriate technical and organisational measures to protect your data: encrypted connections (TLS), access controls, and carefully selected processors with demonstrable security standards.

9. Complaints

Have a complaint about how we handle your data? Please contact us first at hello@noxtrack.com — we'd like to resolve it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

10. Changes

We may update this statement when needed, for example when adding new functionality or new processors. The most recent version is always on this page, with the date of last update at the top.