Privacy Policy

1. Data Controller

This website is operated by:

Gareth Terblanche, trading as G-IT-up
Klimopzoom 51
2353 RG Leiderdorp
The Netherlands
BTW (VAT): NL676005652B01

2. What Data We Collect

We collect and process the following categories of personal data:

2.1 Contact Form Submissions

When you submit our Request Information form, we collect:

• Your name
• Company name (optional)
• Email address
• Your message/inquiry

2.2 Account Data

If you create an account on our platform, we collect:

• Email address
• Authentication credentials (securely hashed)

2.3 Cookies and Technical Data

We use essential cookies for:

• Authentication session management
• Cookie consent preferences

We do not use tracking cookies or third-party analytics cookies.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

• Consent (Article 6(1)(a)) — For contact form submissions and cookie usage
• Contractual necessity (Article 6(1)(b)) — For account management and service delivery
• Legitimate interest (Article 6(1)(f)) — For security, fraud prevention, and service improvement

4. How We Use Your Data

• To respond to your inquiries and provide requested information
• To deliver and maintain our services
• To manage your account and authentication
• To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We share data only with the following processors:

• Supabase Inc. — Database hosting and authentication (data stored in EU region)
• Vercel Inc. — Website hosting and delivery

6. Data Retention

• Contact form submissions: Retained for 2 years, then deleted
• Account data: Retained for the duration of your account, plus 30 days after deletion
• Cookie preferences: Stored locally in your browser

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access — Request a copy of your personal data
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your personal data
• Right to restrict processing — Request limitation of how we use your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interest
• Right to withdraw consent — Withdraw consent at any time without affecting prior processing

To exercise any of these rights, please use the contact form on our website.

8. International Transfers

Some of our service providers (Vercel) may process data outside the European Economic Area. Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication, and access controls.

10. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
www.autoriteitpersoonsgegevens.nl

11. Changes to This Policy

We may update this privacy policy from time to time. The date of the last revision is shown below. We encourage you to review this page periodically.