Privacy policy

Last updated: 9 November 2026. This policy covers the website breachwell.com. The Breachwell application has its own privacy policy.

Who is responsible

Breachwell B.V., [add street, postcode, city], the Netherlands, KvK [add number]. Contact: joost@breachwell.com.

What we process, and why

• Website visits. Our hosting provider processes technical data such as your IP address and browser details in server logs, to deliver the site and keep it secure. We do not use analytics or advertising cookies on this website.
• When you email us or request a call or audit. We process your name, email address, company and the content of your message to reply and to carry out the work you ask for. Basis: steps taken at your request before a contract, and our legitimate interest in answering business enquiries.
• Contracts you send for an audit. These are processed only to perform the audit, kept confidential, and deleted or returned when the work is complete, unless we agree otherwise in writing.

Who else processes data for us

We use service providers for website hosting and email. They process data on our behalf under data processing agreements. Where data is transferred outside the European Economic Area, we rely on the safeguards required by the GDPR.

How long we keep it

Enquiries are kept for as long as needed to handle them and for a reasonable period after, and invoices for the period required by Dutch tax law. Server logs are kept for a short period set by the hosting provider.

Your rights

You can ask us for access to, correction of or deletion of your personal data, and you can object to or ask us to restrict processing. Email us and we will respond within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If we change this policy we will update the date above.