How we handle your data. In plain words.

The controller.

Product Builders ("we", "us") is the data controller for personal data processed through this website. We're registered in the Netherlands under KvK 93137095, at P.E. Tegelbergplein 4, 1019 TA Amsterdam. You can reach us at hello@productbuilders.nl for any privacy question.

Only what you send us.

When you fill in the contact form on this site we receive the following fields. Everything is optional except where the form marks it required.

• Name So we know who we're replying to. Required.
• Email So we can reply. Required.
• Company Helps us understand context. Optional.
• Role Helps us understand context. Optional.
• Project type Helps us suggest the right way in. Optional.
• Message The content of what you want to discuss. Required.
• Server logs Our hosting provider records standard request logs (IP address, timestamp, user‑agent) for security and debugging. A copy of your submission is written to those logs as well, so an enquiry is never lost in transit. It rotates out on the same thirty day cycle.

To reply to you. Nothing else.

We use the data you submit for one purpose: to read your message and reply. The lawful basis under the GDPR is your consent and, once we're in conversation, the steps taken at your request before entering into a contract (Article 6(1)(a) and 6(1)(b)). Server logs are processed on the basis of our legitimate interest in operating a secure site (Article 6(1)(f)).

Us, and our hosting providers.

Your message is read by the builder responsible for new conversations. We use a small number of processors to operate the site and our inbox. We have written agreements with each of them and we choose providers that keep data inside the EU/EEA where possible.

• Hosting The site runs on a European cloud provider that stores server logs.
• Slack Your message is posted to a private channel in our Slack workspace, where the builders who answer enquiries read it.

As long as the conversation is alive.

If we end up working together, we keep the relevant correspondence for the duration of the engagement and seven years after, which is the retention period required by Dutch tax law. If we don't end up working together, we delete the conversation within twelve months of the last reply. Server logs are kept for thirty days, then rotated out.

We don't track you.

This site sets no cookies and runs no analytics or advertising trackers. There is no cookie banner because there is nothing to consent to.

We keep it in the EU.

We pick processors that store data in the EU/EEA. Where any processor falls back to a server outside the EU we rely on the European Commission's Standard Contractual Clauses to cover the transfer.

You're in charge of your data.

Under the GDPR you can ask us to do any of the following. Email hello@productbuilders.nl and we will reply within thirty days.

• Access Get a copy of the personal data we hold about you.
• Rectify Correct anything that's wrong.
• Erase Have us delete your data, where we're not legally required to keep it.
• Restrict Pause processing while we sort something out.
• Object Object to processing based on legitimate interest.
• Portability Get your data in a portable format.
• Complaint Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

If this page changes, the date at the top changes too.

We will update this page if our processing changes. Material changes are dated at the top of this page. We don't email you about changes.