// Privacy

Privacy statement

This statement describes which personal data Tulipsoft processes through this website and during a client relationship. Our contact details are at the bottom.

What data do we process?

Which data we receive depends on what you do:

  • If you contact us: name, email address, phone number, company name, subject and message.
  • If you book an introduction call: name, email address, the chosen time slot and any notes you add.
  • If you register for the working prototype: name, email address, company name and the answers you give about your project.
  • If you use a scan, calculator or download: the details you enter and the email address we send the result to.
  • If you submit a file request: the file you upload yourself and your explanation.
  • During a client relationship: contact, project, agreement and invoice details.
  • If you visit the website: limited technical data and aggregated visitor statistics.

What do we use that data for?

  • To answer your question and prepare an appointment or project.
  • To send a requested scan, calculation or download.
  • To perform agreements, manage projects and issue invoices.
  • To comply with statutory administrative obligations.
  • To secure the website and measure how it is used.

On what legal basis do we process data?

We process data with your consent, to prepare or perform an agreement, to comply with a legal obligation, or on the basis of a legitimate interest. We rely on the latter for example for security, limited website research and contact about an existing business relationship.

Cookies, statistics and visitor recognition

We use Plausible Analytics for visitor statistics. Plausible does not use cookies or persistent visitor identification. We use the aggregated figures to see which pages are visited and which links, buttons, demos and forms are used. We do not send anything you enter in a form to Plausible.

We only load Snitcher if you accept marketing cookies. This lets us recognise organisations visiting the website. You can change your choice via "Cookie preferences" at the bottom of the page. Your preference itself is stored locally in your browser.

Forms are protected against automated abuse with Cloudflare Turnstile. Cloudflare processes technical signals about the request and the browser for this purpose.

Want to book an introduction call? We then open Calendly's calendar. The Calendly script only loads after you click the calendar button. Calendly processes the details you fill in when booking, such as your name, email address and the chosen time slot, and may place its own cookies in the calendar window. Calendly is based in the United States, see "Processing outside the EEA".

Processors

We currently use the following service providers for the website:

  • Plausible Analytics (aggregated visitor statistics without cookies).
  • Snitcher (recognition of visiting companies, only after consent).
  • Postmark (sending of forms and requested emails).
  • Cloudflare (hosting, security and checking of forms).
  • Calendly (booking introduction calls, only loads after a click on the calendar button).
  • Administration and collaboration services needed for projects and invoicing.

We only share data that a service provider needs for its task. Where the law requires it, we agree on processing and security.

Processing outside the EEA

Some service providers are based outside the European Economic Area or engage parties there. If data is processed outside the EEA, we use the safeguards the GDPR prescribes for this, such as an adequacy decision or standard contractual clauses.

How long do we keep your data?

We do not keep data for longer than necessary. In general, the following retention periods apply:

  • Individual enquiries and correspondence: a maximum of 2 years after the last contact.
  • Uploaded files: only for as long as they are needed to assess the request.
  • Project and client data: during the relationship and for a maximum of 2 years afterwards, unless keeping it for longer is necessary for an agreement or dispute.
  • Invoice and administrative data: for as long as the statutory tax retention period applies.
  • Consent and cookie preferences: for as long as needed to demonstrate and apply your choice.

What rights do you have?

Under the law you have at least the right to:

  • request a copy of and access to your data;
  • receive information about the processing of your data;
  • have incorrect data corrected and incomplete data completed;
  • have your data deleted or its use restricted;
  • object to the use of your data;
  • withdraw consent you have given (applies to future use);
  • receive your data in a common format (data portability);
  • lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

What if you have questions or complaints?

If you have questions or complaints about the use of your data or about this privacy statement, please contact:

Tulipsoft
De Trompet 1930, 1967 DB Heemskerk
085 06 456 30
Email us

Can this privacy statement change?

Yes. When it changes, we update this page. Last updated: 27 September 2026.