Privacy policy.
Last updated 11 November 2026.
This page explains, in plain English, what personal data I collect through this website, why, and what your rights are under the AVG, the Dutch name for the GDPR.
Who I am
Vortex Labs is a one-person web studio run by Sagar, based in Badhoevedorp, the Netherlands (KvK 91451396). I am responsible for your data. Questions? Email [email protected].
What I collect and why
| When | What | Why (legal basis) | How long |
|---|---|---|---|
| You send the contact form | Name, business name, email, phone (optional), type of business, plan, current website, your message | To reply to you and prepare a quote (steps before a contract) | 2 years after our last contact, unless you become a client |
| You email, call or WhatsApp me | What you send me and your contact details | To reply to you (legitimate interest, or steps before a contract) | 2 years after our last contact, unless you become a client |
| You book a call | Name, email and the time you choose, via Cal.com | To hold the call (steps before a contract) | 2 years after the call |
| You become a client | Contact and invoice details | To deliver the work (contract) and keep the records the tax authority requires (legal obligation) | 7 years, as Dutch tax law requires |
| You visit the site | Technical data such as your IP address, in the host's server logs | To keep the site secure and working (legitimate interest) | As short as the host allows, usually days |
I don't sell your data, I don't use it for advertising, and I don't build profiles.
Who else handles your data
I use a few services to run this site. They process data on my behalf and only for the purposes above:
- Cloudflare hosts the website, forwards email sent to my address, and runs Turnstile, a check on the contact form that tells people from bots (it looks at technical signals such as your IP address and browser, not the content of your message).
- Resend delivers contact form messages to my email.
- Cal.com handles call bookings.
- WhatsApp (Meta) if you choose to message me there.
- My email provider, where your messages arrive.
Some of these companies are based outside the European Economic Area. Where that's the case, data is transferred under the EU's approved safeguards, such as the EU–US Data Privacy Framework or standard contractual clauses.
Cookies and tracking
This website doesn't use tracking or advertising cookies. See the cookie page for details.
Your rights
You can ask me to show, correct or delete the data I hold about you, to limit how I use it, to object, or to send it to you in a common format. Email [email protected] and I'll reply within one month. If you're not happy with how I handle your data, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.
Changes
If I change how I handle data, I'll update this page and the date at the top.