Legal

Privacy Policy

How we handle personal data when you visit our site or get in touch.

Last updated: 26 May 2026

1. Controller

Zalvant (Netherlands) is the controller for personal data described in this policy, unless we process data solely on your instructions under a client agreement.

2. Data we collect

Contact form: name, email, company, and message content you submit.

Website usage: technical logs (IP address, browser type, pages visited, timestamps) via hosting and analytics tools where enabled.

AI demo: which demo questions you select and related metadata needed to deliver responses and enforce rate limits; we do not use demo inputs to train models.

Cookies: essential cookies for site function; optional analytics cookies only if you consent where required.

3. Why we use data

To respond to enquiries and provide services you request.

To operate, secure, and improve our website.

To comply with legal obligations and defend legal claims.

Legal bases under GDPR: contract/pre-contract steps, legitimate interests (site security, B2B marketing to existing contacts), and consent where applicable.

4. Sharing & processors

We use trusted processors such as hosting (e.g. Vercel), email or form providers, CMS (Sanity), and AI API providers (e.g. Anthropic) strictly to deliver the service.

Processors are bound by data processing terms. We do not sell personal data.

5. Retention

Contact enquiries: typically up to 24 months after last interaction unless a longer period is needed for contracts or law.

Server logs: limited retention aligned with security needs.

AI demo data: short retention for abuse prevention and operations; not kept longer than necessary.

6. International transfers

Some processors may be located outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Your rights

Under GDPR you may request access, rectification, erasure, restriction, portability, or object to processing. You may withdraw consent at any time where processing is consent-based.

You may lodge a complaint with your local supervisory authority; in the Netherlands this is the Autoriteit Persoonsgegevens.

To exercise rights, contact us via the Contact page.

8. Security & children

We apply reasonable technical and organisational measures to protect data. No method of transmission over the internet is 100% secure.

Our site is not directed at children under 16; we do not knowingly collect their data.

9. Updates

We may update this policy. Material changes will be reflected by updating the date above.