TT Tech logoTT Tech
Laten we praten
← Back to home

Privacy Policy

Effective date: 3 June 2026

1. Who I am

TT Tech is run by Tom Teurlings, a sole proprietorship registered in the Netherlands (KvK 87758849, VAT NL004471883B75), based in Amsterdam. For any privacy-related inquiry: tom@tttech.nl.

2. What this policy covers

How I handle personal data in connection with the website www.tttech.nl — for anyone visiting the site or contacting me through it.

3. What I collect

Website analytics to understand which parts of the site work, performance measurements, the contents of any message you send me, and — if you use the free Quickscan — the website you submit along with the name, email, and role you provide so I can deliver the report.

What I don't collect: passwords or accounts (no account system on this site), payment data (no purchases happen here), special categories of personal data (health, political opinion, religion, etc.), or data from third-party enrichment providers.

4. Legal bases

ActivityBasis (GDPR Art. 6)
Website analyticsLegitimate interest (1f)
Performance measurementLegitimate interest (1f)
Security and abuse preventionLegitimate interest (1f)
Handling your contact or bookingSteps prior to contract (1b)
Tax-relevant recordsLegal obligation (1c)

Where I rely on legitimate interest, I have weighed my interests against your rights and freedoms. You may object at any time — see Section 8. Details of this assessment are available on request.

5. Retention

  • Analytics events: 12 months
  • Session recordings: 30 days
  • Quickscan submissions and reports: 12 months, or until you request deletion
  • Inbox conversations: duration of working relationship, then 3 years
  • Invoices and tax-relevant data: 7 years (Dutch fiscal obligation)

6. Who I share data with

6.1 Service providers

I use these processors. Each operates under a data processing agreement.

ProviderPurposeLocation
PostHogAnalyticsEU
VercelHostingEU edge / US (DPF)
Google WorkspaceEmail + calendarUS (DPF)
SupabaseQuickscan databaseEU
ResendQuickscan email deliveryEU
UpstashRate limitingEU
AnthropicAI analysis (Quickscan)US (DPF)

6.2 Legal requirements

I may disclose your data if required by law — for example, in response to a subpoena, court order, or other valid legal request, or to protect rights, safety, or property.

6.3 Business transfers

If TT Tech is ever acquired or merged into another entity, your data may be transferred as part of that transaction. I will notify you beforehand.

I do not sell personal data.

7. International transfers

Analytics data stays inside the EU. Hosting, email, and calendar use providers that may transfer data to the US.

These transfers rely on the EU-US Data Privacy Framework (an adequacy mechanism recognised by the European Commission) and, where applicable, EU Standard Contractual Clauses with supplementary technical and organisational measures.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. Email tom@tttech.nl — I respond within one month.

To stop being tracked on this site: enable Do Not Track in your browser (this site honours it automatically), use a privacy extension, or email me to delete your sessions manually.

9. Cookies

No tracking cookies from third-party networks. A local identifier is stored in your browser's storage to distinguish repeat visits from new ones — same domain only, no cross-site.

10. Data security

I implement appropriate technical and organisational measures to protect your data:

  • Encryption in transit (TLS 1.3) and at rest (provider-managed AES-256)
  • Session replay input fields are masked client-side before recording leaves your browser
  • Access controls and multi-factor authentication on all admin tooling
  • Regular dependency updates and security patching
  • EU-based primary hosting

11. Children's privacy

This site is intended for business decision-makers and is not directed at children under 16. I do not knowingly collect data from anyone under 16. If you believe I have, email me and I delete it.

12. Third-party links

This site links out to external pages (LinkedIn, PostHog, the Autoriteit Persoonsgegevens, the Quickscan booking link, etc.). I am not responsible for the privacy practices of sites I link to — review their own policies before sharing data with them.

13. Complaints

You have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl). Mail me first if you can — usually we can sort it out together.

14. Changes to this policy

I may update this policy when I add new services or processors. The effective date at the top reflects the latest version.

15. Contact

Tom Teurlings — TT Tech
Amsterdam, Netherlands
KvK 87758849 · BTW NL004471883B75
tom@tttech.nl