This policy explains what personal data is processed when you use this website or contact its owner, why, for how long, who else is involved, and what your rights are. It complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
The controller of your personal data is Tekke Voorham, self-employed professional (autónomo) based in Barcelona, Spain. Identification details are listed in the box on this page. For any privacy question or to exercise your rights, write to hi@tekkevoorham.com.
2. What data is processed, and why
When you use the contact form
- Data: your name, email address, company or website (optional), what you are looking for, budget range, the message you write, the language of the page, your answers to Blip’s quick questions if you used them (for example “Business · Law firms · AI that saves my team time”), and the fact that you accepted this policy.
- Purpose: to reply to your enquiry and, if you wish, to prepare a proposal or quote.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and your consent, which you give by ticking the box (Article 6(1)(a) GDPR).
- The form also contains two invisible anti-spam checks (a hidden field and the time taken to fill in the form). They do not identify you.
- Where the enquiry came from: the page you sent it from and, if you arrived through a link with campaign tags (such as
utm_sourceor an ad click reference), those tags, the page you first landed on and the website that referred you. Your browser keeps them for the current visit only — or up to 90 days if you accepted analytics — and they are sent only together with the form, so I can see which channels bring enquiries. They are never used for advertising profiles. - After you send the form you receive an automatic confirmation email with a copy of your message and a link to an optional follow-up questionnaire.
When you fill in the follow-up questionnaire
- Data: your answers about the project (type of work, goals, current website, markets and languages, tools to integrate, hosting preference, timeline, budget range, who decides, how you found this website and any extra notes), linked to the name and email address from your enquiry.
- Purpose and legal basis: as for the contact form — preparing a proposal at your request (Article 6(1)(b) GDPR). Answering is optional.
- The link in your email contains a signed code that identifies your enquiry; it expires after 30 days.
When you leave a review (clients only)
- Data: your review text, rating, name, role and company, and — privately — your recommendation score, feedback and any results you share.
- Purpose and legal basis: publishing your review on this website with the company logo, only if you tick the permission box (consent, Article 6(1)(a) GDPR); using your private feedback to improve the service (legitimate interest, Article 6(1)(f) GDPR). The private part is never published.
- You can ask for a published review to be changed or removed at any time by emailing hi@tekkevoorham.com.
When you email or send a WhatsApp message
- Data: your name, contact details and whatever you choose to include in your message.
- Purpose and legal basis: as for the contact form — to answer you and, where relevant, to prepare or perform a contract (Article 6(1)(b) GDPR).
- If you use WhatsApp, the conversation is also processed by WhatsApp Ireland Ltd. (Meta) under its own terms and privacy policy.
When you chat with Blip (the AI assistant)
- Data: the messages you type, Blip’s replies, the language and page you were on, the time, and whether you then chose to contact the owner. No IP address or other identifier is stored with the conversation; a random conversation code is kept in your browser for the current visit only.
- Purpose: answering your questions about the owner’s services, work and prices, pointing you to the right page, and improving Blip’s answers.
- Legal basis: legitimate interest in answering questions from visitors who choose to use the assistant (Article 6(1)(f) GDPR) and, where you ask about a project, steps taken at your request before a contract (Article 6(1)(b) GDPR).
- Blip is an AI: its answers are generated automatically by a language model (Claude, by Anthropic) from the content of this website, and can contain mistakes. It takes no decisions about you. Please don’t share sensitive personal data in the chat.
When you browse the website
-
Technical data: to deliver the pages securely, the hosting provider processes technical data such as your IP address, browser type and the pages requested, in short-lived server logs. Legal basis: legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
-
Analytics (only with your consent): if you accept analytics in the cookie banner, visit statistics are collected with two tools:
- Vercel Web Analytics — which pages are visited, the referring website, country and device type. No cookies, no stored IP addresses, no tracking across websites.
- Google Analytics 4 — pages viewed, how you arrived, approximate location (derived from your IP address, which is not stored), device and browser, and actions such as sending the contact form, linked to a random identifier stored in the
_gacookies. Advertising features and Google Signals are switched off.
Legal basis: your consent (Article 6(1)(a) GDPR and Article 22.2 LSSI-CE), which you can withdraw at any time via “Cookie settings” in the footer.
3. How long data is kept
- Enquiries that do not lead to a project: up to 12 months after the last contact, and then deleted.
- Enquiries that lead to a project: for the duration of the working relationship and afterwards for as long as legal obligations require (for example, 6 years for accounting records under the Spanish Commercial Code, and the limitation periods for tax purposes).
- Server logs: a few days to a few weeks, according to the hosting provider’s retention.
- Blip conversations: 90 days, then deleted automatically.
- Analytics data: Vercel keeps aggregated statistics only; Google Analytics keeps event data for a maximum of 14 months, after which it is deleted automatically.
4. Who else processes your data
Your data is never sold or used for advertising. It is shared only with the following service providers, who act as processors on the owner’s behalf under data processing agreements:
| Provider | Role | Location and safeguards |
|---|---|---|
| Vercel Inc. | Website hosting, delivery and (with consent) Web Analytics | United States — EU Standard Contractual Clauses and the EU–US Data Privacy Framework |
| Google Ireland Ltd. (Google Analytics 4) | Visit statistics, only with your consent | Ireland / EU; transfers to Google LLC in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses |
| Resend (Plus Five Five, Inc.) | Delivering the contact form message to the owner’s inbox | United States — EU Standard Contractual Clauses |
| Supabase, Inc. | Storing enquiries, questionnaire answers and reviews in a private database so the owner can follow them up | Data stored in the EU (Paris, France); Supabase, Inc. is based in the United States — EU Standard Contractual Clauses |
| Anthropic, PBC (Claude) | Generating Blip’s answers from your chat messages | United States — EU Standard Contractual Clauses; messages sent through its API are not used to train its models and are kept only for a limited period under its commercial terms |
| Apple Distribution International Ltd. (iCloud Mail) | Email hosting for hi@tekkevoorham.com | Ireland / EU, with Apple’s contractual safeguards for any transfers |
| WhatsApp Ireland Ltd. | Only if you choose to contact the owner via WhatsApp | Ireland / EU, under WhatsApp’s own privacy policy |
Data may also be disclosed where required by law, for example to tax authorities or courts.
5. International transfers
Some providers above are based in the United States. Transfers take place on the basis of the European Commission’s adequacy decision for the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses (Article 46 GDPR).
6. Your rights
You have the right to:
- access the personal data held about you;
- rectify inaccurate data or complete incomplete data;
- erase your data (“right to be forgotten”);
- restrict processing in certain circumstances;
- object to processing based on legitimate interest;
- data portability — receive your data in a structured, commonly used format;
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email hi@tekkevoorham.com with a description of your request. You will receive a reply within one month. If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your EU country of residence.
7. Security
Reasonable technical and organisational measures are applied to protect your data: encrypted connections (HTTPS), access restricted to the owner, spam protection on the contact form, and providers that meet recognised security standards.
8. Other information
- The website is not directed at children under 14 and does not knowingly collect their data.
- No automated decision-making or profiling takes place.
- Providing your data is voluntary, but without a name, email address and message it is not possible to reply to an enquiry.
9. Changes to this policy
This policy may be updated to reflect changes in the website or the law. The date at the top shows when it was last changed.
If translations differ, the Spanish text prevails.