Privacy policy

IndustrylinQ Europe B.V. is responsible for personal data processed through industrylinq.eu and industrylinq.nl and for the business communication that follows. Our Dutch Chamber of Commerce number is 66256526. Our public office address is Stationsweg 1, 5674 TS Nuenen, the Netherlands. Visits are by appointment.

For questions or a privacy request, email contact@industrylinq.nl or call +31 85 212 4699.

This policy covers our own website and communication. When we build or manage a client's platform, separate agreements cover personal data and our role. This website policy does not replace those agreements.

You do not need an account to read the website. The hosting service processes technical information needed to deliver pages and investigate problems, such as your IP address, requested page, time of access, browser information and any errors.

That is separate from measuring visitor behaviour for analytics. We do not load analytics without consent. We host our own fonts. For the knowledge bank, we read public articles and their images from our Google Cloud storage. Your browser may request this content directly from Google. This involves the technical information needed to deliver it, such as your IP address and the content requested. You do not need to sign in, and this does not use analytics cookies.

The form asks for your name, email address, organisation and message. Your phone number and the subject of your enquiry are optional. We need this information to understand your enquiry and reply. The form cannot send without the required fields, but you can also email or call us directly.

Please share only what is needed to explain your enquiry. Employee records, medical information, passwords and other sensitive material do not belong in an initial message. If we later need confidential documents, we will agree a suitable way to share them.

This is how we handle your enquiry:

1. We check the submission for abuse and store an accepted enquiry in our Google Cloud database. We also record the language website, time received and a reference so we can follow its processing.
2. Brevo sends an email containing the enquiry to contact@industrylinq.nl. Your name and email address are set as the reply-to details so our response reaches you.
3. We handle the enquiry through our Google Workspace mailbox. We may keep relevant conversation notes, follow-up questions and agreements as part of that communication.

An acknowledgement on the website means the enquiry has been stored. It does not mean a member of our team has already read it. If sending fails, your text remains in the open form so you can try again or email us directly.

An enquiry does not subscribe you to a newsletter or marketing list. The form does not send an automatic email to the visitor either. We do not use your message to train AI models.

The form uses Google's reCAPTCHA Enterprise. The service only loads when you try to send a completed, valid form. Google then receives technical information, such as the IP address, browser and device information, and signals about interaction with the website. It may place the _GRECAPTCHA security cookie for this purpose. Once loaded, the service can remain active while the same website window stays open.

Our server does not send your name, email address or message with the request for a spam assessment. Google processes this service's customer data on our behalf under the Google Cloud data processing terms. The assessment helps us allow or block a submission. We do not retain its score or verification token in our enquiry database or our own application logs.

We also limit the number of attempts. For this, we use a secret key to calculate a code from your IP address and the language website. The rate-limit record contains that code, not your original IP address. This does not make the data completely anonymous. Hosting and security services may still process the IP address.

The check does not decide whether you can become a client. If your message is blocked, email or call us so a member of our team can handle your enquiry. We do not use this security service for advertising tracking.

We use Google Analytics 4 to understand which information visitors use and where the website could improve. We only do this with your consent.

The banner offers 'Necessary only' and 'Allow analytics' as equally clear choices. The measurement service loads only when you consent. Without consent, we will not send cookieless analytics measurements to Google either. You can use the website and contact form without accepting analytics.

With consent, we measure which pages you view and where you click to contact us. For our email and phone links, we record only the type of contact and the position of the link, not whether you actually email or call. For the form, we measure whether you start, attempt to send and receive confirmation that the website has accepted your enquiry. If something goes wrong, we record only a general category, such as an incomplete form, a connection problem or an unsuccessful spam check. This helps us identify difficulties without reading your question.

Names, email addresses, organisations, phone numbers and messages do not enter analytics. We do not send enquiry references, security tokens, spam scores or the text of error messages either. We send only known page titles and fixed page paths, without query parameters, fragments or referring URLs. Visits and actions before consent are not sent retrospectively. If you start submitting an enquiry without analytics, we will not later record its acceptance because you gave consent while it was being processed.

Google also receives technical information through analytics, such as browser and device details and your IP address as part of the network request. Analytics uses cookies and a browser identifier. This is not automatically anonymous data.

We will configure analytics without advertising integrations, remarketing or ad personalisation. We will not record completed forms or session replays. The purpose is to improve the website, not to assess the substance of your enquiry.

You can reopen your choice using 'Cookie settings' at the bottom of every page. If you have given consent, select 'Withdraw analytics consent' there. This stops new measurements and removes the analytics cookies placed by our website. The page does not need to reload and any text you have entered in the contact form remains. Your choice applies to this domain and browser. Withdrawing on industrylinq.eu therefore does not change your choice on industrylinq.nl or on another device. Withdrawal does not affect the lawfulness of processing before it. You can contact us about information already collected.

We remember both consent and refusal for 180 days, approximately six months, and then ask again. For the addition of contact and form measurements, we ask you to choose again; a previous choice covering the more limited measurements is not carried over automatically. If your browser cannot save the choice, we do not load analytics. Your preference contains no name, email address or unique visitor code and is not sent as an analytics event.

Cookie	Purpose and lifetime
ilq_consent_nl or ilq_consent_eu	Stores your choice, the preference version and the decision and expiry times on the relevant domain. Necessary to respect your choice, for up to 180 days after your last confirmation.
_ga and _ga_*	Google Analytics cookies for recognising a browser and keeping track of a visit. Only after consent, configured for a maximum of 60 days, approximately two months, without extending them on each visit. We remove them on withdrawal.

The form security cookie is explained under spam and abuse. It is separate from analytics. Retention of measurement data at Google is also separate from cookie lifetime in your browser.

The GDPR requires a legal basis for each use of personal data. For our website and communication, these are:

• Business communication: our legitimate interest in answering enquiries and maintaining business relationships. We use only what is needed for that purpose. If you request a quotation or enter into a contract as an individual, for example as a sole trader, preparing or performing that contract may also be the legal basis.
• Operation and security: our legitimate interest in keeping the website available and protecting visitors, our team and our systems against abuse. We weigh this against your privacy. Access to your device or cookies is also assessed separately under the applicable cookie rules.
• Analytics: your consent, which you can refuse or withdraw later.
• Legal obligations: where we must retain or provide particular information, for example for our business records.

You do not have to accept this privacy policy to ask an ordinary question. It explains what happens. Sending an enquiry does not give us permission to use your information for unrelated purposes.

Within IndustrylinQ, access is limited to people handling the enquiry or responsible for the relevant systems. We use the following services to support this:

Service	Purpose and information involved
Google Cloud	Website hosting, form storage and processing. Technical visit information, accepted enquiries and limited processing and delivery records.
Google reCAPTCHA Enterprise	Form protection. Technical browser and interaction data used to assess potential abuse.
Brevo	Forwarding the enquiry. Form contents, sender and reply-to details, and delivery information.
Google Workspace	Receiving, answering and retaining emails and related business agreements.
Google Analytics 4	Only with your consent: measuring website use as described above. No form contents.

Data processing agreements apply to providers acting on our behalf. They cover security, confidentiality and the use of other service providers. We do not sell your information. Outside these arrangements, we share information only where needed to meet a legal obligation or handle a specific legal matter, and limit what we share to what is necessary.

Retention depends on the purpose and where the information is processed:

Information	Retention period
Form copy in the database and associated delivery record	90 days after receipt, after which they are scheduled for automatic deletion.
Email correspondence about an enquiry that does not lead to further work	No more than 12 months after the last substantive contact.
Ordinary technical logs under our control	30 days.
Brevo delivery logs and any stored email copies	A separate delivery history for checking delivery, investigating problems and preventing abuse. It can remain longer than our database copy, until the applicable account retention period expires or the records are deleted at Brevo.
GA4 user- and event-level data	Two months, without resetting on new activity. Aggregated reports are not covered by this setting.
Temporary records for submission limits and recognising a repeated submission	Expire after 24 hours, followed by automatic deletion. This is not the retention period for the enquiry itself.

Automatic deletion can take time; Google, for example, removes expired analytics data periodically. Deleting the database copy does not delete copies in the mailbox or at Brevo. Brevo can retain delivery history without a fixed end date where no automatic deletion rule applies. We therefore also consider records held by our providers when handling a deletion request. We do not promise that every copy is automatically erased after 90 days.

Security information processed by Google for reCAPTCHA is covered by that service's terms. Retention depends on the security function, abuse investigations and legal obligations, among other factors. Our own verification does not retain the token or score. You can contact us for information about records relating to a particular enquiry.

If an enquiry becomes an engagement, we retain the necessary agreements in the client file for as long as delivery and closure require. Statutory business records follow the relevant legal retention periods. A specific dispute or security incident may require relevant information to be kept longer. We limit this to the file concerned and review when it can be deleted.

The 30-day period does not cover all of our providers' administrative records. Google Cloud keeps certain mandatory system and administration audit logs for 400 days. These records are distinct from the contents of your contact enquiry.

For the new website, we choose European cloud regions where the service supports this. That does not mean all processing stays within Europe. Google and Brevo use international infrastructure, support and other service providers. Google Workspace and Analytics may also involve processing outside the European Economic Area.

For processing outside the European Economic Area, we use the applicable safeguards, such as an adequacy decision or European standard contractual clauses, with additional measures where needed. You can ask us for information or a copy of the safeguards that apply to your data. European hosting alone does not mean that all support and processing stay within Europe.

We design the processing around encrypted connections, limited access permissions, server-side checks of submissions and separate management of secret keys. The form code does not write message contents or security tokens to our own error logs. Access, maintenance and deletion are part of ongoing management, not just the initial build.

No system is without risk. If something goes wrong with personal data, we investigate and take appropriate action. Where the law requires it, we notify the supervisory authority and the people affected.

You can ask what personal information we hold about you and request a copy. You can have inaccurate information corrected and, where the relevant conditions apply, request deletion, restricted use or transfer of your data. You can object to processing based on legitimate interests. You can withdraw consent for analytics.

Send your request to contact@industrylinq.nl, explaining which information or contact it concerns. We ask for additional information only where needed to verify your identity or understand the request, not routinely for a copy of an identity document.

We normally respond within one month. A complex request or a large number of requests may require up to two additional months. If so, we will tell you within the first month and explain why. If we cannot meet all or part of your request, we will explain that too.

If you are unhappy with how we handle your information, you are welcome to raise it with us. You can also complain directly to the Dutch Autoriteit Persoonsgegevens or the competent data protection authority in the European country where you live or work.

This policy was updated on 26 October 2026 and applies to industrylinq.eu and industrylinq.nl.

If our use of information changes later, we will update this policy. Where a change requires fresh consent, we will ask for it first. Changing this text does not automatically give us permission to use your information for another purpose.