Privacy policy.

Atlas Agile is a web, app and AI development studio working from the Netherlands. We decide why and how the personal data described on this page is handled, which makes us the controller for it.

Questions about this policy, or about data we hold on you, go to info@atlasagile.nl.

This policy covers this website and the enquiries that reach us through it. Work we do for a client is governed by the agreement signed with that client, including any data processing agreement, and not by this page.

Three things, and nothing beyond them:

• What you type into the contact form. Your name, email address, company (optional), the type of work and budget range you select, and the description of your project.
• What you send us by email. If you write to us directly, we hold that message and your address the same way we hold any correspondence.
• Technical request logs. Our hosting provider records the usual server information for every request: IP address, browser user agent, the page requested and a timestamp. We use it to keep the site up and to spot abuse. We do not build profiles from it.

• To answer you. A brief exists so we can reply to it and, if it goes further, prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• To run and secure the site. Legal basis: our legitimate interest in a site that stays available and is not abused (Article 6(1)(f) GDPR).

We do not sell or rent personal data, we do not use it for advertising or profiling, and we do not add you to a mailing list because you sent a brief. This site sets no cookies, runs no analytics or advertising scripts, and embeds no social media trackers. The fonts are served from our own domain, so loading a page does not tell a third party you visited.

A few service providers process data on our instructions so the site and our email can work:

• Vercel hosts this site and delivers it, which includes the request logs described above.
• Resend delivers the contact form submission to our mailbox as an email.
• Our email provider stores the mailbox that receives your message.

None of them may use your data for their own purposes. Where a provider processes data outside the European Economic Area, that transfer relies on the European Commission's standard contractual clauses or an equivalent safeguard.

Enquiry correspondence is kept while it is still relevant to a possible or ongoing project, and no longer than 24 months after our last contact, after which it is deleted. If the enquiry becomes a client relationship, the project agreement and our statutory retention obligations govern how long the records are kept. Server logs are short-lived and rotate on our host's schedule.

Under the GDPR you can ask us for a copy of the data we hold on you, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it, or ask for it in a portable form. Email info@atlasagile.nl and we will answer within one month.

If you think we have handled your data badly, you can complain to a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens. We would rather you told us first, so we can put it right.

The site is served over HTTPS. Briefs land in a mailbox that only the studio can read, and access to our accounts is limited to the people who need it. No system is perfect, so if something does go wrong and it puts your data at risk, we will tell you and the relevant authority as the law requires.

If what we do with personal data changes, this page changes with it and the date at the top is updated. Material changes will be described here rather than slipped in quietly. See also our terms and conditions.